Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: o+sHCfS8AIblmyaB29H4w5arA4brGJ2lRmbw6WBSKoE=
Subject key identifier: D7:48:E4:A3:85:DC:55:9E:40:59:1F:F3:F3:02:F0:66:6A:CC:FD:98
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 0196AFC507A8967FC61F529E7B9014714622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0BAF
Signing time: Thu 08 May 2025 12:00:47 +0000
Manifest this update: Thu 08 May 2025 12:00:47 +0000
Manifest next update: Fri 09 May 2025 12:00:47 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: ZMf9IIiaZccAJxT1GgEsF8+sBrsIH0ZOgc1ydDn6tKs=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c5:07:a8:96:7f:c6:1f:52:9e:7b:90:14:71:46:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: May 8 12:00:47 2025 GMT
Not After : May 9 12:00:47 2025 GMT
Subject: CN=d748e4a385dc559e40591ff3f302f0666accfd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:89:03:1b:d9:d4:23:40:6c:ca:1a:48:11:
98:7d:d4:a6:2b:5b:25:bf:b5:1e:6a:cd:36:74:33:
eb:66:6c:b9:8c:84:3d:a1:f1:12:b5:05:3a:42:3e:
1b:4b:2e:39:43:63:b7:dd:ef:76:a6:6b:6c:70:b2:
c7:08:1c:ae:53:2b:c1:02:a5:9e:87:08:04:52:6f:
ed:2a:8b:3e:b9:e0:76:59:8c:81:07:b3:06:95:83:
4e:20:05:04:86:a1:c6:e3:f3:23:33:da:bc:e2:e4:
0c:7f:34:41:00:c0:bc:a3:8f:e1:ba:20:b6:7e:6a:
25:42:09:24:b3:52:1c:13:28:fe:d8:41:15:bf:28:
f0:7b:95:96:9d:18:eb:97:2d:74:ba:4c:d8:59:d5:
d6:22:61:b3:c2:a2:b8:7a:15:0a:0f:82:21:21:96:
0b:66:e0:e8:43:3f:91:a5:c9:94:20:c4:d2:12:53:
9f:dd:ea:4e:c6:cf:2b:9c:12:a0:85:eb:d5:cc:b4:
b6:5c:75:dc:af:67:92:4f:cf:f1:ae:6c:3b:f2:f7:
d3:f9:56:03:31:53:b0:15:86:cb:f8:3f:a0:90:65:
90:e2:fd:73:37:e5:59:f1:db:9f:29:bd:83:04:e2:
aa:52:86:c4:df:63:4e:58:65:6e:70:69:a7:8f:4c:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:48:E4:A3:85:DC:55:9E:40:59:1F:F3:F3:02:F0:66:6A:CC:FD:98
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2a:00:76:cb:02:3a:7f:95:a6:62:c8:a8:d1:cf:ea:e6:27:
18:09:ed:70:ce:9f:15:c2:04:19:26:a3:e8:5b:4f:88:0c:2d:
53:0a:79:fc:aa:3f:33:50:12:55:a9:00:d8:9e:53:95:b2:61:
ff:93:6a:db:f6:e5:9a:bf:06:69:e0:7f:aa:ea:af:5a:86:b1:
20:2b:a0:4e:76:c8:15:d2:30:94:55:b4:88:90:de:d8:f2:85:
01:24:1e:71:e0:35:45:9c:67:0e:42:a6:99:fe:24:e1:5f:68:
d8:52:ee:ad:a8:f9:3e:47:81:f3:13:26:dd:bf:95:de:86:dc:
87:b0:f7:79:9c:f2:7b:4c:e7:09:70:88:27:55:76:38:0d:6a:
01:93:1d:9c:21:d7:37:7a:c8:bf:fa:7e:0f:11:04:38:d4:fe:
f8:68:a8:7d:e2:f0:99:d2:89:03:0b:b1:cc:41:4e:8c:d6:0c:
18:a6:5e:37:41:67:05:3b:58:a7:5c:d4:c1:86:3b:0f:13:8a:
c4:64:c4:c3:eb:2a:e3:63:8f:b9:ba:ee:1a:6e:ca:00:e9:7a:
52:b9:dd:19:ca:a5:7a:a9:eb:2a:89:45:8d:80:e5:55:0b:dd:
6b:4a:62:b8:d5:2d:e4:76:5f:18:26:27:0f:c4:19:84:4d:c6:
b0:71:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:25:49 2025 by rpki-client