Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier: HUFI65YZBqEYAb9Jv6jXvoeYgU/lp70PHeH/mMN67TA=
Subject key identifier: 3F:69:A7:39:AC:4D:43:D6:BA:0E:EF:21:57:FF:82:70:15:0D:D9:B2
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial: 0196846CBE13C5BA2383F2266AB9F185BC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 02:00:41 +0000
Manifest this update: Wed 30 Apr 2025 02:00:41 +0000
Manifest next update: Thu 01 May 2025 02:00:41 +0000
Files and hashes: 1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: 3Bs93fPOmEyX+Eu+w6RgxLdxbejKEXOmtJOfrg9ly64=)
2: IjEDemst-q1ECBCro1gZY1e_lKU.roa (hash: lVdPrfdJYAgOaDiQ3SINarvDSTRfwXOI47RLJu49Akc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:be:13:c5:ba:23:83:f2:26:6a:b9:f1:85:bc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Validity
Not Before: Apr 30 02:00:41 2025 GMT
Not After : May 1 02:00:41 2025 GMT
Subject: CN=3f69a739ac4d43d6ba0eef2157ff8270150dd9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:69:ec:8d:01:10:7d:50:90:be:d7:1b:2f:
59:57:2b:f2:c6:88:c7:ab:6c:a5:a3:13:62:9d:2e:
99:dd:31:0b:63:a6:73:d0:93:4b:72:3d:af:ee:b2:
75:29:a9:33:5c:90:1c:9c:70:27:b8:2f:c4:85:09:
4d:be:8c:22:bb:37:b7:6f:4b:e3:03:90:a3:79:e2:
c3:ef:b9:c7:e6:9c:88:a2:7d:1d:cb:d8:ae:0a:98:
6e:e7:e9:18:87:9d:06:c6:4c:9e:fc:37:11:91:9f:
7c:a4:13:3c:ed:d7:16:93:79:06:be:d5:1a:c0:c4:
df:5d:d4:37:0c:1a:bb:d2:d0:06:0d:bb:12:b1:45:
d2:3f:74:b5:ec:e8:6d:58:06:25:9c:ae:fa:44:41:
e0:10:1d:23:b7:16:f3:77:98:d6:77:bf:b5:3a:89:
59:c2:39:7f:07:32:b2:63:3d:b6:10:82:79:41:a8:
8e:95:8a:55:ef:63:8b:a3:e4:63:ed:19:97:43:ef:
1a:7b:96:5e:8b:72:bb:e3:3c:60:c9:f1:99:29:ac:
a9:92:62:6c:43:9d:1f:33:7a:65:97:64:1d:5a:a8:
2e:65:a4:0c:6e:59:a4:7c:f7:db:16:c3:b2:a7:81:
77:98:cb:5e:10:3d:82:5a:27:bd:95:54:3c:84:d8:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:69:A7:39:AC:4D:43:D6:BA:0E:EF:21:57:FF:82:70:15:0D:D9:B2
X509v3 Authority Key Identifier:
keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4a:b0:cb:d1:e9:dc:38:d1:d5:9e:9e:df:75:f7:f1:f5:3d:
5d:6d:7a:79:7c:ba:99:55:09:91:4c:e8:9f:59:ac:bf:8f:5f:
b0:d4:07:96:30:d8:d0:99:b7:2b:99:fd:7a:d0:99:93:02:ed:
cf:30:92:0b:bf:05:a8:3e:d4:4a:3a:1c:95:c0:5d:92:35:9e:
10:29:21:19:94:09:1c:b3:01:b3:90:da:e1:e2:53:a0:71:19:
73:88:2b:56:f1:80:0f:c6:24:f2:e1:06:3d:92:56:6c:24:38:
8d:40:56:19:4e:a8:43:a3:41:33:98:4c:f6:e8:75:52:a1:cd:
53:a5:21:4b:8c:31:77:54:11:59:f0:31:f6:62:2c:cc:86:8c:
92:e5:3c:b1:71:e9:78:a1:e2:31:4e:f5:54:f9:0b:03:ee:f9:
17:3b:67:79:5c:bd:79:0e:ea:1c:cb:c3:2c:b4:f7:9e:98:4c:
e3:56:d3:ec:ab:93:12:dd:31:93:2b:42:77:b1:a8:1f:cd:08:
ee:27:cb:5f:83:8f:c8:6c:b3:19:6e:cf:57:83:ee:9f:18:9e:
05:66:1b:a8:90:6f:71:84:84:69:fa:8b:0b:42:6e:b6:ff:86:
fa:68:ea:f7:f0:66:f7:ee:4c:e7:6e:36:8e:02:ab:e6:34:b2:
f9:8b:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:00:09 2025 by rpki-client