Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: 6xq5gYai3HAv/z8ahTV5Lhpf3oAsR1B1f2trteTyo30=
Subject key identifier: 40:FC:E9:10:84:04:93:F4:62:2C:C7:3C:6F:06:1C:1D:9C:9B:5A:42
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 019682B56566451E5472603F95052367221F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0D65
Signing time: Tue 29 Apr 2025 18:00:47 +0000
Manifest this update: Tue 29 Apr 2025 18:00:47 +0000
Manifest next update: Wed 30 Apr 2025 18:00:47 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: GX4r8z7cjRdkWkU2zFYpKu6QVoy0xH8VdQB1C1vl3ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:65:66:45:1e:54:72:60:3f:95:05:23:67:22:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Apr 29 18:00:47 2025 GMT
Not After : Apr 30 18:00:47 2025 GMT
Subject: CN=40fce910840493f4622cc73c6f061c1d9c9b5a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:b0:34:87:70:c4:da:cf:15:e8:d8:35:63:
d7:80:a4:eb:c1:7e:8c:76:53:fc:9f:f5:e4:6b:e8:
a0:26:63:67:84:aa:8b:78:65:ae:46:78:2a:c7:09:
b9:90:c8:ab:62:2b:16:63:a4:50:c9:4f:c6:86:72:
e5:95:c2:9a:50:bc:02:52:dc:d5:bf:65:43:98:48:
1e:16:2e:db:ec:c2:7c:6f:2f:f5:ee:50:cf:f1:d4:
0c:7b:ea:a9:41:cb:25:ef:ce:e7:5c:f8:e8:e9:d0:
e2:00:a0:ce:a6:41:45:78:d0:99:e0:d9:80:1d:8b:
f1:09:59:ee:66:0d:85:7f:d5:89:53:27:94:b5:ed:
8e:5e:ce:6b:80:26:2f:db:25:0d:f9:7d:84:8b:45:
8d:ea:4c:06:93:e1:f7:d5:b6:91:6e:70:1b:55:77:
f5:31:98:ca:b0:6b:47:05:03:34:29:e4:0e:3c:69:
a9:6b:27:97:a8:34:7c:e0:90:04:0f:7d:82:a5:c0:
56:24:f7:62:af:bf:43:dc:99:77:94:fb:45:92:f8:
b8:36:52:17:5e:1e:ac:09:23:8d:87:47:70:27:d1:
8c:d8:e9:72:29:57:0a:be:a5:e8:69:b9:ac:ed:e8:
02:00:75:4c:de:d8:42:49:75:67:de:6d:3e:b6:85:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FC:E9:10:84:04:93:F4:62:2C:C7:3C:6F:06:1C:1D:9C:9B:5A:42
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:49:20:5f:a8:4c:16:d7:58:ae:86:9c:ea:80:24:ec:1f:d8:
fc:5a:71:43:82:e9:ef:cf:74:72:90:68:74:21:4e:c6:8c:6f:
58:43:2d:39:c5:64:30:b9:70:34:18:f6:47:f1:8b:c5:49:66:
fb:83:96:f6:6e:28:cf:ab:ef:32:3c:c5:62:0c:1e:28:7f:1f:
4e:a9:38:06:cb:89:d1:8d:0c:51:99:2b:11:2b:54:04:ea:b8:
c7:cb:58:b6:1a:37:c3:37:89:15:11:72:db:71:ed:74:87:d0:
d8:42:d3:88:e7:cd:ac:48:21:37:bb:1e:b0:c3:7c:32:dd:42:
f4:f5:11:1c:b8:38:14:07:84:b3:5a:aa:ef:78:fb:f0:54:07:
a5:26:cf:8e:76:21:e7:53:ef:29:ad:ea:6e:da:db:74:82:9d:
d0:a5:e5:3c:32:d2:25:57:ec:5f:ca:7b:48:52:f5:24:83:a7:
dc:cf:68:c7:b9:65:f4:65:e9:62:c7:d1:0d:27:df:78:f4:3e:
ef:9b:06:52:92:9a:bf:59:37:c9:1f:c7:ad:d4:89:e8:a1:d9:
e6:88:20:80:a8:b8:e9:7b:76:ad:e8:56:c4:6a:ed:3d:35:8a:
ae:68:4c:6b:ed:ce:6c:af:34:71:00:25:9c:0b:3d:ed:15:de:
64:d7:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:43:27 2025 by rpki-client