Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: Lr0Ljq65Wi81Nr52MTDmyVddwBLQLEFeKUN6+Qq5tpY=
Subject key identifier: EF:12:2C:A2:78:22:F3:AE:28:95:08:AF:5A:8E:6E:7F:D8:2D:34:7A
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 0196A509FEB1C0EE99CECF0BCAE01171CAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0D41
Signing time: Tue 06 May 2025 10:00:17 +0000
Manifest this update: Tue 06 May 2025 10:00:17 +0000
Manifest next update: Wed 07 May 2025 10:00:17 +0000
Files and hashes: 1: D1ApEIwb1kjfyIq9DKRzPBBfvvY.roa (hash: xg03oxBmRY8/OHWbSAoqzOUqsR3adUdWhS3XjYzzmwE=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: cQ+wGr16jubv5BvB7L0It1mBT88CacTvT+2RjPoB7IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:09:fe:b1:c0:ee:99:ce:cf:0b:ca:e0:11:71:ca:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: May 6 10:00:17 2025 GMT
Not After : May 7 10:00:17 2025 GMT
Subject: CN=ef122ca27822f3ae289508af5a8e6e7fd82d347a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:47:bf:44:08:2f:fb:25:0b:3f:76:4c:9d:
f2:eb:64:55:63:b5:44:ae:d9:93:a0:81:f7:d2:04:
8a:fb:32:5c:df:5a:c5:49:41:43:70:1a:5c:53:e0:
2f:18:23:dd:11:51:21:7e:2f:8a:26:57:16:c3:c5:
db:b8:2a:91:33:6c:08:c8:66:26:8c:c4:75:37:09:
f7:90:64:78:da:f9:21:5d:5e:0a:f5:ea:03:5e:1c:
b5:f2:8d:81:38:9b:a2:e1:9a:67:59:9e:ba:e4:89:
96:3d:fc:35:af:ce:8f:6c:f7:2e:b8:c7:9a:4f:b7:
31:57:79:9c:92:e9:77:cd:78:16:51:a4:6d:a2:a4:
d0:92:4c:1c:1e:91:d5:20:44:d9:39:91:eb:99:d1:
c2:27:99:07:de:08:c1:b2:af:db:75:7e:1a:3d:28:
4d:f9:45:27:a7:24:f6:91:e5:da:ee:82:9b:90:4d:
af:40:5f:6c:f3:e7:f7:8d:c9:d0:21:23:9d:c9:ba:
0b:9e:5e:7c:5e:f8:4a:d1:af:5f:85:c6:6d:fe:5d:
8d:95:fc:c4:51:e4:d9:3d:67:0f:72:fa:53:5d:d4:
de:15:99:78:a9:95:0a:ee:2f:ae:c5:5b:b3:9c:11:
90:53:96:a9:fc:34:3f:64:9c:49:d6:49:9f:89:68:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:2C:A2:78:22:F3:AE:28:95:08:AF:5A:8E:6E:7F:D8:2D:34:7A
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:60:86:02:7e:0a:c6:a1:bd:07:eb:70:b4:49:69:b8:d0:92:
d8:32:da:66:5d:58:04:75:dd:d0:de:00:1a:4a:6d:ba:4a:8d:
43:c1:6c:91:1c:e9:f9:2a:af:62:1f:63:36:32:99:e9:94:81:
9d:fc:c2:de:cb:ff:08:ae:b2:37:4f:0b:25:41:c3:a8:49:72:
dd:37:f2:60:7f:67:61:e6:74:ef:18:45:14:22:1f:a4:43:65:
8d:5c:df:55:26:b9:1c:f7:a5:ef:70:35:fa:93:69:2c:49:e5:
76:80:59:f3:8d:2c:c2:60:ea:c6:dd:92:4d:29:15:63:ec:84:
cb:4a:4b:29:5d:e7:ee:91:0c:92:49:ce:05:f4:89:3d:e5:c3:
23:cf:76:f7:be:29:9c:72:fc:5a:50:2e:29:31:f7:44:4b:bf:
7d:41:cb:38:3e:f7:7a:14:b3:c4:00:32:a6:74:17:71:32:74:
a5:be:f1:56:c9:e3:d7:41:d7:2c:42:3c:78:ff:d1:e9:c7:ec:
b9:6b:3f:6c:ec:d5:72:5d:8b:4f:aa:5e:ea:14:35:4f:8d:6b:
bd:ef:58:16:11:f2:2b:ca:81:21:34:4f:97:de:6b:fb:fe:b8:
47:c7:73:83:fa:27:3f:64:b1:fb:c6:c3:c2:fe:79:e3:06:3a:
8c:ec:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:19:25 2025 by rpki-client