Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json)
Hash identifier: d686aQ5msWuM25J4AudF74RURoSQBR1pEHWMcLP6BAs=
Subject key identifier: 7B:F9:19:A9:07:1F:8F:20:DE:D5:24:AC:CF:B9:5D:B9:6D:58:CA:E7
Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Certificate serial: 019685EDA1F75C5BE5D73F5C73DBC70C418A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 09:01:05 +0000
Manifest this update: Wed 30 Apr 2025 09:01:05 +0000
Manifest next update: Thu 01 May 2025 09:01:05 +0000
Files and hashes: 1: Fb0UwpxCy0DRKLuSbZAzVNuZQGI.roa (hash: FQG+r4pQE3E1WCi2kVbQ4HOY+Sj6V8FJrKG1h8vbtwQ=)
2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: 4O0SNoyF0p8WxFzM0Wr3yzBv3z/v3m/oq2w6xgS5zPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:a1:f7:5c:5b:e5:d7:3f:5c:73:db:c7:0c:41:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Validity
Not Before: Apr 30 09:01:05 2025 GMT
Not After : May 1 09:01:05 2025 GMT
Subject: CN=7bf919a9071f8f20ded524accfb95db96d58cae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:11:6c:8d:97:c9:63:ad:65:15:80:df:df:
6e:93:82:b8:ae:70:72:24:1f:8d:34:e8:ea:7e:5c:
87:1c:0a:b9:01:6f:45:5a:b8:58:39:ef:09:36:bb:
ef:a7:ea:75:f9:c7:0d:c9:67:4c:84:ae:af:d7:aa:
a5:65:a7:34:cf:85:00:30:e2:ee:a8:b5:f2:cc:b5:
7e:2d:67:47:7f:07:e3:2e:1b:76:39:6d:a1:b8:70:
28:f3:f8:e4:47:08:41:af:37:90:a9:55:f9:0d:87:
19:38:4d:96:d2:82:d2:66:ce:e6:a6:fb:84:95:64:
ad:1b:d9:5b:14:6e:d2:d3:4c:7e:ec:a8:70:9d:69:
3e:50:4e:55:65:a3:98:02:f2:03:4f:ab:c7:a6:aa:
b1:3e:09:65:71:5b:2c:d3:74:00:ae:c6:14:09:c9:
ec:af:7f:eb:b8:a4:a1:8a:f1:2a:cd:4e:11:c8:74:
18:15:75:2d:01:c6:64:eb:75:45:ab:31:d2:70:37:
62:34:b6:e0:c6:28:aa:2d:69:20:3d:98:b5:57:d2:
b7:ff:ec:6c:64:13:a1:61:5f:83:80:bc:a5:17:f6:
19:73:0c:e2:37:71:50:1d:87:b1:fa:cd:00:80:20:
17:d1:71:37:84:fe:6b:59:a6:0d:b0:99:a2:bc:55:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F9:19:A9:07:1F:8F:20:DE:D5:24:AC:CF:B9:5D:B9:6D:58:CA:E7
X509v3 Authority Key Identifier:
keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cc:c1:17:69:eb:66:ef:4e:57:11:55:ca:28:ec:22:96:1e:
93:1f:45:df:ce:66:c8:5e:00:fb:dd:a2:69:fe:d5:03:f0:39:
1c:54:61:3a:ec:a9:27:f8:8c:77:6c:e4:19:93:e8:c5:e3:8d:
de:56:0b:b6:70:ba:e1:ce:82:3d:8d:b8:89:09:ab:ac:0e:f3:
2c:39:89:7b:2d:fb:53:b1:d0:64:fe:7a:3c:07:c3:74:77:33:
52:f2:e2:f8:2c:8c:48:5b:1b:6d:f4:fc:c8:04:11:fa:c0:41:
15:f5:4b:c8:c1:59:af:bc:d2:0a:ea:f3:09:a9:9b:ac:26:99:
7d:6f:97:f1:d9:4d:ec:c9:d3:4c:be:52:89:6d:6d:3e:1a:56:
cd:98:06:b3:64:8b:0c:b7:c9:9b:cb:a4:16:e1:4e:ae:9d:90:
f0:44:b9:f1:5e:aa:7a:b3:45:e9:b1:35:42:27:56:36:5f:76:
6b:e7:f2:9a:d7:0f:69:45:cc:56:de:b4:b8:10:98:fd:75:75:
ce:1b:69:0c:21:38:0f:6a:a3:36:45:9f:21:37:57:e6:fe:8d:
ea:d2:aa:0f:42:c8:3f:9e:fe:e8:2c:a7:11:20:4c:71:06:39:
e2:f2:ba:a2:1b:e7:2a:33:bb:88:dc:3a:14:8b:39:16:2f:f3:
59:30:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:11:00 2025 by rpki-client