Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: lxKdyTba6PbPIy4BUmRv2MwvEHmGs1Fd2ZNADZv4WOg=
Subject key identifier: C7:0C:6C:09:D7:E4:8B:38:86:DD:9E:B9:5E:C5:72:F9:EA:2A:A8:B6
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 0196794460DFD4D205B7AEE6ECB9085C288B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 0907
Signing time: Sun 27 Apr 2025 22:00:46 +0000
Manifest this update: Sun 27 Apr 2025 22:00:46 +0000
Manifest next update: Mon 28 Apr 2025 22:00:46 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: ks75QMdQlkpBTtKEllBWlCzVagrvrpRWRaMKFXPIFas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:60:df:d4:d2:05:b7:ae:e6:ec:b9:08:5c:28:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: Apr 27 22:00:46 2025 GMT
Not After : Apr 28 22:00:46 2025 GMT
Subject: CN=c70c6c09d7e48b3886dd9eb95ec572f9ea2aa8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:79:9c:44:3f:2c:90:05:75:3b:b3:6d:94:
9a:7f:61:cb:37:7a:ac:43:18:c5:2e:66:60:d7:d4:
33:9c:49:b7:b7:fd:ae:2b:1c:0e:45:a8:d3:54:72:
18:38:31:63:18:17:50:4d:b7:12:9e:fc:87:ad:c3:
3e:a4:fa:be:7e:b3:0f:a5:6e:42:82:dd:ee:10:72:
92:ec:a0:cb:07:e9:d5:3b:81:1c:12:76:57:bc:38:
7a:a5:de:bd:b3:e5:e9:a9:37:09:b1:e5:82:62:90:
68:1e:33:19:e5:37:af:04:91:57:43:6c:1c:e4:f0:
98:4f:78:6e:60:95:77:17:11:3b:0e:8e:85:09:e2:
92:80:19:57:cf:58:ec:8d:60:a8:03:9a:77:9d:67:
3f:7d:d9:45:6d:bb:2c:ea:6c:6a:7a:68:82:09:2c:
22:6b:da:47:15:24:fd:26:b4:f8:57:2e:a7:ba:8d:
7c:d4:75:40:f1:60:2d:0e:df:15:8b:a3:c7:34:7d:
dd:b4:5d:62:e2:e9:db:8a:33:cf:a8:12:b1:47:1c:
fa:6b:dd:98:90:fa:89:8d:9b:eb:95:0b:68:a2:e8:
60:af:1b:fd:c2:8f:bd:08:e3:fa:44:8c:30:52:9c:
a4:a8:7b:61:57:ab:d7:94:e8:93:d0:ea:47:44:51:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0C:6C:09:D7:E4:8B:38:86:DD:9E:B9:5E:C5:72:F9:EA:2A:A8:B6
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:91:5b:38:4f:25:db:ba:3c:7e:af:47:9b:62:a6:f4:90:6a:
1b:50:62:7d:a6:fd:ac:9b:d1:70:12:07:f9:a0:b4:0c:8e:ae:
46:f0:62:ed:75:be:4d:77:58:f0:b7:23:37:d9:aa:1d:f3:56:
a7:e0:aa:09:d2:f3:17:7f:6b:6d:52:eb:bc:98:9c:15:c5:a6:
44:af:15:df:b0:0e:f7:55:3e:c8:a2:58:9c:88:4c:3d:40:35:
09:65:9e:f7:16:63:43:3f:99:22:13:51:19:71:c6:d0:a9:8d:
e1:45:76:ae:16:a4:20:36:de:eb:05:81:68:a0:a9:f4:b6:38:
a5:08:99:3e:d2:ec:e8:8b:13:5e:99:62:f7:e9:c7:cb:56:aa:
0b:08:fe:04:30:c1:02:8e:29:47:6b:d7:20:22:dc:c5:16:bc:
e2:84:c5:b5:42:a2:77:ac:47:32:c1:98:fe:f2:11:5d:c5:2a:
04:0a:d8:bc:86:41:2c:81:59:6f:6e:5f:8a:14:10:ff:fc:02:
63:ca:b8:02:af:c6:c0:24:0b:d1:8b:67:1c:97:6d:8c:6f:84:
cd:5f:3e:8b:c5:b7:14:b0:84:b2:56:04:6d:b8:80:7e:1e:17:
7d:84:28:4e:3e:30:d9:60:1c:85:e7:25:63:1b:2b:02:0c:a5:
7b:72:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:09:50 2025 by rpki-client