Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: qSGB9hkpGffaqNif0kWVxHo6rFWDW1cRp3gglr4jCG4=
Subject key identifier: 46:2D:8F:AF:20:A4:AA:71:43:31:CB:66:7B:C7:CD:2F:3F:BB:E6:38
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 019675D53CD28F9D7B0C95555B8F40A0968D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 0358
Signing time: Sun 27 Apr 2025 06:00:31 +0000
Manifest this update: Sun 27 Apr 2025 06:00:31 +0000
Manifest next update: Mon 28 Apr 2025 06:00:31 +0000
Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=)
2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: k8JDIK3XboEGOSW5rHwKOgxqfVP6TEbzWHOycRfp0RQ=)
3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:3c:d2:8f:9d:7b:0c:95:55:5b:8f:40:a0:96:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Apr 27 06:00:31 2025 GMT
Not After : Apr 28 06:00:31 2025 GMT
Subject: CN=462d8faf20a4aa714331cb667bc7cd2f3fbbe638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:ce:77:18:f7:32:c1:cf:c0:d7:03:a7:35:
1e:42:89:7e:2a:55:e9:69:d8:52:ec:27:00:c3:cf:
4d:6b:b6:ec:9a:37:43:b9:db:42:b0:e5:7c:e0:c4:
51:20:75:b4:82:c9:00:40:af:2c:a7:5f:d7:94:18:
4c:33:9b:fe:eb:5c:98:8a:93:07:9a:9b:b5:60:fe:
85:5e:58:28:bd:06:e9:26:f7:86:2a:58:bb:82:a6:
6e:77:7e:06:a0:08:23:b7:20:5e:4a:4f:7c:6b:ac:
77:55:fd:97:57:ae:35:b3:68:53:ef:44:af:31:4f:
91:ba:28:4b:dc:46:46:22:e1:27:b3:d9:8d:ab:9b:
b3:16:39:1e:fb:b3:1a:58:57:b4:0f:03:a6:5b:c9:
bc:f5:d0:04:e5:b9:0f:13:5e:d5:40:d8:a6:81:d4:
de:50:11:16:a6:63:17:e3:cf:aa:34:ee:a5:e5:ca:
94:e2:1f:22:33:98:4c:6a:d1:c0:11:07:3c:92:09:
64:4f:a0:49:94:fd:c7:d1:15:20:58:26:ca:8c:62:
ff:98:cb:cb:14:a2:62:8c:f2:c2:e0:2e:a9:29:cf:
d9:22:72:8c:b0:1d:74:b7:a7:66:41:e3:a1:0b:b0:
0c:1c:bc:f5:b2:50:74:45:37:cd:3b:96:29:4f:8c:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2D:8F:AF:20:A4:AA:71:43:31:CB:66:7B:C7:CD:2F:3F:BB:E6:38
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1b:b7:d8:a3:f8:4e:34:1d:b6:dc:66:6f:55:5c:8b:bf:47:
4f:2a:32:e9:2e:bc:2c:90:b5:57:03:8b:04:91:06:85:ea:53:
b0:e8:ec:b6:ea:5f:44:26:2d:21:13:95:0d:f0:cd:38:d5:91:
8a:b6:25:42:f5:c6:10:c5:7f:40:ce:2f:23:89:c1:f2:fa:4c:
66:d8:ed:5e:6e:2f:4e:6e:41:eb:43:51:19:ed:f9:76:35:9d:
1f:44:a9:8c:56:0f:8e:a7:0b:aa:3e:e7:90:a2:fe:a1:cc:08:
a9:d6:31:ea:9f:a5:67:1b:14:c3:d7:fa:e2:1b:d9:16:51:e6:
61:26:88:08:7c:43:99:b7:64:38:94:e3:44:24:d1:9a:ae:9c:
b4:ab:62:f0:e2:95:7a:7b:dd:4e:29:bd:6c:01:ad:54:e2:93:
47:4f:c0:63:44:66:18:ae:63:eb:26:95:a2:1d:ac:0c:ae:d2:
b0:fe:3c:5e:dc:97:7b:90:38:33:0d:2f:fe:9e:8f:14:3b:62:
cd:7d:16:8e:2d:44:52:4b:5c:4c:4c:b4:74:74:ef:6d:22:52:
c2:d7:03:ef:69:ad:e3:9f:d3:f2:d2:0e:19:26:3a:e3:62:17:
44:c3:1c:ec:69:a0:ba:0a:f1:e6:42:5e:60:a7:c6:01:01:7a:
65:d2:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:25 2025 by rpki-client