Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: 9wZHEYY8s75x43CRyeBUTHodEpBu+sywsN/bB20Ujrc=
Subject key identifier: E5:30:46:54:AB:31:E1:84:23:16:F5:82:F0:E5:FC:93:56:2D:1B:25
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 01967F460D54AB73C4F1B0066BB4D87E256F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 02:00:19 +0000
Manifest this update: Tue 29 Apr 2025 02:00:19 +0000
Manifest next update: Wed 30 Apr 2025 02:00:19 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: sS3r6HwVo7IfBHByX3vsjU4FQ8qZQBY6OGRz20DnTA8=)
2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:0d:54:ab:73:c4:f1:b0:06:6b:b4:d8:7e:25:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Apr 29 02:00:19 2025 GMT
Not After : Apr 30 02:00:19 2025 GMT
Subject: CN=e5304654ab31e1842316f582f0e5fc93562d1b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:76:41:f9:2a:8f:2d:c3:3c:d5:3c:67:6b:
e3:0f:4e:92:be:68:77:b4:b7:41:41:85:b7:89:1e:
02:2e:bd:f2:71:64:e5:bf:e0:0f:cc:6b:05:ab:f8:
7b:cc:79:9f:ab:68:2c:30:be:e7:85:22:4c:58:24:
2f:22:00:e9:33:b1:17:c1:43:04:fb:bd:48:88:71:
b5:c1:3a:9d:f7:31:2c:3b:0d:5d:8e:dc:d3:d4:1b:
a2:b0:5f:9e:eb:fa:46:19:fd:79:49:cb:22:0d:cf:
74:95:e2:7d:79:02:74:54:86:03:49:e8:b9:46:dd:
ba:eb:d6:ee:e9:c0:4a:3e:e4:6a:d8:5c:59:46:b8:
50:13:5a:a7:0e:1e:a3:64:64:20:bf:40:fb:ab:89:
e9:5d:e9:1d:bf:91:e8:db:64:f1:37:ef:97:0c:d1:
15:be:03:f6:bb:81:0d:48:74:84:4c:b4:df:fa:f1:
b6:92:9d:bf:9d:5d:02:62:6e:b4:18:f5:ba:cf:99:
85:e1:44:20:00:39:aa:1c:b2:32:ce:35:bf:59:89:
a1:08:a5:74:cd:ee:4b:82:f8:b6:a4:b8:18:34:96:
29:fc:be:f6:3d:ae:02:86:5b:e3:54:79:62:bd:58:
49:39:4b:e0:43:aa:ad:8c:9b:6f:50:b2:e2:95:93:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:46:54:AB:31:E1:84:23:16:F5:82:F0:E5:FC:93:56:2D:1B:25
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:e8:e1:8d:ce:78:89:6c:3d:cd:02:6f:19:e6:87:91:8c:03:
02:b3:c5:29:0f:0e:d3:9e:83:f4:9e:77:1a:d8:d3:6d:6c:23:
e0:00:07:7b:cf:ce:23:82:05:33:61:3e:b1:b3:af:25:ee:5a:
26:cd:52:b2:d0:d6:b2:b9:2d:25:61:16:dd:aa:22:02:5d:fd:
30:78:14:0f:dd:fe:1f:80:06:d3:cf:2f:18:93:cd:46:2e:5d:
4f:cb:0d:c0:f9:25:1a:88:47:a8:14:bb:91:1d:2a:d0:30:fa:
5e:52:f8:27:a3:72:9f:97:cf:1d:00:2f:88:2e:60:cd:71:74:
54:08:39:1c:09:dd:ac:6f:d1:33:3b:64:f6:33:b7:f4:a9:96:
70:d1:68:67:f1:08:fa:22:60:40:84:b5:42:39:f7:24:42:95:
bb:ac:a9:ab:78:99:43:b7:25:a8:92:ac:29:6f:8d:0a:52:83:
32:13:41:b6:00:b7:90:0c:9c:78:76:4d:de:d3:7f:7b:7d:6f:
60:a3:f8:61:32:d3:0a:21:b0:cf:a4:19:9e:e8:37:67:86:d0:
b9:a4:3d:e0:05:dc:16:7e:d7:02:2e:45:57:c1:89:b3:3e:d3:
c3:b7:2a:dd:a7:b6:27:94:1c:1f:10:29:b4:b7:7a:93:83:8c:
3e:4d:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:32:23 2025 by rpki-client