Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier: miW2pspOGwBmHMNLI53aeiXWqHg1uzd/Fr2eNx1DWms=
Subject key identifier: 46:85:8D:F0:0F:78:4D:3D:FC:67:61:A7:D6:91:A5:F7:FF:AD:BE:15
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial: 01969F08209D5C8BEB3914A143DB3FFC6A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number: 0411
Signing time: Mon 05 May 2025 06:00:32 +0000
Manifest this update: Mon 05 May 2025 06:00:32 +0000
Manifest next update: Tue 06 May 2025 06:00:32 +0000
Files and hashes: 1: 1-I5euRLEKsr7FF-4VskQLdu5Wm0.roa (hash: 4AXnB9gGffBa+5UGJwTlfxl3dTLBtwfWaDwofBbf+WY=)
2: MtoIhFzzjtMtI4g5kxOun27y3IM.roa (hash: DlZC6F8VIFuzmjWhSIX/LygNaAgpAHPicElZhEshqgM=)
3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: xqr7UgSuGKF/l8aT2ID0nWrzDn9D+9w4WpwVkFJvxKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:20:9d:5c:8b:eb:39:14:a1:43:db:3f:fc:6a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Validity
Not Before: May 5 06:00:32 2025 GMT
Not After : May 6 06:00:32 2025 GMT
Subject: CN=46858df00f784d3dfc6761a7d691a5f7ffadbe15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:23:0e:7c:bf:6a:8a:0c:1d:ff:2f:f5:49:
9b:4b:f4:94:e1:2c:68:3b:3c:c0:f0:69:14:d0:d4:
9a:9f:31:6e:b2:b4:3f:d7:0c:4c:c9:ec:35:ff:a5:
69:6c:88:0e:51:36:61:15:dd:42:47:25:b1:29:3d:
e8:41:de:63:49:f7:16:bf:60:9c:6a:af:a6:02:ee:
a7:bf:f3:15:24:44:47:f1:41:83:61:94:4d:1e:b5:
b7:46:9c:6e:4d:c7:4e:47:0d:86:c5:64:cc:d3:e0:
3e:35:ff:70:7d:28:80:54:81:61:18:bd:7a:c3:bc:
bf:36:22:f1:0c:f9:d8:63:e5:77:57:4d:c8:20:a4:
4d:e5:97:6a:c6:90:1f:4e:39:a5:46:2b:61:6a:6b:
65:43:36:e2:22:5e:32:63:36:7d:6c:79:88:8d:ff:
7f:c7:86:42:1f:74:c6:ea:70:8d:00:2d:c6:a1:85:
af:86:d3:de:65:6b:5a:8f:85:35:dd:da:f7:a1:bf:
98:de:cb:5a:09:70:36:50:e8:9e:c1:b9:1b:e3:b6:
79:62:96:e3:9f:f7:35:c9:f7:e3:95:33:6f:46:57:
2c:23:bf:2f:06:c8:c2:e7:0b:8b:1a:d1:2c:79:11:
2b:48:f7:fc:1d:84:ed:d3:94:7c:c0:a3:18:bc:4e:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:85:8D:F0:0F:78:4D:3D:FC:67:61:A7:D6:91:A5:F7:FF:AD:BE:15
X509v3 Authority Key Identifier:
keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:37:3a:6f:87:23:ee:46:11:ac:3a:85:3f:56:8d:4e:5b:f2:
ed:f8:a8:c2:5f:c1:0b:b9:86:be:89:b7:0e:5e:ad:8a:3b:00:
7d:7f:1e:59:a7:39:03:7c:1d:de:7b:63:0a:bd:7d:de:fd:d9:
a8:54:ca:22:4b:32:f5:08:b5:6d:a3:3f:2b:ac:bb:e0:3d:d8:
a5:f1:29:2f:c8:f8:c3:05:ea:eb:87:8e:e6:07:b6:bf:0b:17:
ee:7c:fb:c6:c1:98:ec:aa:0e:81:92:d7:6f:14:f7:44:4f:ff:
7b:7d:37:39:4f:f4:7b:f3:01:e0:e6:f4:4a:a3:92:ad:19:24:
a3:64:e8:e7:ea:d9:1c:39:6a:f3:72:6c:0a:a3:09:1a:89:b8:
32:48:9f:c5:73:49:a0:ff:10:e0:e7:8b:75:58:9f:d9:f3:63:
5d:e2:db:15:da:f1:00:80:d2:5b:37:c7:29:28:41:f6:c9:b5:
7b:24:b0:38:eb:3d:46:87:53:bd:90:ef:cb:e8:4a:bc:fe:50:
2e:6b:7f:bf:61:23:67:ea:41:32:72:75:e4:2a:30:49:fd:75:
a6:1b:e9:8d:c7:3f:1f:3f:24:c7:ea:ab:51:e4:2d:e4:66:31:
ea:47:9c:e4:1c:23:18:47:c8:e6:45:0f:a4:e6:1b:7e:2a:0a:
49:b6:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:00:09 2025 by rpki-client