Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: ZkqHnDCxbl2RNaLSM/j/hyHCtNub4jIvBagno2zNE7A=
Subject key identifier: CF:FB:B5:5B:9D:66:F4:CA:CC:E1:8F:8D:11:FC:A0:29:A1:BA:31:D3
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 01967DFCC1F8EFB1F064AF7F83E84AB4078D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 043F
Signing time: Mon 28 Apr 2025 20:00:38 +0000
Manifest this update: Mon 28 Apr 2025 20:00:38 +0000
Manifest next update: Tue 29 Apr 2025 20:00:38 +0000
Files and hashes: 1: N5euriRPkrPM5tpe3YMpJKwtnXs.roa (hash: Aif5H8pBLwxI+pfqg48v8EjEzgULti0iCYfChkXvfLI=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: gVMi7qAjgiLM8+1Ocm8ym2ZawBbYEM9Wx+I+m4hst/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:c1:f8:ef:b1:f0:64:af:7f:83:e8:4a:b4:07:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Apr 28 20:00:38 2025 GMT
Not After : Apr 29 20:00:38 2025 GMT
Subject: CN=cffbb55b9d66f4cacce18f8d11fca029a1ba31d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:7e:4e:8b:79:f9:9d:39:9c:c2:fe:6f:66:
6b:10:ea:34:42:46:28:14:43:8b:a0:de:b6:84:af:
98:0d:39:16:54:55:48:6b:c8:75:a6:b0:90:74:62:
77:26:75:f2:87:c9:51:e6:3f:68:35:c3:d8:0d:07:
68:e0:35:03:60:1d:35:ac:dd:6f:ca:eb:94:81:15:
c1:75:0b:06:4d:d7:31:06:c4:ef:76:4a:6c:2a:fb:
8e:ca:a4:53:74:aa:b5:df:98:0d:97:3e:1a:7a:62:
4f:fc:5c:06:c2:16:23:26:0e:b3:65:d1:07:6a:e9:
71:b9:8e:53:03:f2:80:b9:1f:67:c1:23:98:df:12:
fd:ed:94:ed:5f:8d:e9:1f:94:dc:5e:47:00:a8:c8:
c2:08:67:9a:c8:c6:2f:5c:9b:de:a8:b5:45:27:98:
87:9a:4c:4e:a0:40:85:13:3e:0e:01:e7:83:79:e6:
a4:27:50:a3:2e:fd:4e:de:b0:93:b0:32:d8:3b:f6:
88:fe:56:ff:ce:82:0c:56:32:00:e5:fd:2b:1c:41:
fa:1f:e2:e1:57:04:40:7a:fc:c1:7a:42:16:7a:31:
d4:b6:f2:28:ab:83:9e:f3:f6:ed:e2:8e:16:35:27:
b6:2a:ba:0b:98:02:83:15:b3:6f:18:4f:80:b1:75:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FB:B5:5B:9D:66:F4:CA:CC:E1:8F:8D:11:FC:A0:29:A1:BA:31:D3
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1d:6b:e3:4a:e7:d2:f2:92:ab:66:e2:ec:e1:e0:99:4c:63:
3c:dc:29:09:79:b6:2e:58:d8:81:8d:b4:2a:e7:00:77:c7:cc:
eb:e3:c3:88:02:14:3d:8c:75:30:b2:cd:11:a7:0e:ee:95:74:
49:6a:1b:aa:9f:c5:06:d8:77:19:2b:19:2d:9c:f5:21:b8:c3:
ad:dc:16:86:ef:e0:16:94:63:a5:fe:d0:07:95:58:75:20:e8:
08:fb:1e:e8:5a:44:81:5a:f8:2a:aa:35:6b:23:ac:6b:4a:98:
3a:7e:cf:a9:8d:b5:92:60:fb:c8:df:c9:e0:f8:ce:f1:0b:86:
6f:d6:11:21:fc:3d:fc:00:dd:26:23:c0:e0:b8:58:e4:21:6d:
c0:ab:12:2d:bb:55:c9:12:b8:6b:00:b6:d6:14:f4:bb:eb:28:
96:6b:6e:fc:10:ed:43:0d:93:a3:1a:14:da:b3:00:81:63:ec:
15:0a:60:8e:e8:4f:38:5a:5f:8d:8d:80:cd:2e:45:80:87:45:
96:9e:54:51:bc:1e:2d:77:40:bd:f4:ed:24:9d:d2:ce:5f:18:
62:13:ec:b4:b8:fe:4b:a6:f2:dc:e0:11:b1:db:3c:10:b6:cc:
2a:4c:6f:0e:e3:d8:6f:bf:99:59:be:18:9b:f6:5e:19:ce:b7:
71:c8:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:27:21 2025 by rpki-client