Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: Cso1Q5Kd6+kgpp+VcPi6eCa5Su5DjB2A0dMQFw7BOPo=
Subject key identifier: 4E:CF:38:8E:EA:64:87:5C:53:F1:F3:ED:72:17:FF:98:C0:7C:A0:A7
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 0196760CBEB5CF36B9D48BDF5ECBDD246F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 0B2C
Signing time: Sun 27 Apr 2025 07:01:08 +0000
Manifest this update: Sun 27 Apr 2025 07:01:08 +0000
Manifest next update: Mon 28 Apr 2025 07:01:08 +0000
Files and hashes: 1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: 4x6+lpoL6rQ8FqIylZUwRIIr4hE5K/YVhjGxUFR6si0=)
3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=)
4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:be:b5:cf:36:b9:d4:8b:df:5e:cb:dd:24:6f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Apr 27 07:01:08 2025 GMT
Not After : Apr 28 07:01:08 2025 GMT
Subject: CN=4ecf388eea64875c53f1f3ed7217ff98c07ca0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:a8:89:a4:25:9a:85:52:1e:02:cc:bb:12:
c8:b1:83:6b:6c:7a:a1:e2:89:38:10:1e:cf:fb:cd:
d0:96:c7:a1:bf:fc:2f:a4:48:4b:b0:6f:49:33:5c:
63:ae:eb:7c:8a:70:ab:1c:41:98:1a:65:14:da:af:
85:17:42:f2:b2:ee:a7:5b:50:74:cf:e6:cf:2c:0b:
21:2e:d3:fe:ec:32:ae:c4:32:5a:4d:78:f8:40:63:
ac:b8:22:11:15:7d:14:fa:7e:85:c3:f3:d6:8b:6d:
56:7c:b5:f7:7d:75:11:9b:c5:88:32:15:6f:a4:e1:
2f:af:8b:e6:3e:6f:fa:31:e1:48:46:8d:41:6b:3a:
6c:29:ea:86:46:f1:d0:c6:0f:26:2f:7a:cf:0e:7c:
1d:9f:46:53:c3:7c:0a:c8:4e:b8:aa:80:c8:29:d3:
3d:84:b7:d1:13:2e:e7:92:b4:df:22:06:e6:50:44:
28:dd:1b:70:3d:96:89:5c:d5:05:12:40:34:96:aa:
cc:4b:fc:6f:54:4a:e8:30:74:bd:f3:c8:c6:bf:a5:
e4:ee:4d:5b:9d:f5:47:16:3f:c7:bc:ea:24:39:db:
88:a4:84:66:be:ba:d0:76:31:c7:1b:ae:aa:90:08:
be:66:c2:77:3a:f1:19:55:55:b4:2c:92:7e:ba:4a:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CF:38:8E:EA:64:87:5C:53:F1:F3:ED:72:17:FF:98:C0:7C:A0:A7
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f2:cc:6b:56:52:ab:7c:3c:9b:e9:ea:40:11:14:ba:e2:32:
51:56:f7:b6:0e:b1:0f:ac:8b:fe:f1:a8:24:c7:32:a0:df:fb:
0d:4f:56:2f:1e:8c:25:1f:c5:43:6c:cf:4a:dd:07:c2:77:23:
3d:c0:1f:ba:11:41:2c:d4:2d:ca:79:3c:ac:f8:37:d6:3a:db:
2d:7a:47:c3:72:21:30:78:6a:ac:a8:ac:fa:4d:17:9d:ca:5f:
0d:d0:1b:4c:2a:30:b1:8b:be:e8:72:39:05:9b:69:a8:38:75:
1b:bd:b1:f7:95:af:80:38:ce:de:0e:d2:a6:6e:5a:c0:e9:4c:
08:70:13:b7:23:c2:2b:44:b7:47:25:bb:7c:29:cd:48:f5:61:
b7:93:00:f4:4b:84:72:57:95:d3:8a:d2:6e:4d:9f:ff:a7:b4:
4f:a6:aa:50:eb:3d:52:68:a1:13:a5:8b:e9:c0:09:bb:5c:3e:
84:b6:97:69:15:fd:97:4a:29:2d:e0:2e:41:1d:e4:a6:a7:5a:
76:16:dd:5d:3b:e0:2f:bd:1d:78:ac:73:5c:d3:91:3e:3b:16:
f4:59:92:df:a4:3f:9f:84:33:d8:1d:da:f6:c4:d2:a5:9c:7b:
33:8d:9a:9c:aa:e1:f1:d2:2b:fc:4d:83:53:14:f1:65:86:d4:
18:1c:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:37 2025 by rpki-client