Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: iv7OgrMBd3K6Sw8UyhmQILsc4GcaQ0/9cZLubXnv+rQ=
Subject key identifier: C1:3F:50:98:EE:65:47:BB:47:14:4C:68:CF:86:72:9F:C5:AF:86:4E
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 0196760CE3B0B36998C8981DFD398A9EA2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 10AD
Signing time: Sun 27 Apr 2025 07:01:18 +0000
Manifest this update: Sun 27 Apr 2025 07:01:18 +0000
Manifest next update: Mon 28 Apr 2025 07:01:18 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: GJ8Ppk16JnRNhTKJPGkyrrLIUCJZaXZhUg7qO6+Et1w=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:e3:b0:b3:69:98:c8:98:1d:fd:39:8a:9e:a2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Apr 27 07:01:18 2025 GMT
Not After : Apr 28 07:01:18 2025 GMT
Subject: CN=c13f5098ee6547bb47144c68cf86729fc5af864e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:db:c9:b3:e2:5e:71:d2:f2:04:de:b9:44:
09:65:1a:92:26:43:7f:29:2f:df:04:d7:1c:1e:fa:
36:83:f8:dd:52:31:0f:7b:e2:c9:41:c2:ea:d0:f3:
b0:67:b2:f4:fb:bc:57:7e:bc:b4:de:a2:bf:59:a4:
8a:ff:fc:c6:2e:f5:c8:67:53:7b:5b:38:86:00:c3:
87:c7:f5:07:75:75:88:19:54:af:85:80:d0:91:79:
6c:7a:dd:9f:74:a7:fe:ed:9e:0e:20:1a:3f:d0:3c:
f4:ed:26:ff:d8:46:6c:11:8f:01:cb:f0:48:c6:cd:
0e:4c:b7:04:50:2d:f9:0b:bb:c1:77:07:1b:31:b5:
a0:42:ba:a3:f8:30:ac:3c:dd:d4:37:8f:30:0d:3e:
1a:5a:96:48:ce:c5:5d:2e:e0:b6:97:ec:87:2f:6b:
11:c3:9d:a7:80:eb:dc:7e:7f:55:af:16:b2:46:41:
78:28:8d:7d:18:5f:3a:7e:51:b6:e8:3d:dc:c6:79:
65:bc:7b:cc:94:1c:ca:1e:4c:46:01:d7:10:37:c2:
ef:ea:82:38:b6:af:1a:36:bb:29:b8:72:50:4a:4c:
78:3d:f9:27:47:7e:f5:b1:5c:bd:9d:56:fb:6a:2f:
fe:98:95:4d:78:98:46:52:70:0d:3b:b7:77:fe:27:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3F:50:98:EE:65:47:BB:47:14:4C:68:CF:86:72:9F:C5:AF:86:4E
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2e:c3:ef:7f:96:fb:1d:df:e4:0e:b7:28:60:85:95:d6:ce:
c1:d7:81:b6:93:07:bc:ec:a0:c8:ce:28:98:9e:2d:5d:7d:ac:
63:a7:35:d4:78:5f:fc:2f:d8:27:31:05:19:47:ac:fb:6a:49:
42:36:79:96:0e:39:35:bd:48:64:f0:e2:83:e6:df:41:72:95:
8f:db:4a:3a:19:95:00:a1:e5:96:4b:02:99:61:13:2e:36:8f:
cb:f8:08:88:34:c0:e0:5f:84:3e:46:fc:8a:da:aa:c9:16:50:
55:9c:a7:f8:09:73:cd:b2:44:7f:73:bb:42:4e:c4:9b:85:2c:
30:b6:e4:0e:1d:9f:d4:16:dc:b4:bb:ac:d8:38:58:ca:77:4c:
23:7b:7b:a9:d8:c0:76:25:ae:95:46:e9:76:be:d2:80:41:67:
0a:af:1e:bc:b6:74:33:68:71:0c:e5:e3:2d:5b:19:da:ba:12:
0a:b5:6c:29:0a:5d:4e:24:d4:75:37:99:0f:50:8b:95:2e:fd:
f8:3e:4e:86:22:75:75:58:57:24:dc:49:b2:81:99:6e:a8:69:
1a:8e:48:24:cd:a3:e0:8f:05:3a:d0:5f:d3:3a:c6:69:18:1d:
74:96:a7:08:a0:76:10:b8:32:9d:86:bf:2b:d1:04:6c:19:8a:
c8:40:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:20 2025 by rpki-client