Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: +yoX1MZyBIhdpTcG9oH2qYzxckL+BYNSP3KHdAEojSA=
Subject key identifier: 81:61:2F:95:58:68:4C:99:2A:8A:3B:71:C2:07:5B:51:5D:4E:C6:18
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019679447674BB395D8DEF78929DC557454E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0B3E
Signing time: Sun 27 Apr 2025 22:00:51 +0000
Manifest this update: Sun 27 Apr 2025 22:00:51 +0000
Manifest next update: Mon 28 Apr 2025 22:00:51 +0000
Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: z89zBMHrTI4V0e7i/+lqoDaCM9EQg/GzEBCbbakvkRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:76:74:bb:39:5d:8d:ef:78:92:9d:c5:57:45:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Apr 27 22:00:51 2025 GMT
Not After : Apr 28 22:00:51 2025 GMT
Subject: CN=81612f9558684c992a8a3b71c2075b515d4ec618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:13:29:5f:81:1f:32:d0:ab:a2:e0:7e:85:
f4:cd:dc:31:e4:5b:5c:58:82:f4:7b:de:bb:15:e2:
b0:7b:55:e5:58:79:83:e6:68:ee:c5:8c:95:bb:c0:
30:09:05:7a:b6:67:80:55:9b:15:09:2d:ca:93:b8:
0a:a6:75:94:79:b0:4e:c0:dd:1d:aa:a2:be:14:1b:
0a:22:a2:bd:d9:00:b7:e7:f2:e5:6e:82:23:e2:6a:
59:50:af:d9:32:5c:c8:42:1e:d1:15:df:3d:b7:06:
8e:fc:91:ae:7d:21:2b:de:31:91:81:00:de:2a:75:
d3:aa:c4:21:cd:22:77:cf:97:62:78:bc:4e:00:13:
d0:6e:19:7f:f2:f2:78:af:e0:bc:03:78:56:f9:e7:
a4:79:d6:e6:ec:6c:6f:4a:34:53:fc:a0:d0:80:64:
c0:7a:6f:aa:2e:11:ae:81:10:20:03:09:5f:3b:c4:
f5:73:c1:cc:ae:f4:70:1d:4b:c0:90:9b:c7:b8:b3:
4e:68:be:81:de:9f:72:9f:c1:c4:5d:31:b2:61:73:
90:08:ef:37:ff:74:c6:61:bc:4c:b4:e2:b7:9c:ea:
fe:fa:5e:1d:6c:76:5d:99:f9:2a:35:37:bb:ba:c6:
f1:1a:f8:80:2f:db:db:05:6a:e2:0b:04:61:f6:bc:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:61:2F:95:58:68:4C:99:2A:8A:3B:71:C2:07:5B:51:5D:4E:C6:18
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:33:1a:68:cd:bc:51:a7:23:94:95:cc:61:3a:a0:95:8d:fa:
1c:64:cb:ef:4e:d3:b6:93:73:d7:94:50:95:82:05:f0:33:2e:
7d:c0:53:e1:0f:e6:a2:42:2d:6a:de:ef:44:8c:61:b2:7a:87:
ad:24:dc:26:dc:96:d8:7a:25:75:b8:95:21:b6:48:1b:ff:ad:
0c:ae:7a:6c:e8:d8:ee:a2:04:5d:3a:a8:9d:cb:e9:20:79:69:
24:f7:6d:43:20:98:55:17:cb:47:f4:a7:8c:4b:a5:b1:44:11:
31:2f:87:d8:9a:7d:53:ed:90:24:9f:9a:1f:2f:45:d1:1a:3e:
1f:6b:6b:c7:fd:cc:11:34:cd:ca:44:ae:db:1e:b2:55:18:8d:
52:d2:85:ef:92:8b:3a:2e:e2:16:f0:b3:5b:e5:f5:8a:cf:fc:
73:d9:35:97:fc:ad:69:af:52:c5:53:00:8f:a9:ee:3d:6e:3f:
76:27:17:01:6a:86:9d:b9:df:f7:20:74:59:70:e7:5e:46:32:
bb:2e:4d:95:32:25:a2:73:7e:fb:0e:b2:82:b9:55:87:1e:94:
dc:90:84:c9:75:af:b5:1d:a0:a4:f4:86:4d:0f:86:cf:58:c0:
69:d8:52:ee:3d:8e:2c:73:ee:ac:cd:fc:50:8e:fa:b4:68:90:
c6:f2:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:51:23 2025 by rpki-client