Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
File: MbXwrK42UqU8caB0ojR6tvF_0_g.mft (raw, json)
Hash identifier: BmGc6p5BOaj9v6eDhAVKxEYCZwBG8YgAWYJpkku8xi4=
Subject key identifier: 10:1B:27:AE:86:B4:1F:3A:8F:F3:5C:8A:16:40:A8:DE:DE:CE:C0:56
Authority key identifier: 31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
Certificate issuer: /CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Certificate serial: 0196C2399A7ADEC28670C5F81098BA2E333F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
Manifest number: 14C2
Signing time: Mon 12 May 2025 02:01:17 +0000
Manifest this update: Mon 12 May 2025 02:01:17 +0000
Manifest next update: Tue 13 May 2025 02:01:17 +0000
Files and hashes: 1: KlCag1k38E35giK2RwCL86wfRww.roa (hash: 3A8pcHf0/9mVDJ/I9xf+96E0LjYi6EEs2LRUfPZpiNc=)
2: MbXwrK42UqU8caB0ojR6tvF_0_g.crl (hash: iUKQandoQXTDo7IZF925MQ6BN9O9YtGAWI1EAP05vOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:9a:7a:de:c2:86:70:c5:f8:10:98:ba:2e:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Validity
Not Before: May 12 02:01:17 2025 GMT
Not After : May 13 02:01:17 2025 GMT
Subject: CN=101b27ae86b41f3a8ff35c8a1640a8dedecec056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:3d:d9:a7:81:fa:38:8d:01:26:ec:63:59:
16:f9:76:05:95:87:17:76:04:d7:47:0e:f6:32:6a:
e5:13:f4:88:bf:61:4d:de:34:40:8d:b7:2f:3a:2f:
8a:f4:66:06:2f:6c:25:79:36:f7:6e:2b:60:6c:53:
51:ee:8d:af:b1:d9:83:51:67:ed:7f:f4:51:05:d7:
95:b3:a6:27:ec:a6:c4:9f:c6:be:31:9a:9c:d8:e1:
7d:d9:e5:54:3c:7e:4c:85:cb:15:6f:f2:ad:05:50:
0f:bf:bf:c0:09:86:ca:a3:1d:de:6e:80:82:6b:94:
c9:39:2c:15:4b:b8:48:bd:40:fc:92:19:cd:5f:67:
37:06:fc:86:bd:72:f3:5d:67:b9:2f:e9:cf:6c:a3:
c5:fb:42:75:8a:83:d7:2b:4c:de:5d:f4:12:e6:bc:
b3:7f:11:f3:90:e2:3e:70:ca:61:4f:52:5f:2c:91:
30:5f:8c:22:5c:2e:4b:4a:bc:5e:d7:6f:25:3a:f7:
99:b6:e8:f6:06:20:ae:7c:8e:79:ec:c8:69:ee:65:
2c:d2:0e:fa:88:06:7c:dd:fe:89:ab:40:81:59:db:
7e:0a:66:3f:77:31:d1:4a:1f:0b:91:27:43:c1:57:
ed:c6:74:d0:06:3e:f9:81:f5:65:c8:c5:68:34:75:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1B:27:AE:86:B4:1F:3A:8F:F3:5C:8A:16:40:A8:DE:DE:CE:C0:56
X509v3 Authority Key Identifier:
keyid:31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:37:cb:b7:5b:f4:59:06:ed:01:9a:d6:c3:d6:ba:12:66:35:
2f:7a:57:2d:e0:d0:32:8c:b8:d2:cc:1d:20:36:9e:37:ef:db:
a9:37:82:da:31:a7:45:69:fa:06:50:67:3b:66:67:a9:ce:8b:
c9:ad:59:69:a6:0e:d3:14:4e:a4:9d:6d:2d:58:12:0c:6b:7c:
79:a3:5f:9f:fc:59:40:6f:04:a2:74:76:28:61:9c:61:ff:f9:
9c:43:35:66:bc:32:e5:c1:46:8b:c7:f7:70:ba:38:3b:67:8d:
42:29:89:f1:24:8a:9b:0f:25:81:23:5f:e3:92:38:5b:75:c8:
66:49:8a:3f:36:a7:4c:1c:ad:74:c4:b2:4f:da:93:77:da:3f:
63:c4:7f:4d:47:2b:f1:8d:45:fb:a0:26:b2:d1:8e:c7:f6:e3:
ea:f7:f1:93:dd:47:b4:d7:ef:6e:35:9d:c4:2b:1e:1d:e4:78:
98:46:8a:3b:56:ea:bd:eb:6f:c9:6b:4c:71:17:56:c5:63:f8:
71:e7:78:c3:6a:9b:f8:db:b6:af:1b:ea:a4:32:1a:36:35:f3:
88:b7:a3:75:a0:a1:e5:29:05:6f:7b:dc:8b:8f:f3:d4:94:28:
3f:74:2e:09:20:21:6e:60:03:16:16:3e:db:ad:4b:11:71:db:
b3:34:76:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:40:09 2025 by rpki-client