Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
File: md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json)
Hash identifier: X4MBKTveTQgHFFsyNMPGRSfdJKuP7d/VPsHZFV35C20=
Subject key identifier: 12:CF:23:0A:CB:96:5B:67:EC:3E:BF:E0:44:DD:0B:72:0C:BE:A2:38
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Certificate issuer: /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial: 01967EA146C5C5F863D977C0D32F680D2ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 23:00:20 +0000
Manifest this update: Mon 28 Apr 2025 23:00:20 +0000
Manifest next update: Tue 29 Apr 2025 23:00:20 +0000
Files and hashes: 1: G9mF37Fb91r0jC33-YcK9r4IAmk.roa (hash: MaEVR8Nlqavgaakwb2T4C4sUXoGT+mVODKAXw14Vucs=)
2: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: l61P9fi0o/mwu14+Hien1aUU0CCQqP7x4gndH4Ko0zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:46:c5:c5:f8:63:d9:77:c0:d3:2f:68:0d:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
Validity
Not Before: Apr 28 23:00:20 2025 GMT
Not After : Apr 29 23:00:20 2025 GMT
Subject: CN=12cf230acb965b67ec3ebfe044dd0b720cbea238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:7e:0b:8b:98:6c:cf:e1:cf:21:98:13:1c:
ec:87:28:85:b5:52:78:7f:6e:27:de:e0:c8:60:2d:
d6:f9:fc:e9:0b:8a:ed:0b:b3:e3:ae:fe:12:c6:84:
c5:5c:68:87:b4:ed:dd:c6:b7:c9:84:7b:d7:bf:78:
0c:ef:1e:c0:7c:98:ac:72:da:34:e4:2d:84:75:15:
7a:ad:08:3d:61:01:9b:3b:72:be:ce:3d:f2:b5:2c:
a5:cb:a0:ec:f1:5b:76:4f:76:ff:05:ad:15:b8:22:
06:8b:f3:3f:30:20:0c:78:66:9b:49:11:57:fb:99:
6f:80:6b:ff:4f:6b:89:b5:59:d0:b1:36:bf:19:79:
9d:64:56:6e:28:fd:58:c2:c2:71:76:f0:fa:79:3e:
f6:68:76:77:07:04:40:c4:a1:bb:46:cf:6c:f9:38:
8a:22:ad:fc:a0:fc:6b:5a:4a:c0:75:c6:a4:1c:aa:
70:bf:3d:f7:22:41:18:40:74:fa:e1:17:dc:7a:62:
3e:e6:33:fe:f3:8a:a0:a4:71:4b:fd:73:51:9e:c1:
9d:d9:fb:c8:61:39:e6:e5:95:46:7f:73:d3:1d:97:
f7:d4:d7:c7:6f:fd:06:ac:a3:62:a0:9c:0f:fe:a2:
58:5f:b7:64:5d:c4:db:eb:5b:8a:ec:b6:68:50:0e:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CF:23:0A:CB:96:5B:67:EC:3E:BF:E0:44:DD:0B:72:0C:BE:A2:38
X509v3 Authority Key Identifier:
keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:84:8e:48:db:35:31:a1:5a:5b:0d:1c:74:99:d8:58:2e:10:
00:38:b8:79:b3:3c:e6:8a:b1:af:db:d0:2b:a2:0c:d9:ba:94:
ff:94:6a:c8:ac:7d:df:59:fe:45:d3:aa:22:90:da:40:5a:ba:
b9:24:81:40:34:25:e0:05:4e:d0:9b:80:10:d4:0d:fd:3f:80:
d4:f2:29:0d:f8:bf:4f:74:a3:01:be:37:5a:98:bd:ae:59:b7:
48:98:7d:6b:55:81:b9:48:3a:3c:36:79:61:02:c2:ca:66:a9:
38:9b:40:39:76:c8:d4:05:f3:da:97:f5:0c:35:98:8e:e7:4e:
17:22:7d:93:73:fd:fe:c8:1f:5a:3c:3d:a8:47:3f:71:e7:ec:
d5:b0:44:ea:72:c1:02:dd:1f:d2:ae:c5:94:ec:98:d0:57:24:
d2:bf:bd:09:a8:2b:5a:70:74:97:72:8c:22:2f:cf:13:02:25:
ae:52:a3:3a:36:da:a8:75:d6:b1:41:a3:66:44:cf:4d:d3:a9:
de:6e:d5:95:75:e0:d9:b4:0f:bd:e0:4d:3e:cb:e6:f4:d2:2a:
26:64:1e:ad:e5:74:be:b6:db:75:47:85:d0:bd:37:cd:51:33:
c6:d8:c6:11:5f:46:25:eb:9c:a2:72:36:ad:f4:b1:98:1f:53:
8f:29:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:29:08 2025 by rpki-client