Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: JgDh7EYWmRKD+FFCREwXOt6mkxEZVLX4fORLpV9YUeU=
Subject key identifier: 26:03:AC:6D:9D:E7:49:12:26:9D:B1:08:1B:72:EB:A7:DC:41:07:FA
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 0196BAB657CE09DF6BA4DF7431B6A6699864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 04DD
Signing time: Sat 10 May 2025 15:00:34 +0000
Manifest this update: Sat 10 May 2025 15:00:34 +0000
Manifest next update: Sun 11 May 2025 15:00:34 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: L9Tq4YWZPUEtMtaIFZFX5+7Ht1PP3dKb9mZicZHdEwM=)
2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:57:ce:09:df:6b:a4:df:74:31:b6:a6:69:98:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: May 10 15:00:34 2025 GMT
Not After : May 11 15:00:34 2025 GMT
Subject: CN=2603ac6d9de74912269db1081b72eba7dc4107fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:4d:a1:56:22:6e:33:dc:2c:b3:77:0b:d9:
17:5b:30:15:d9:96:e3:67:60:c3:02:41:7e:ed:42:
dc:e0:de:01:20:54:c7:df:35:47:f0:54:6d:34:c6:
44:0b:39:f3:bc:c5:e3:9c:56:61:65:b3:e5:91:dd:
9b:48:e8:2c:a2:d0:e7:a1:ea:48:ee:86:b5:46:44:
f2:ac:11:e0:f1:00:0e:29:fd:bf:73:81:52:b0:72:
4e:dd:fb:e6:23:2f:3a:7c:a7:28:53:d4:31:9f:6e:
58:b8:0b:ef:5a:42:11:8f:c8:45:00:de:d1:35:7f:
ea:62:49:82:bc:63:2f:f8:dc:ab:f7:98:c0:64:3d:
a3:51:32:5d:99:16:a2:14:b8:5d:f2:f6:7f:a2:4a:
07:ec:74:ae:61:73:2b:e5:cc:68:a1:a3:ea:5d:a5:
26:e7:26:b8:a2:db:68:a8:82:ef:17:1a:94:60:92:
05:db:85:2c:e2:27:22:14:70:84:30:cd:71:f6:fa:
58:0a:b0:a9:40:94:8e:48:73:fa:6e:8b:27:d1:45:
75:e6:4c:ef:fc:89:e9:52:20:c6:ba:62:be:04:dd:
ad:e2:0d:07:03:74:f9:8d:f5:ae:32:7d:01:3b:99:
1a:03:16:24:e5:59:ab:f5:91:22:a4:1d:ab:9f:cb:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:03:AC:6D:9D:E7:49:12:26:9D:B1:08:1B:72:EB:A7:DC:41:07:FA
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f0:21:ae:51:da:1d:bc:02:96:16:3d:04:6c:b6:70:3b:90:
78:01:85:84:0a:25:31:b7:c8:a9:ae:cd:71:d4:d1:3f:9e:b3:
1a:c1:4c:c2:80:7c:91:80:01:cf:48:9b:fc:68:6d:04:44:13:
51:59:59:8e:20:77:c7:64:f0:00:45:40:ac:a5:9e:cf:f2:81:
5b:92:86:12:32:0f:1c:2d:e8:9c:ba:e8:5e:2f:62:3d:1d:78:
03:1e:84:8f:2f:53:e3:76:8f:f2:85:21:dc:b4:16:18:a9:e8:
5c:5c:2b:ca:9e:dd:e7:3e:04:c4:dc:13:47:93:76:ff:d8:06:
d3:d9:84:36:7f:90:40:b3:4c:62:e6:d3:98:02:05:cf:eb:6d:
ad:14:64:43:5e:40:f2:51:73:4e:99:82:d7:e5:d6:e6:9c:d0:
72:40:44:89:89:76:75:ac:6f:8e:44:0d:a4:5e:36:c2:38:12:
5b:98:c0:cf:ac:dc:92:37:b5:16:e1:95:63:a7:37:e5:94:9b:
31:48:01:2f:81:5e:8a:92:33:b9:e4:ee:74:68:49:cc:02:b6:
32:d4:94:de:20:d8:61:1d:34:da:a0:fe:6f:24:0c:7d:70:ee:
58:de:94:ce:1d:49:f6:fa:a3:e6:24:6f:a9:c6:86:13:b4:83:
82:25:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:31:10 2025 by rpki-client