Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File: mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier: rgnPWn6yLHfNZ6O0VxBhEMmCG14SZKD7V9ep7mPGZ78=
Subject key identifier: 6E:03:77:F3:19:25:ED:B8:44:E8:FA:5D:F5:72:F2:AE:5F:25:18:BC
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial: 01968A6F0C92A9AB19736CD4ABAE65B4F4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number: 03
Signing time: Thu 01 May 2025 06:00:55 +0000
Manifest this update: Thu 01 May 2025 06:00:55 +0000
Manifest next update: Fri 02 May 2025 06:00:55 +0000
Files and hashes: 1: NymzbNZBsKNd-Q-QLvAahyZY8zY.roa (hash: 4tm9+O5MAP6uU3Q2HGQCNAKZry1kf/X+Xwuo3WltB+8=)
2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: q+PhiKQet9QXb26f9Xmcg3pnOf1TzKBYD5rWbLsKR9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6f:0c:92:a9:ab:19:73:6c:d4:ab:ae:65:b4:f4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Validity
Not Before: May 1 06:00:55 2025 GMT
Not After : May 2 06:00:55 2025 GMT
Subject: CN=6e0377f31925edb844e8fa5df572f2ae5f2518bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:cc:f7:cf:dd:65:d5:3b:80:00:e0:c4:7f:
93:ba:2e:9b:c8:f4:02:7b:a6:94:f3:75:77:61:c2:
a0:53:53:2a:b5:65:43:23:cc:c7:0a:6b:05:d1:29:
f1:aa:ee:a3:0a:ee:18:c9:97:f0:2b:3c:05:bb:08:
d8:d0:3f:41:42:2c:d2:86:ff:31:88:4a:1f:50:86:
1e:8a:1d:bf:34:3c:7e:82:6a:03:36:e8:1e:96:61:
1c:34:ba:0f:67:58:f9:0f:a5:de:ca:98:a6:7f:7c:
c2:44:bb:fa:2d:b2:4e:7b:25:47:7b:a0:70:41:c4:
05:f5:de:a0:ea:15:9b:e7:10:e2:16:77:66:92:bb:
77:84:06:f7:e9:e3:11:f9:b7:60:83:21:e5:11:62:
1d:28:37:43:75:f4:50:16:d0:fd:66:1d:05:bd:ff:
50:5e:2f:67:77:1e:d9:a7:f6:d6:b7:d1:7f:48:5a:
0a:5b:fa:e5:df:98:fa:70:f9:64:5d:80:cb:8f:12:
d5:75:25:74:88:35:9c:f3:a2:2b:8c:92:e9:e4:8f:
ed:42:75:6b:93:e3:b5:79:1f:24:67:80:d4:d7:b3:
e5:9f:c2:82:9d:0f:39:b7:a3:a0:60:2a:55:69:09:
41:62:cc:2f:ed:6a:62:f8:35:1d:c1:5f:fb:61:e5:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:03:77:F3:19:25:ED:B8:44:E8:FA:5D:F5:72:F2:AE:5F:25:18:BC
X509v3 Authority Key Identifier:
keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a2:c0:33:5c:7c:fa:5b:24:d1:82:ac:e7:f6:8b:cf:61:16:
17:62:0e:4b:bd:dd:f2:2c:78:de:d5:c7:91:45:a8:d4:19:3b:
f2:32:43:dd:73:8d:c6:e5:0b:20:30:88:a6:07:00:52:10:a1:
7f:ad:d8:f4:f8:38:e1:d6:21:76:2e:a6:7a:cc:86:b3:ac:05:
8c:1b:c5:51:12:6f:13:d4:99:05:d4:82:13:3b:cb:65:73:de:
60:ab:13:91:ee:f2:9b:ba:8e:45:04:cb:c5:69:e9:92:a5:3c:
1f:f0:fe:30:f9:14:a7:02:d9:fc:fe:7f:2f:48:75:a6:22:49:
4c:3f:bc:95:a3:aa:8c:07:07:e1:4c:19:9a:f8:37:2b:28:cf:
d3:f9:28:ee:8b:72:36:32:85:ce:ad:79:fe:c4:13:bb:ab:40:
7b:5b:fe:f2:f5:69:06:1d:6f:47:4b:f0:d2:5c:cc:98:cb:d0:
a0:f3:af:5f:44:de:5b:67:4b:a4:a6:5f:89:21:50:f4:3a:50:
81:73:46:2d:ca:ea:ea:bb:cc:05:c4:a9:7f:6f:a2:7a:26:bc:
f3:f9:e4:8f:4d:9f:84:f5:18:2a:84:ac:7e:dd:4f:cc:46:15:
e7:8d:c5:32:ba:4a:a6:f7:c1:f0:b0:ac:56:d7:1f:23:12:1e:
c3:8f:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:57:08 2025 by rpki-client