Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: SCvn+s2BHR4VZIoazj+yWkL16yquNfh0wJTkGY2leI8=
Subject key identifier: FF:E9:F7:96:30:5E:A8:DE:18:2A:BA:25:B9:A9:55:01:99:DD:C0:D9
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 0196CBAA3BE2EB702745B7F1CD3FF38B1DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 0396
Signing time: Tue 13 May 2025 22:00:53 +0000
Manifest this update: Tue 13 May 2025 22:00:53 +0000
Manifest next update: Wed 14 May 2025 22:00:53 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: GqNEEMjkFIr+eXzs81pW90AAmjFL31N1pH99Fdxh2zY=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:3b:e2:eb:70:27:45:b7:f1:cd:3f:f3:8b:1d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: May 13 22:00:53 2025 GMT
Not After : May 14 22:00:53 2025 GMT
Subject: CN=ffe9f796305ea8de182aba25b9a9550199ddc0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:52:1e:c3:07:fb:3a:58:7b:cb:4f:d3:54:
94:23:29:dd:6b:c9:8d:bb:be:b0:e1:04:89:d1:bc:
45:bc:e9:77:48:df:fd:67:cf:c7:77:09:bd:07:40:
af:49:09:cf:0f:fa:fa:a4:4e:ad:38:82:15:54:84:
b6:71:94:dc:9f:0a:e2:47:48:21:1b:d8:2c:58:37:
ea:82:2b:43:fa:f4:7a:e3:15:d9:52:fb:c3:11:79:
de:f4:cf:b9:60:cc:bc:7a:36:77:25:59:f7:eb:15:
14:3f:0d:5c:19:9e:d7:04:60:a5:90:7f:28:55:91:
3a:79:57:dc:17:5a:4f:97:20:98:c9:fa:bf:a8:6b:
c2:66:d4:08:de:56:67:da:42:23:43:f2:7f:1c:06:
2c:f7:f3:41:da:9e:e5:5b:66:0d:af:31:c3:0e:73:
05:7d:1d:c6:bc:47:1c:51:cd:b5:97:2d:ec:ae:9e:
e4:3d:2d:31:fa:26:96:60:aa:16:12:32:4a:65:22:
6d:8c:36:5c:7c:58:8a:3c:30:2a:af:d5:c1:5d:d0:
80:6a:14:ca:3b:e3:9d:ee:ec:e1:77:c1:3d:59:d7:
71:34:6b:a5:2e:4b:5a:3a:73:b1:c8:f5:6d:3d:f2:
90:b5:26:42:bd:78:8a:25:f8:df:6d:50:49:51:26:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:F7:96:30:5E:A8:DE:18:2A:BA:25:B9:A9:55:01:99:DD:C0:D9
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:54:09:18:21:c4:9a:3d:22:c1:68:ab:c3:00:3a:24:e2:c1:
23:91:40:5c:e0:3d:5a:d9:07:96:3d:b9:d3:28:21:9b:35:51:
2f:88:2c:f8:63:ec:f9:27:12:55:e7:a8:a7:f9:a7:12:9f:1e:
6a:1f:88:ee:aa:bc:1b:23:6e:0f:93:6b:d8:03:a4:e8:cd:6a:
48:a9:f3:ae:bd:bb:98:15:2d:15:25:ff:87:27:30:14:7d:cb:
bb:25:4f:dc:d3:42:77:37:33:0d:20:ed:a6:6f:7f:94:77:39:
36:34:41:94:53:cd:76:0d:8c:89:1d:d1:f1:5d:4e:70:5a:47:
7e:74:85:43:d5:1f:96:20:a2:1d:ae:dd:0c:3a:3a:7e:f8:56:
4a:06:a3:08:12:65:0c:ba:8d:79:66:d3:f2:94:03:b8:6a:91:
2b:30:9c:36:63:ee:42:3c:25:70:48:10:60:89:e2:fc:08:27:
42:fe:6b:74:d7:84:a2:e9:c2:b4:47:cd:27:4c:fc:be:99:4b:
17:ea:9a:5e:a1:fd:80:75:8c:cf:ab:c0:ff:aa:0d:dc:fe:fb:
03:a2:59:d5:de:3c:7b:c4:a6:93:ff:28:cc:26:43:27:c5:e1:
96:76:70:46:ea:aa:37:d2:90:31:ac:4b:e0:69:61:e7:f3:95:
52:ed:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:13:33 2025 by rpki-client