Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: C00fe7br9jIT55NUVPB3R5721UT1Lbu4cmSLtXn5TEU=
Subject key identifier: 83:9E:A9:C9:0B:96:74:DE:1D:61:90:EB:C5:C8:42:58:90:22:4B:93
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 0196760CBC270B323E93FF8162925385F06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 0EDA
Signing time: Sun 27 Apr 2025 07:01:08 +0000
Manifest this update: Sun 27 Apr 2025 07:01:08 +0000
Manifest next update: Mon 28 Apr 2025 07:01:08 +0000
Files and hashes: 1: STbkSsaZ4h0iV7Ywpice3xeLm7Q.roa (hash: OYYfvGM7goZ9gxelNf2ly9w5B8haX1abcCwOvQfYiPk=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: OTYg8RmkeVGAspQ/GVzT89fs68UUfigJrhV6OkBuReE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:bc:27:0b:32:3e:93:ff:81:62:92:53:85:f0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: Apr 27 07:01:08 2025 GMT
Not After : Apr 28 07:01:08 2025 GMT
Subject: CN=839ea9c90b9674de1d6190ebc5c8425890224b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:10:a9:77:45:09:96:8b:99:83:3d:c2:1b:
bc:71:2b:3a:15:4d:c2:da:bd:15:81:c3:3b:be:a7:
6b:85:68:7f:9d:0a:a2:57:cf:5b:3e:4a:c3:2f:14:
22:2e:35:78:9d:29:27:7a:99:04:c4:cb:2d:5a:0b:
36:4d:5f:27:af:64:73:b2:8a:7d:b9:e0:83:30:a2:
51:72:3a:73:9f:cc:3d:0a:60:eb:02:c9:6d:36:57:
09:98:b2:43:1b:35:34:d3:ba:c3:ec:1c:9b:ec:98:
5a:96:16:95:26:64:0d:94:a9:8c:f5:78:ad:76:aa:
26:bc:35:00:47:57:c7:a4:63:be:da:79:48:95:31:
7d:d0:64:bf:16:ce:be:bd:96:6e:80:f8:0a:c9:1f:
14:64:c7:25:6f:aa:27:75:9f:48:ab:92:cc:80:1c:
cc:e1:33:f6:63:29:40:35:99:9f:65:fd:04:2d:8a:
0c:ce:63:eb:7a:f8:f0:3d:26:35:17:37:9b:ce:81:
c6:f9:3f:4c:38:ad:39:96:63:0f:d0:ef:da:be:23:
c7:21:e6:0c:7b:c3:9e:8e:6e:f9:81:43:70:b4:01:
4e:98:40:b9:5f:b8:1a:cd:e2:0a:5d:3e:47:2d:dc:
27:d5:c8:21:6a:5e:1c:3e:c4:0d:47:71:eb:eb:65:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9E:A9:C9:0B:96:74:DE:1D:61:90:EB:C5:C8:42:58:90:22:4B:93
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a5:9f:f7:f0:f6:a3:fe:fe:14:18:bf:c6:43:d4:f2:63:ec:
19:f4:06:78:38:57:fb:22:d8:6a:aa:15:7c:55:36:c8:d1:56:
67:aa:ea:74:5f:3e:71:0f:f3:3f:00:63:ec:39:ac:5b:49:a1:
f9:c3:b1:35:64:0a:fd:a8:13:7e:f3:4c:17:4f:68:52:43:85:
aa:b6:99:9e:e9:23:2e:e7:b8:c9:f0:69:9e:a1:0e:b6:25:18:
71:5b:2a:a3:82:41:10:70:15:90:d4:10:f6:1b:85:87:56:f8:
92:37:7e:5e:e5:c5:35:a1:e0:c9:2d:cb:03:bc:ff:94:f4:a7:
18:03:c7:39:03:c5:84:53:fe:f2:06:bd:86:57:91:99:cf:e4:
fe:5a:1b:7d:32:3b:68:a4:0b:06:99:64:ea:76:c8:2e:c1:c8:
c7:e4:67:5a:1d:a2:7c:46:9c:20:1b:15:91:9d:d0:2f:57:79:
9a:c2:ed:b7:52:66:73:74:0c:94:84:dc:ef:3a:07:90:82:ac:
e4:42:a6:ba:c4:d3:e8:f0:70:b5:af:79:25:f8:f5:90:b1:9f:
e8:43:5e:d1:ec:11:fa:4c:7d:1a:48:41:b3:55:66:09:f2:09:
09:96:86:38:63:7d:3c:f9:3b:cc:4f:99:82:7c:c1:13:2c:3d:
e1:25:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:40 2025 by rpki-client