Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier: lWYfg7tleN9jJrGALJflU0nbE3uvDX2NhNpOc0kcWGk=
Subject key identifier: 06:8C:6A:75:E3:55:C4:C0:3A:11:F2:AC:EB:AE:27:B6:E8:06:24:D0
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 019682B54D20F2831ED9ED4E202D282F5D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number: 123F
Signing time: Tue 29 Apr 2025 18:00:41 +0000
Manifest this update: Tue 29 Apr 2025 18:00:41 +0000
Manifest next update: Wed 30 Apr 2025 18:00:41 +0000
Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=)
2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: iEsduKB6H5ae0LU+2vFDqC14S0d/tzJexhqcVZoYZIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:4d:20:f2:83:1e:d9:ed:4e:20:2d:28:2f:5d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Apr 29 18:00:41 2025 GMT
Not After : Apr 30 18:00:41 2025 GMT
Subject: CN=068c6a75e355c4c03a11f2acebae27b6e80624d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:0b:d1:0d:47:84:be:62:22:dd:65:45:3c:
98:50:45:9e:22:f2:c7:ce:4b:9f:ac:ff:a0:4c:6b:
6e:5b:d1:f7:95:2f:4b:d9:91:af:e7:2c:34:ea:87:
cc:1c:30:fc:02:aa:6e:81:ab:c1:17:7a:24:40:17:
cf:86:3d:90:72:51:06:67:cc:80:4d:0e:44:16:df:
80:96:e4:df:a2:e2:6c:c7:50:d8:c3:1c:57:dc:c8:
40:ad:46:48:24:b9:62:20:8f:3f:b4:a3:3a:f2:68:
d7:9c:30:50:6f:75:cc:50:4a:ef:87:d8:ef:33:1d:
dd:27:66:37:14:48:29:52:ec:8a:06:06:6c:c0:a3:
ad:01:56:7e:02:bf:03:d3:dd:38:f4:fc:00:a1:17:
f0:2b:6d:e9:01:9e:40:34:0a:ea:30:c8:9c:d6:b3:
26:f5:af:32:76:8f:34:50:ed:7c:0c:9f:03:3d:07:
c1:eb:4e:9f:d3:03:2a:16:a4:99:57:98:e4:12:74:
d1:91:72:a1:08:11:21:a9:ca:ce:7b:d2:18:0c:b5:
54:f2:d4:dd:d4:a8:d6:1f:7e:19:48:9c:54:f8:e5:
7e:dd:e1:50:ed:9d:cb:96:8b:5b:f3:a5:60:69:79:
6f:28:21:01:77:d6:e5:20:a5:80:63:bc:f2:9c:f9:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8C:6A:75:E3:55:C4:C0:3A:11:F2:AC:EB:AE:27:B6:E8:06:24:D0
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:4a:7a:a8:e5:1d:c9:cc:78:b5:cb:6b:37:b4:7a:e0:42:
ce:c7:d6:31:9f:80:c8:95:bb:60:95:d0:42:01:56:ba:c7:a1:
77:ba:80:fa:68:e0:cf:af:6d:f3:ce:ed:30:a6:e1:50:6f:c8:
4b:d3:cb:7e:bf:df:5c:b2:27:bc:30:8a:c6:31:99:dd:c7:ab:
94:42:5e:5f:a7:3e:7a:41:e3:45:32:5a:a6:b9:6d:84:55:dc:
5c:82:85:25:4d:78:ae:38:00:11:bb:c1:86:5d:85:10:73:ae:
22:53:19:8e:46:bd:0b:53:ba:c1:18:7a:f1:04:a3:5a:6b:85:
f6:9c:78:b4:a1:37:3b:0d:69:db:6e:55:61:06:8d:2d:70:ea:
57:0c:d4:bd:cc:b2:44:7b:74:1e:a1:f1:d3:e2:df:5d:4f:e3:
5b:d9:a9:a5:b3:87:87:93:4d:1a:0c:78:f0:df:94:f6:03:44:
b5:af:8f:ae:17:dc:94:c5:40:70:d2:e5:31:0c:05:e6:2c:ed:
91:c4:a7:57:f7:27:1c:0c:b4:aa:9d:a0:89:26:45:64:56:a3:
ce:14:ae:8a:b0:ba:5b:02:0b:b0:a7:c9:12:aa:64:d8:12:52:
53:67:59:47:92:18:4d:ea:a7:14:b5:4e:9d:14:15:b3:d1:58:
32:16:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:24:32 2025 by rpki-client