Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json)
Hash identifier: GbTXxDwMFZCWB+OgYUDXUUo3zufYAxArKZTJTxz1G4E=
Subject key identifier: A1:7E:6C:60:F8:71:DF:52:75:91:5F:B0:14:E4:64:38:A3:67:CF:1B
Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Certificate serial: 0196C1CB92731D1F717C724230F4875CB0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 00:01:06 +0000
Manifest this update: Mon 12 May 2025 00:01:06 +0000
Manifest next update: Tue 13 May 2025 00:01:06 +0000
Files and hashes: 1: Fb0UwpxCy0DRKLuSbZAzVNuZQGI.roa (hash: FQG+r4pQE3E1WCi2kVbQ4HOY+Sj6V8FJrKG1h8vbtwQ=)
2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: RF+THeo3xhi8DGqYjHrr+kwlQD3Bla/vTSrtKWXp5I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:92:73:1d:1f:71:7c:72:42:30:f4:87:5c:b0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Validity
Not Before: May 12 00:01:06 2025 GMT
Not After : May 13 00:01:06 2025 GMT
Subject: CN=a17e6c60f871df5275915fb014e46438a367cf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:d0:d0:c8:11:6e:e6:ae:0d:11:55:8a:e0:
f1:86:f4:d6:b0:65:15:a4:80:11:18:bb:cf:65:da:
43:22:6e:f2:e8:39:34:c4:fc:6c:43:d6:b1:e4:ed:
3e:8a:63:60:3a:49:df:09:52:bc:24:07:b8:fc:3a:
54:59:2a:22:ab:6a:a9:4d:ab:4f:c8:fd:d9:ab:02:
73:f4:95:70:0d:90:ad:d5:cd:3a:92:d4:6c:d2:80:
1a:85:83:1d:c0:7a:1b:3d:50:19:d8:d2:dc:c2:95:
2d:29:96:ba:32:45:61:08:cd:6c:24:95:d1:a6:25:
e5:35:ea:34:ca:d0:cd:c1:6e:c4:90:60:46:72:02:
d6:18:61:23:3f:85:60:54:df:bd:f8:87:b2:fd:1a:
d3:c1:b9:7f:fe:49:e2:80:4c:34:34:cb:b4:3c:ee:
11:32:f4:a7:3e:e2:34:b7:ca:e7:00:e4:3e:f3:b3:
5e:c2:f2:77:9b:6f:1d:45:c9:de:f3:d2:eb:cd:24:
e1:12:2a:4b:5d:b6:c3:ec:5d:3c:9c:02:7d:0d:8f:
14:7e:5d:36:7a:0b:05:43:2a:c4:06:be:39:89:2f:
31:78:79:6d:9d:2f:9e:13:a5:56:d5:b6:84:b4:63:
80:74:4f:c0:d6:d1:21:d6:29:ce:dc:b4:bd:39:5e:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:6C:60:F8:71:DF:52:75:91:5F:B0:14:E4:64:38:A3:67:CF:1B
X509v3 Authority Key Identifier:
keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:26:f7:a7:1b:14:22:14:3e:f2:b2:4e:ba:b3:14:32:66:10:
41:4f:85:f2:da:81:6d:39:52:cd:d1:7c:bf:35:ed:79:5e:98:
ca:99:f5:59:27:fd:9a:19:21:82:72:b5:70:e2:27:84:d9:00:
7d:71:6f:11:57:a1:a4:88:c2:f7:5f:dd:39:af:d5:30:6a:bd:
42:65:d9:a6:f0:f3:b4:25:22:61:7b:0c:30:e5:aa:ef:a2:f5:
b7:96:c3:e6:c3:6c:4c:d1:eb:21:d9:44:60:b9:27:62:fe:e2:
c1:54:36:60:56:48:f4:12:7b:c3:df:33:35:31:9c:3d:1f:1c:
37:78:43:e6:82:20:43:45:61:ae:97:c2:16:12:80:e2:20:b8:
60:20:b3:fe:ca:10:f9:86:53:58:0d:d2:16:44:ca:d5:2b:df:
77:11:c9:c5:d8:e9:26:4f:ac:44:bc:9a:1f:63:80:af:21:36:
0f:76:58:1f:15:9d:e0:ea:33:9d:19:7e:e1:0d:ca:d1:07:4b:
58:6a:ef:8d:2d:56:23:8d:b0:b6:e5:ea:c6:2b:cd:f3:37:7c:
9e:b6:6d:e3:40:5d:17:1c:12:de:47:66:63:09:fb:4b:5b:cb:
aa:60:ea:a9:4b:ea:0c:25:bf:d4:d0:b3:0a:97:f2:f6:6d:ad:
74:39:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:33:04 2025 by rpki-client