Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: kdCXju1dAuwcFdFhF2PKO7F8T/uLKBq0n6jVOoFq9NI=
Subject key identifier: B0:72:DA:02:BD:3E:A7:3A:58:B7:C0:CC:B3:68:1B:91:2E:59:02:13
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 0196A3F76EF2CE3273EE8B9661B5BF88D9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 0DC4
Signing time: Tue 06 May 2025 05:00:24 +0000
Manifest this update: Tue 06 May 2025 05:00:24 +0000
Manifest next update: Wed 07 May 2025 05:00:24 +0000
Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: +GT2dLN7q9bAWorOXiUj3/cADD2ffGmtme2omUK5OPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:6e:f2:ce:32:73:ee:8b:96:61:b5:bf:88:d9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: May 6 05:00:24 2025 GMT
Not After : May 7 05:00:24 2025 GMT
Subject: CN=b072da02bd3ea73a58b7c0ccb3681b912e590213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:4d:8d:7c:76:05:63:7f:5c:81:14:41:09:
1b:86:40:93:40:45:b9:26:6a:57:39:1b:02:63:00:
66:07:5e:3c:ed:c5:0e:4a:82:5d:2d:0d:64:4f:02:
e3:9e:97:3a:4d:fe:a7:38:c0:ca:41:30:5e:f9:9e:
1d:cf:f2:35:12:bd:90:e2:dd:4e:12:d3:0f:f9:f9:
12:87:fd:48:ca:40:86:99:a2:00:4d:15:b4:9b:60:
09:d3:a3:e8:ce:83:26:fb:03:0e:0f:d8:f2:c8:03:
da:d2:33:38:f8:5e:7f:ef:84:56:56:f3:bd:1f:c6:
da:24:0f:42:91:bf:9d:d5:5b:7d:58:d1:f4:e2:88:
cd:2d:f3:1d:92:72:0e:ee:d7:ad:c4:69:b9:43:cc:
5c:d7:aa:2b:3d:b4:49:2c:1c:78:46:2b:d7:ae:a3:
07:61:e5:15:63:6f:27:01:ab:42:c1:c0:a4:70:63:
de:68:fa:28:58:2b:47:5f:38:21:a2:99:97:44:7d:
c6:1d:e2:1e:7c:a9:a6:a5:07:f0:61:34:36:5f:d8:
ec:ba:d6:8c:b5:8f:ce:85:68:11:39:e7:4e:f0:cc:
c5:71:d4:91:a2:71:62:aa:c2:dc:b0:1a:8b:da:b8:
33:88:1f:72:31:3d:e7:d0:52:9c:d8:99:4b:12:8c:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:72:DA:02:BD:3E:A7:3A:58:B7:C0:CC:B3:68:1B:91:2E:59:02:13
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:33:ca:f5:02:43:a7:d5:dd:26:91:e0:08:4c:69:a6:61:db:
a2:48:e0:8e:87:7a:11:6e:4d:37:9b:18:ae:b2:ca:49:1a:4b:
82:f6:8f:1c:04:a3:0b:d8:28:9d:3e:e3:03:f2:b6:6c:3e:f0:
50:df:07:8b:69:09:87:f7:72:6b:b7:c8:07:21:1b:1e:6c:fa:
5a:1e:a5:a0:ea:94:1b:af:94:18:de:dd:d1:00:7d:b9:67:12:
5d:d3:08:dd:eb:04:8b:64:22:54:ec:5a:89:c5:2f:0a:de:95:
a0:dc:1d:89:4d:77:56:a6:7e:ca:74:42:f7:20:08:cc:e6:1e:
70:42:21:52:fa:4d:f6:11:41:0c:ee:de:eb:26:7c:d6:56:86:
27:ed:55:05:91:29:20:7d:d3:8d:44:c8:35:75:1e:ed:23:59:
7e:49:55:35:37:4c:0b:da:8c:5b:61:7d:0e:3c:24:c8:08:0d:
a4:01:46:af:21:0c:34:19:95:99:27:d1:9d:e1:64:83:96:c7:
53:b0:5b:94:bf:ff:96:54:fd:a1:b2:11:40:a2:35:3a:53:a6:
49:6f:c0:4f:01:46:5d:e7:3a:31:09:77:6f:77:6b:8a:81:1b:
c6:f0:a2:d5:4a:66:af:c7:c4:93:30:39:2f:52:c2:c4:dc:51:
6a:0b:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:50:13 2025 by rpki-client