Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
File: mwj052FQMJu9IksB-J7CA8H8Vts.mft (raw, json)
Hash identifier: T4CbTtYfFlGVNK4M1DMqe+9/LU627MFGTJie3+j9u34=
Subject key identifier: 65:6C:8E:63:04:19:0B:76:F0:C5:03:F4:6A:33:3F:DF:86:6C:3B:B0
Authority key identifier: 9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
Certificate issuer: /CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Certificate serial: 0196B3D8E70B9F9AE902F5A761EC7FE80020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 07:00:58 +0000
Manifest this update: Fri 09 May 2025 07:00:58 +0000
Manifest next update: Sat 10 May 2025 07:00:58 +0000
Files and hashes: 1: mwj052FQMJu9IksB-J7CA8H8Vts.crl (hash: KRBma7vbXKyo+P87gw8vLnDMEs9hVtt4fOyTExZ/OKA=)
2: yMCWx_vwP00jLW3_uRevvXcRMmk.roa (hash: xnNpTecLSpiwvjQT9lRJw8IJFmY7Zwk40Z4AZXbx8O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:e7:0b:9f:9a:e9:02:f5:a7:61:ec:7f:e8:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Validity
Not Before: May 9 07:00:58 2025 GMT
Not After : May 10 07:00:58 2025 GMT
Subject: CN=656c8e6304190b76f0c503f46a333fdf866c3bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:f8:b5:75:97:e7:55:4c:41:00:b5:fd:ce:
85:6b:e2:6e:8a:16:09:7f:92:33:7b:10:fa:59:31:
16:06:5b:ff:3e:eb:3f:2f:f3:0c:3a:3d:40:91:48:
2f:01:1d:23:79:b8:5d:78:0b:88:60:49:7f:de:f1:
d8:25:49:34:2d:d4:96:8d:47:cd:49:b6:59:aa:97:
1f:28:e4:c2:d6:95:8b:4a:d7:75:7e:ca:82:2e:71:
8d:f8:bc:2f:47:02:9b:06:f4:82:49:e3:bd:6a:60:
df:be:1e:ba:f0:5c:f4:3f:7e:30:bd:ce:54:4d:41:
7b:11:46:23:80:91:95:4e:6a:1c:00:71:6a:71:21:
87:aa:11:ae:0c:ac:b5:29:93:ef:5b:55:fe:67:50:
6f:73:5b:22:63:ed:85:6f:ae:83:90:aa:7a:47:e4:
e2:29:c9:68:8c:a7:59:e9:d1:3b:7a:25:4f:3b:4e:
d8:2d:f7:45:d3:97:3f:92:83:25:46:97:c9:49:11:
2f:a5:5a:a8:ed:3b:6b:2a:83:ae:aa:cd:1c:24:78:
d4:5a:3c:3f:4a:61:10:d0:f1:b3:fa:4a:f2:e8:c1:
9b:b5:bc:52:cf:18:a1:e5:da:d4:cc:a4:14:79:62:
3f:77:19:30:a4:62:68:34:98:31:11:a9:9e:2a:4b:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6C:8E:63:04:19:0B:76:F0:C5:03:F4:6A:33:3F:DF:86:6C:3B:B0
X509v3 Authority Key Identifier:
keyid:9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1a:94:d0:c0:df:06:c2:9c:30:8a:55:8c:bd:1b:59:c3:4f:
19:b8:55:1c:3b:a1:43:f9:4f:95:15:4c:28:3a:b7:e6:0e:07:
c4:21:18:6a:00:34:12:7c:5c:ac:0d:1a:f8:e2:75:77:33:26:
27:7c:98:63:62:ea:0f:99:45:8e:df:4e:ad:1e:d3:fa:c4:85:
57:d3:6b:34:23:0e:2a:71:7c:9c:bc:c3:02:5a:9d:b6:38:ac:
b3:a0:5f:1f:57:0d:f8:5d:90:7f:f1:71:98:5e:3c:4d:5d:2c:
d8:bb:e7:15:8f:76:51:53:d1:03:54:1e:b7:b7:3e:5a:32:86:
7f:86:79:b3:dd:cd:d7:74:d4:e6:0a:b2:cf:1d:7f:00:37:3f:
2f:9f:93:74:08:d8:2f:4e:0b:80:76:fe:e1:30:01:36:57:e9:
d1:a7:24:23:ea:b5:38:f6:de:c4:3a:a4:d4:07:55:36:c0:f6:
93:30:71:d1:20:69:50:66:13:24:c3:dc:86:38:cb:9e:54:20:
a6:7c:db:5f:3e:39:64:cb:a7:1b:fa:3f:78:72:d5:e7:79:db:
f2:0c:19:81:52:fd:5c:f8:3f:37:9b:5d:20:e1:90:d2:23:98:
e6:b6:c1:dd:8e:8f:41:38:82:e0:09:59:5d:fe:e7:21:11:36:
74:4f:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:29:05 2025 by rpki-client