Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier: U/3wY3aeuOtBrTh/XHZbzvOPlAdbOFJCQ+K4NnDpdSY=
Subject key identifier: BE:13:9B:B8:6C:69:D9:B7:7C:FE:D8:EA:58:EE:10:5B:62:80:3E:21
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial: 0196760D179EDE2B520995BA28A27FB0CF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number: 061E
Signing time: Sun 27 Apr 2025 07:01:31 +0000
Manifest this update: Sun 27 Apr 2025 07:01:31 +0000
Manifest next update: Mon 28 Apr 2025 07:01:31 +0000
Files and hashes: 1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=)
2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=)
3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: 8nz5kUL+PbhwVijua+j8AUORpgcOo8K+kHV3uxpf28s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:17:9e:de:2b:52:09:95:ba:28:a2:7f:b0:cf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
Validity
Not Before: Apr 27 07:01:31 2025 GMT
Not After : Apr 28 07:01:31 2025 GMT
Subject: CN=be139bb86c69d9b77cfed8ea58ee105b62803e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:dc:62:88:76:aa:8f:d3:a6:cb:19:87:58:
ec:48:59:5d:ed:c0:f7:c7:5b:84:3f:80:2a:2b:12:
29:f7:ca:14:b7:ae:c6:96:33:21:c0:4f:c5:15:a9:
21:ba:c1:ac:76:7b:4c:84:25:61:3c:95:53:82:4a:
71:bf:1f:7b:e2:73:ed:10:d6:b5:46:dd:e8:d2:70:
62:67:09:95:33:61:f2:15:4a:a6:4d:e0:d3:f5:5b:
33:e1:9a:b2:3d:02:62:86:78:a0:81:11:31:9a:38:
4c:1f:2a:76:e4:b3:4a:fd:35:f2:d2:a6:48:41:cd:
b9:0e:8f:1c:8c:6f:0f:3d:b6:91:b4:5a:46:77:ae:
97:ec:eb:27:21:0c:36:d9:3d:e8:01:7c:38:c6:90:
c0:f9:a1:ce:20:09:6b:40:42:ec:30:45:be:f7:06:
15:67:d2:67:ad:3c:ee:50:e1:89:ed:41:e1:54:86:
c0:b1:91:99:ec:b9:39:66:3f:a8:7e:ce:99:54:a7:
b6:c4:1f:a2:f2:88:ca:1a:07:7e:b6:62:53:0b:b7:
f8:a6:e7:ab:d2:ab:a6:3e:bc:2c:68:c1:c2:94:c6:
c8:20:da:10:36:df:fe:c8:45:3a:17:91:09:c5:1a:
2e:dc:29:b2:e8:43:f5:e8:c8:40:50:45:54:2b:23:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:13:9B:B8:6C:69:D9:B7:7C:FE:D8:EA:58:EE:10:5B:62:80:3E:21
X509v3 Authority Key Identifier:
keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b8:3d:a0:ee:b2:2e:27:f6:08:72:d8:64:1c:76:3c:92:d1:
48:c7:5a:25:c0:45:96:dd:66:8d:b4:a2:f9:4f:2f:4f:fd:00:
db:c0:e0:69:6d:70:1e:4d:10:8f:45:45:07:a4:a8:ed:cb:bf:
b3:0d:ac:40:e0:f1:39:6b:dc:42:9b:1c:d4:ed:2b:a4:13:b7:
c4:b3:99:69:c1:af:6d:41:d9:fe:12:a4:d6:c8:05:33:5c:eb:
bf:2c:3b:0f:73:a8:f3:42:aa:8d:0f:88:db:48:de:a0:9a:64:
78:58:28:a7:24:af:52:e7:ef:64:aa:38:d7:c0:f0:ae:2b:e7:
02:2b:08:43:96:17:de:b6:d9:98:9f:6d:4e:2c:ad:21:a9:f9:
d2:77:7a:9a:5d:61:9b:d8:a8:af:0d:a1:7b:8d:bb:8c:0a:7e:
8a:3c:57:af:2f:58:77:69:b8:f7:8e:59:ee:25:5c:d4:4b:6e:
f7:04:64:d5:43:19:34:40:6d:5b:81:55:ba:ec:09:33:4c:4b:
0c:c3:21:e7:9b:2a:cf:b0:f3:af:a6:08:82:9d:76:52:71:0f:
d8:ae:8e:f0:49:3f:ac:e5:e1:0a:39:8e:ea:98:ab:38:6a:c4:
71:a0:00:ce:b9:58:e8:f3:26:9b:f1:8e:90:06:18:ee:1b:45:
90:85:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:20 2025 by rpki-client