Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
File: mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json)
Hash identifier: 562QAscYKr53T0kFB+Pn3wxETdn6Wip/f3lNZ/1tm4o=
Subject key identifier: E3:4C:6B:1C:38:65:E9:EF:85:22:7F:E7:01:14:26:0A:35:EA:65:2C
Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde
Certificate serial: 0196BF37F3979446401FACBE13307763B01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
Manifest number: 0C1B
Signing time: Sun 11 May 2025 12:00:37 +0000
Manifest this update: Sun 11 May 2025 12:00:37 +0000
Manifest next update: Mon 12 May 2025 12:00:37 +0000
Files and hashes: 1: acpHH_CaNcRdqw7JD1HuBSlb_jE.roa (hash: Wxjj/iVVVmCvZCfA0I7IDXleX19TKp07yCUTpeGLxQk=)
2: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: mIA+nfY9to4Lc3i5Fnmz3azdtxakCRIZuNWt8GUNwZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:f3:97:94:46:40:1f:ac:be:13:30:77:63:b0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde
Validity
Not Before: May 11 12:00:37 2025 GMT
Not After : May 12 12:00:37 2025 GMT
Subject: CN=e34c6b1c3865e9ef85227fe70114260a35ea652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:9f:16:bb:f9:43:71:86:b5:67:bc:1d:67:
eb:14:3f:68:89:8d:0c:c1:76:17:90:8c:38:1a:4b:
34:81:91:1c:86:05:8e:01:a9:ee:43:13:7d:fa:e2:
b0:67:c4:a8:9c:b8:3c:1d:76:41:a8:a5:fc:45:ef:
2d:f5:40:76:6a:e5:8f:d8:89:28:6b:ba:cb:8f:4c:
5d:2e:21:69:e5:7d:89:0a:ed:c2:4e:4a:10:88:e8:
81:cc:1c:1c:ef:fa:53:04:84:d7:9c:f9:d3:ee:c5:
bf:62:e2:94:d9:2d:84:31:28:98:3e:b2:84:be:86:
c6:32:67:4e:ce:ce:68:73:73:21:78:44:79:7f:cb:
a4:9c:fb:4e:4c:ce:57:20:1f:50:0f:73:fe:75:77:
69:9a:9e:54:64:e2:4c:ce:d2:c3:14:47:58:ab:ef:
b5:ca:1b:74:9e:e0:5d:21:d3:37:a3:c5:f5:e4:1f:
89:91:57:2b:30:37:1a:63:8e:41:46:fa:12:8b:43:
70:7c:56:f9:de:8b:9c:5f:66:cb:36:ec:ff:87:c9:
92:fe:d8:0d:61:8e:05:c3:e5:29:7c:25:e8:3d:e2:
21:21:24:08:cb:19:32:18:0c:6f:f0:1c:2f:15:86:
21:1c:17:1b:cc:18:68:42:bd:4e:45:8a:65:4c:ce:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4C:6B:1C:38:65:E9:EF:85:22:7F:E7:01:14:26:0A:35:EA:65:2C
X509v3 Authority Key Identifier:
keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1f:67:19:18:3e:0e:e5:11:32:55:8f:7b:d5:06:22:6a:b8:
68:a4:a0:2c:99:ce:79:8b:fd:b8:17:87:01:cb:6f:07:1f:e3:
5a:2f:a7:17:79:b8:bf:9d:8b:a0:1b:dd:df:4e:5a:8a:db:14:
30:1f:0a:19:73:0c:4f:42:4c:3d:bf:0e:03:d8:8c:9a:86:bf:
ba:36:75:ed:c1:2d:b6:2e:34:7f:fb:93:bf:0e:4e:aa:4c:02:
d5:22:2f:11:bb:a8:88:a5:31:74:40:bd:c9:bf:a2:95:ff:26:
a2:db:ae:dd:0f:91:01:ec:69:32:90:a0:8d:c1:2f:f5:f5:d5:
b3:d8:cb:20:6c:da:b3:db:12:15:47:c4:f5:26:ee:61:cf:23:
28:43:f3:2f:e4:aa:90:a0:ac:f9:f7:31:1e:f1:fb:85:2a:27:
6d:76:a6:12:3d:d0:f8:df:53:d2:a6:93:3c:2a:1a:d2:d7:51:
79:4c:a3:75:fa:9b:9a:80:a3:f0:d9:3a:b9:3c:1a:ef:9e:a8:
f2:71:f7:3b:87:48:98:69:ce:e8:e1:36:e3:2f:1f:b6:ef:48:
81:21:10:b2:6a:ac:93:01:d5:6d:15:97:f6:a3:f6:c3:b2:da:
d3:79:d1:1f:0c:4b:5c:e4:de:8b:40:36:2d:fc:3c:7b:f9:d7:
ca:a5:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:19:18 2025 by rpki-client