Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: uxCV6NtFweNngOfFfvkdCpIsyT1y/i6DY5PV10pD29c=
Subject key identifier: 87:98:5C:72:77:F4:BA:E9:5F:37:86:18:73:84:4F:8C:8F:07:44:DB
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 0196753047892C789EC15479216CB13B0119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 123E
Signing time: Sun 27 Apr 2025 03:00:20 +0000
Manifest this update: Sun 27 Apr 2025 03:00:20 +0000
Manifest next update: Mon 28 Apr 2025 03:00:20 +0000
Files and hashes: 1: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: c0s624IOregQCDU2v4zeaIm6mxfgPqrJZdI5YcnNLBg=)
2: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=)
3: zmcBckUxuKaBoSS2-IE8qAAieFk.roa (hash: zuTF25+EetsvafVF215FiE6HAdQFZXfOVRgob3VxMdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:47:89:2c:78:9e:c1:54:79:21:6c:b1:3b:01:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Apr 27 03:00:20 2025 GMT
Not After : Apr 28 03:00:20 2025 GMT
Subject: CN=87985c7277f4bae95f37861873844f8c8f0744db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:32:86:a0:36:57:ef:c9:35:be:6f:97:f7:
2e:b4:8f:63:1f:bc:77:fc:28:86:d5:ff:0b:48:ff:
e3:68:7c:c8:01:47:16:4c:4d:25:be:f0:bb:2a:53:
62:29:74:24:0d:d8:dd:10:10:6e:7d:cf:1d:8d:a8:
f7:57:83:0c:1e:98:e6:99:4d:7f:73:da:f0:15:92:
fb:41:3e:93:9f:03:86:9f:49:2e:97:f9:49:b4:a8:
81:20:32:39:85:be:6f:2a:67:33:84:76:a9:be:36:
5d:68:fe:08:6f:56:03:29:c3:13:ef:3c:1e:32:a4:
b2:24:a0:f9:7e:94:6f:4b:1f:5a:4c:d7:02:c1:47:
37:90:1e:64:40:05:6b:56:c8:71:7d:95:0c:cd:8e:
17:09:0b:1b:8d:15:57:78:8d:0f:e6:23:df:d0:c9:
f5:15:68:9e:99:b4:80:aa:c1:2d:2d:2b:e8:34:df:
51:ad:ea:ef:9d:fd:d4:06:a2:53:62:0c:af:4d:2c:
41:14:23:30:26:52:a7:2f:e1:80:e6:26:7a:65:35:
51:93:e2:dd:2d:30:9f:17:e4:01:9b:f3:80:f0:03:
33:72:38:4a:7c:7a:50:da:d7:3f:cc:94:04:c4:74:
cc:f2:ca:9b:8a:da:87:1c:94:c4:17:ff:2b:a3:60:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:5C:72:77:F4:BA:E9:5F:37:86:18:73:84:4F:8C:8F:07:44:DB
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8a:28:25:85:80:7a:1e:be:e0:6c:5d:74:c2:aa:de:44:66:
c4:92:06:9e:5e:af:27:36:e9:84:ae:55:3d:81:d1:61:b1:bd:
7b:ce:71:76:00:6b:e2:d5:f5:02:cf:a2:b2:8d:22:50:f7:85:
1b:56:3c:d1:bb:f1:63:e6:04:73:3b:7c:62:a1:71:3e:f0:2f:
8c:6f:ff:f4:2f:fa:22:a5:9a:b4:65:a5:cc:10:b1:72:55:6d:
38:65:47:31:6e:2a:36:cd:85:31:7e:ab:c2:2a:82:1c:b3:0a:
0e:c2:17:80:43:61:f1:b8:24:8a:04:20:be:84:ec:4e:47:fa:
6b:9e:c6:52:ee:71:ac:08:15:be:2a:34:6b:6d:75:44:e5:51:
77:61:60:76:a2:f0:f1:69:8e:fd:29:98:3e:bb:74:5b:cf:39:
b1:06:13:9c:41:32:e8:03:aa:f9:85:ab:e2:44:34:d7:a2:a7:
56:99:a8:31:0d:5f:51:f5:0a:64:b3:51:c7:56:3c:91:ca:3a:
90:a7:45:43:13:c5:02:45:03:5e:4f:8c:d3:e0:82:d1:84:cf:
d7:44:60:48:f6:33:eb:fc:c0:3a:c4:7b:c4:32:31:7e:e2:fd:
fe:26:91:02:ea:4f:58:06:12:77:b3:ec:56:f3:b6:23:d5:94:
21:9d:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:08:07 2025 by rpki-client