Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier: PbGt3da9kTXMCeRNHtEGG7ZE+K7vRvn4VtCAUSLhDzs=
Subject key identifier: E9:A1:87:33:31:23:1E:11:BE:04:3A:3F:0F:F8:A8:A1:F6:45:BF:7F
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 0196C3F0E03F6CAECFDE54D69D7C629B93D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number: 1017
Signing time: Mon 12 May 2025 10:01:05 +0000
Manifest this update: Mon 12 May 2025 10:01:05 +0000
Manifest next update: Tue 13 May 2025 10:01:05 +0000
Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: y8HUikGMa95z8+GuZzchCrCURsbLw0kK5JYoexiQZCA=)
2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:e0:3f:6c:ae:cf:de:54:d6:9d:7c:62:9b:93:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: May 12 10:01:05 2025 GMT
Not After : May 13 10:01:05 2025 GMT
Subject: CN=e9a1873331231e11be043a3f0ff8a8a1f645bf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:83:a9:b8:0e:39:94:b0:b7:92:33:59:7d:
4e:a3:f3:1e:d5:32:67:e5:9f:9b:17:6f:29:5f:a0:
c3:b2:9b:01:c1:d9:60:d1:68:bc:32:77:89:ac:72:
b2:ba:95:7a:20:3e:12:90:13:a3:4e:a4:b7:99:28:
73:74:89:00:bc:b5:4e:64:d2:ae:0c:f3:4e:f3:54:
da:c4:7a:95:4c:64:37:de:45:cf:c5:db:af:62:ef:
36:04:53:cd:12:a4:62:92:1d:60:59:78:af:ff:aa:
ab:62:68:78:08:e5:b4:9f:33:99:13:32:3a:dc:68:
4c:6f:66:d7:c1:20:85:01:5d:f5:26:9d:a9:7a:24:
e8:5b:3a:1b:07:66:e1:6d:46:43:98:3d:23:75:9f:
09:14:56:be:b9:a4:b0:42:55:8e:e6:38:e0:b6:6d:
4d:12:63:2f:42:91:45:1a:74:18:6f:02:ad:5c:0f:
68:e5:7b:ba:e2:c7:5b:c8:29:13:89:3b:24:f6:2b:
f4:11:cb:f9:ed:ca:50:27:66:88:9b:1d:f0:5d:ca:
59:62:62:da:ee:fc:03:78:92:95:a1:9a:11:21:c4:
4a:e2:82:75:26:25:99:cc:5c:6f:c5:2d:2d:cb:b2:
af:f8:91:76:97:5a:bb:ca:d6:6f:52:98:b5:66:48:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:87:33:31:23:1E:11:BE:04:3A:3F:0F:F8:A8:A1:F6:45:BF:7F
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:00:4f:a6:4d:3e:38:65:c7:1e:aa:33:98:3a:65:50:a3:4b:
5d:6c:1f:c6:ff:79:8e:1e:50:14:1c:86:51:7c:dd:73:af:55:
31:4b:dd:e1:7b:8f:ff:9a:a9:d2:cc:b2:55:f3:5d:e1:f8:df:
9e:2e:0e:80:0c:bf:a2:5d:e4:ca:3a:ce:d8:54:5a:bd:9f:6f:
22:98:d2:f6:f1:b0:90:1c:6f:e6:c3:da:79:63:18:ce:46:9c:
39:1d:69:fe:8e:b3:c5:ea:57:94:10:c0:2f:5e:af:46:7d:77:
da:30:27:f2:2b:fa:54:a5:b0:ef:ff:5c:50:e9:9c:95:1d:e9:
78:7d:96:3a:52:46:99:d3:96:8f:35:2b:6c:69:bb:d1:8f:0e:
db:09:02:b5:a2:e3:c4:6f:a6:cd:06:a0:a7:1f:64:13:c1:b8:
bf:99:93:9d:25:40:07:71:c1:07:88:f9:6d:e3:f0:d5:7c:ae:
68:0c:27:28:ed:98:19:74:bf:13:c3:ba:ba:cc:01:0b:5a:31:
41:aa:33:cd:d6:2b:74:00:29:02:97:d2:a8:10:77:83:6a:c9:
b6:18:94:ce:45:76:9e:f3:01:d7:e5:4c:b3:f2:9f:f0:22:6c:
38:bb:66:dc:de:05:6c:29:f0:8e:c1:10:23:26:50:0c:bc:33:
6c:3c:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:36:47 2025 by rpki-client