Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File: m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier: rOUOmEss2UsN/ewtOmjRudAIb8mK44c/7kGw1IgW3bI=
Subject key identifier: D3:FC:3A:92:E3:54:03:F5:3C:DB:8E:57:8B:7F:71:3F:E4:47:7D:53
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 0196BF6F46B8EC76EA523989B49B2935B39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number: 0927
Signing time: Sun 11 May 2025 13:01:02 +0000
Manifest this update: Sun 11 May 2025 13:01:02 +0000
Manifest next update: Mon 12 May 2025 13:01:02 +0000
Files and hashes: 1: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: +7pQkC0cP8CV77Vnoj0JvKOGLel5syxI7rgrc5QKEhA=)
2: rhJcJSm_PMi8Ty8JJNNm9gt0gCs.roa (hash: 35jRPVs6JG51YgnZYUHY+bKhkmjaLSvQRKcI4y/GRMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:46:b8:ec:76:ea:52:39:89:b4:9b:29:35:b3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: May 11 13:01:02 2025 GMT
Not After : May 12 13:01:02 2025 GMT
Subject: CN=d3fc3a92e35403f53cdb8e578b7f713fe4477d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:4d:43:07:9b:34:9f:b8:b6:6e:33:56:22:
f4:ef:b2:05:86:ee:4d:a1:c7:e8:79:00:b6:cb:eb:
04:30:fe:71:d9:c9:78:2b:69:75:2e:07:63:3b:52:
4a:a2:be:a7:a8:9a:4b:be:65:be:01:12:c1:f5:23:
b7:ac:d7:19:cd:8a:b8:99:0c:70:d8:5f:b1:a9:20:
78:b2:b9:5c:39:90:0e:1f:28:db:fc:a3:77:0a:5b:
87:00:b3:73:f8:0f:f0:a4:b6:a0:a3:21:0e:ec:7c:
79:05:5b:5c:f4:e4:61:4b:21:5f:10:01:d7:13:76:
1a:66:74:c6:80:81:ec:fe:f3:36:27:c6:65:dd:1d:
b5:d9:d2:a5:73:46:1c:aa:16:0a:d9:bc:1c:50:91:
13:28:e0:02:69:20:dd:76:8a:59:29:cd:8f:05:30:
ce:3b:44:10:17:db:58:89:7d:3b:c3:07:3b:f6:ba:
e8:59:d6:3f:1b:cc:b9:62:e3:67:48:40:14:52:61:
8a:27:f5:ba:4c:59:e5:9c:fd:50:ce:ad:ba:9d:14:
f6:a9:77:58:8c:c1:2a:c8:fd:b0:06:7d:26:f9:80:
6b:f1:56:fb:79:8f:7a:30:50:ed:cb:af:19:2b:10:
6d:b3:30:75:25:a9:5b:75:32:a3:3b:67:e7:21:30:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:3A:92:E3:54:03:F5:3C:DB:8E:57:8B:7F:71:3F:E4:47:7D:53
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:35:13:d3:e7:37:d9:38:ed:a1:0a:58:aa:f5:5c:4a:4d:14:
32:66:47:c4:99:89:bc:be:01:94:bc:34:8d:36:f7:1d:5d:29:
b6:06:5c:8d:6c:de:c8:1d:d8:b5:62:6a:bb:95:b1:4c:ea:87:
ba:d7:32:d3:2b:a5:0c:90:3b:c2:3a:b4:e8:ec:ac:c4:d2:1e:
9f:a3:5c:be:e2:a3:b6:3e:4a:b0:51:ba:c4:3f:72:3c:0e:68:
0d:7a:91:c0:ac:d0:bb:82:a0:15:f7:68:02:36:1a:ae:9b:f7:
a4:51:d8:6c:6b:5e:64:1b:86:f2:29:5f:84:b1:86:fa:e5:2b:
d1:5a:b5:56:69:0a:1b:84:e2:ce:4a:7d:25:8c:bd:56:e2:e8:
57:2f:84:e8:01:be:58:a6:19:3b:2d:02:20:7f:e2:04:f0:95:
05:24:e2:03:86:b9:8b:c6:50:e4:83:92:d0:1a:1b:dd:08:e3:
9a:b0:a1:9c:b4:31:ca:a7:a0:5e:c1:39:cb:07:92:02:8c:07:
50:08:ce:e2:9f:5c:c3:12:5b:02:56:2a:13:6f:44:26:be:bb:
2d:93:61:2f:98:da:16:37:b2:3a:f9:90:5c:27:b0:12:07:33:
46:e8:09:40:22:10:5f:56:bb:6a:c7:07:e8:b0:4b:56:16:2f:
cd:42:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:42:14 2025 by rpki-client