Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: ls4DDW5fFkG1z17IZuMFUUTZaQtbd3TJUKsbZbPKeNw=
Subject key identifier: 1C:4B:44:80:79:9D:36:F2:3C:7E:AA:D5:33:BF:5F:F6:B7:77:E5:18
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019682B5779FB70A07CF6A0EBFD5E8323D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 151B
Signing time: Tue 29 Apr 2025 18:00:52 +0000
Manifest this update: Tue 29 Apr 2025 18:00:52 +0000
Manifest next update: Wed 30 Apr 2025 18:00:52 +0000
Files and hashes: 1: 0-dFdMQBS6PQc_H8zCEvitr9Geo.roa (hash: wf7BGdUuzEvUWE1tRs5aPe5d6Kbqkjno2v5St+tRxhA=)
2: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=)
3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: 04NLuiZZRRaLmHxlircRLAgwBjsirj964K/9ckFl3ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:77:9f:b7:0a:07:cf:6a:0e:bf:d5:e8:32:3d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Apr 29 18:00:52 2025 GMT
Not After : Apr 30 18:00:52 2025 GMT
Subject: CN=1c4b4480799d36f23c7eaad533bf5ff6b777e518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:f0:8c:15:35:d5:c0:cd:d4:f5:1e:4e:83:
b9:90:70:1c:12:ca:25:08:aa:90:a2:51:a4:7e:4c:
d9:13:5a:8a:72:41:ac:7a:62:33:62:33:b2:55:ae:
c6:d4:a6:8b:9c:1a:8c:2b:b5:a4:ec:b5:c0:4e:b7:
df:08:6b:bd:b8:63:a5:d3:28:05:04:ec:ed:32:3e:
a3:7a:27:7c:83:1d:43:5c:c0:41:bd:fe:06:7d:23:
76:01:f4:bd:09:f8:9e:0a:fc:28:95:4e:a0:e5:a9:
31:de:52:76:aa:c4:7f:70:97:d8:38:7e:e4:54:b4:
70:83:8c:48:9b:c3:91:75:22:e2:d5:f5:af:7f:e8:
ce:be:46:64:f7:14:9f:9b:ef:12:18:ef:70:9b:40:
4c:b3:3c:ff:cd:b3:23:12:24:1f:a2:60:eb:85:98:
66:cd:ba:f2:90:7b:ff:34:a6:cc:fb:c5:1e:02:93:
4e:ca:5b:29:fe:b0:94:e6:39:4c:a1:4e:9c:e0:f2:
cb:ce:81:4c:df:2f:e7:25:f4:fe:86:68:54:74:d8:
33:e9:0b:f1:2e:84:89:a6:1f:b3:01:f0:df:d9:87:
22:4d:7f:bf:53:bd:f0:39:2e:78:15:8b:51:b4:dc:
2a:2b:79:13:6f:a9:bb:42:ad:1b:78:6d:0d:47:47:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4B:44:80:79:9D:36:F2:3C:7E:AA:D5:33:BF:5F:F6:B7:77:E5:18
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f5:51:e9:b0:20:d6:8a:f1:03:78:41:ab:54:ce:64:a8:22:
04:03:de:8e:53:5d:9f:7a:6e:4e:53:52:36:66:19:c4:40:47:
b2:a6:72:ec:71:d0:21:09:de:4c:04:4a:09:ce:ab:61:cc:7d:
41:4a:c8:5d:cf:32:ab:66:e1:77:3e:24:5d:1f:36:14:e7:29:
05:29:8f:52:aa:4b:9f:d3:fb:bf:0a:99:50:91:bb:13:04:15:
5a:20:5f:38:49:3c:a6:56:de:3e:79:ad:92:f0:e8:23:f8:d9:
1b:0a:14:8e:c5:81:5d:27:f9:6a:ea:fc:81:35:ac:8d:be:a9:
13:8f:31:07:13:b4:e7:cc:40:6d:d6:6a:ef:64:63:d5:31:65:
be:98:2d:ce:e2:8b:f8:5d:ac:31:39:e5:b3:56:e8:6f:60:ae:
15:92:53:a8:2c:65:c2:85:b8:7d:58:4e:35:b5:f7:da:88:e6:
96:8f:20:03:39:8e:20:c7:57:be:8b:1e:a7:41:00:b7:1a:7a:
fb:d5:cc:2e:e2:38:9f:86:a4:bc:64:8d:7f:0a:42:63:fa:e0:
b7:90:8d:2f:1b:25:cd:9b:8c:36:73:26:66:48:f9:57:58:6b:
60:5f:c6:f0:5c:ca:fd:ff:6d:a0:58:60:25:75:3b:87:72:f5:
b0:11:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:28:36 2025 by rpki-client