Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: 2xyW8Pfj014TNae2c2BbioyKUbRZx6ngnSEZCQoznwM=
Subject key identifier: 6B:D9:09:8E:4B:10:6B:86:8E:F0:40:5D:FE:4C:BE:E7:E8:63:5F:42
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 0196B3A15A4E985BE15C85343B0B7B4F08B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 153B
Signing time: Fri 09 May 2025 06:00:18 +0000
Manifest this update: Fri 09 May 2025 06:00:18 +0000
Manifest next update: Sat 10 May 2025 06:00:18 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: XM1G6ykxQSfQ04i0udebGVj7YCFfZ44I4SPwPC6OFgM=)
2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:5a:4e:98:5b:e1:5c:85:34:3b:0b:7b:4f:08:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: May 9 06:00:18 2025 GMT
Not After : May 10 06:00:18 2025 GMT
Subject: CN=6bd9098e4b106b868ef0405dfe4cbee7e8635f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:2b:c5:51:8b:8f:c4:86:8c:78:31:b7:66:
d8:41:f5:01:46:d9:d4:f2:a8:37:41:d6:7c:1b:e2:
70:e2:13:06:46:21:9f:29:92:c0:2f:89:79:33:05:
e9:99:f8:e6:c1:e7:9c:b2:54:2d:6f:a9:0d:e9:e4:
ec:98:1c:32:5d:c4:f0:ba:b5:c1:7f:e5:88:06:90:
5b:99:3f:97:3e:25:21:a2:26:b8:ee:09:30:12:2c:
f8:b5:0f:20:fb:aa:9e:35:28:42:5f:c1:b8:49:64:
39:dd:9e:60:49:75:4a:ed:26:6a:f0:a7:a7:be:0c:
8d:fc:be:d3:33:35:19:cd:a2:40:22:18:a3:1b:21:
a3:33:83:8f:5a:15:2e:5a:9c:d5:22:0c:c2:41:9b:
1d:d9:2b:f8:83:37:0c:c0:f6:82:30:2c:dd:6a:d6:
88:6f:6e:a8:de:e6:39:da:1d:6c:00:96:fd:2b:7a:
50:b9:15:cc:0d:31:10:d6:71:61:c2:ca:2a:b4:91:
07:b8:b4:89:5b:f5:46:26:0f:31:ec:1d:e6:ac:5d:
7d:44:9c:63:f4:aa:9a:75:0d:4f:b6:b7:72:34:1e:
2e:9e:90:a2:15:35:bb:6f:71:e4:d6:05:1e:00:c3:
e1:d4:e9:ab:4a:dd:54:10:c1:74:04:d3:d5:f3:bc:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D9:09:8E:4B:10:6B:86:8E:F0:40:5D:FE:4C:BE:E7:E8:63:5F:42
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e5:f6:76:b4:f3:42:d5:36:d3:1f:62:cf:03:92:82:17:a1:
0d:da:d0:b7:c2:c1:6e:57:ac:17:af:f1:91:02:d3:18:00:3b:
01:f0:98:80:f8:3e:6b:ac:64:b2:8a:ef:32:a6:f5:3e:f0:34:
9a:92:e5:4f:dc:24:95:0b:6b:68:fb:0a:c0:9a:07:3a:72:91:
ef:5d:82:76:d3:37:5f:2d:69:48:41:7d:07:66:a4:4b:e5:9b:
c9:ea:49:cc:ee:a5:db:b1:21:79:09:d1:0d:a0:c5:7b:8d:22:
f9:49:81:89:9d:db:50:dc:f3:99:7c:69:21:86:07:d2:a2:d0:
6b:f7:67:3e:fd:7d:87:90:78:76:62:b6:3b:3d:9b:22:5e:12:
15:13:1c:68:5b:ad:5f:1e:81:e7:5a:48:36:36:8c:f1:4d:47:
f9:db:22:49:c4:eb:23:f9:c3:ed:31:dd:88:74:cf:4e:27:90:
d8:99:a8:15:cb:ad:81:b8:ce:e3:71:62:e4:61:6c:5e:e3:bb:
9c:64:e5:43:a2:86:19:ee:0a:61:45:2b:ae:2e:97:32:c5:e0:
47:50:29:70:7b:9b:dd:13:15:13:37:fa:70:f2:46:f2:be:21:
6e:f9:fe:b6:62:42:68:94:82:1d:73:c3:35:85:f0:8d:ab:47:
0e:61:f9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:00:44 2025 by rpki-client