Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
File: MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft (raw, json)
Hash identifier: Fatipj4HZSGteptSrFZ6tRpCYd4YpJfIwaiiYGIfzrk=
Subject key identifier: 55:9F:56:72:A3:7D:0C:C6:63:02:BE:68:CE:D6:79:0B:DE:55:18:34
Authority key identifier: 30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
Certificate issuer: /CN=3025fd339aa64504f289a00c4173c55a0002eb44
Certificate serial: 01968ADCAF105B4DC2A621883FEB1E2612B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
Manifest number: 0EE2
Signing time: Thu 01 May 2025 08:00:40 +0000
Manifest this update: Thu 01 May 2025 08:00:40 +0000
Manifest next update: Fri 02 May 2025 08:00:40 +0000
Files and hashes: 1: DPz87dZS9HseddW8gbD-vS7fq9g.roa (hash: 4BW75SF0KzzzYTTCKr54E2E3BA1EBeDyvFumW+QYO5M=)
2: MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl (hash: FsysqY+2ONqw4j9SFZ4bbJCslkOp7AJ6WSMyLQLesvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:af:10:5b:4d:c2:a6:21:88:3f:eb:1e:26:12:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3025fd339aa64504f289a00c4173c55a0002eb44
Validity
Not Before: May 1 08:00:40 2025 GMT
Not After : May 2 08:00:40 2025 GMT
Subject: CN=559f5672a37d0cc66302be68ced6790bde551834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:4f:2a:0b:53:f1:bb:48:3b:1b:09:48:01:
0d:64:85:07:32:5a:1a:6d:1b:a5:36:c1:64:8c:38:
85:40:f8:6c:81:b5:4b:e9:f1:bf:55:2c:73:b2:f6:
92:6a:9b:00:c9:38:7a:4c:35:cd:bf:99:b7:1f:42:
2c:78:3d:62:a5:90:2c:ea:8a:e8:be:16:72:2c:5e:
4e:6a:dc:f3:a3:96:dd:18:f2:fa:47:45:e3:6f:19:
27:72:2b:92:2e:b5:3c:e9:da:e2:58:f1:6c:e2:98:
28:e2:ef:c5:ab:da:bf:d3:d1:eb:c0:96:f7:e3:ad:
73:73:6e:91:fc:a8:e4:35:3a:57:be:4c:bb:73:e3:
a5:d3:f7:9e:86:84:05:01:be:df:bc:f8:3b:94:97:
95:97:79:ed:44:8b:72:b6:e3:17:f5:24:aa:3a:db:
66:80:b3:32:21:92:d2:b7:02:54:50:2b:8a:bb:bb:
d2:b8:bc:82:20:45:ab:11:18:c2:8c:84:be:24:bf:
89:2e:47:00:0d:20:6b:6e:06:6b:0e:80:63:80:4a:
85:f0:2f:eb:a5:b4:82:09:28:39:ba:53:2f:9e:02:
83:ca:fe:d0:52:97:fe:78:e0:d3:5d:03:10:ce:aa:
e6:aa:2f:50:f9:86:39:42:1d:ee:64:a0:e1:9a:af:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9F:56:72:A3:7D:0C:C6:63:02:BE:68:CE:D6:79:0B:DE:55:18:34
X509v3 Authority Key Identifier:
keyid:30:25:FD:33:9A:A6:45:04:F2:89:A0:0C:41:73:C5:5A:00:02:EB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCX9M5qmRQTyiaAMQXPFWgAC60Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4a523b-7244-422d-9004-c4aa9db1abb5/1/MCX9M5qmRQTyiaAMQXPFWgAC60Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e1:95:56:48:2d:3e:19:14:2f:b0:ed:8d:73:40:44:96:29:
87:e8:80:7b:e8:fd:4a:13:7c:74:8c:0f:31:e6:76:25:d9:bb:
7d:21:b8:b2:fe:fa:d6:8c:06:15:10:a3:76:c5:aa:54:08:4f:
1f:be:37:c7:10:7c:0b:22:cb:42:cd:0d:a8:da:0c:72:cf:8a:
12:8b:1e:93:4b:47:68:c9:c3:a5:d4:e5:17:67:00:6b:46:bc:
26:2c:a7:99:5f:00:54:fe:c7:cf:22:19:64:30:5d:13:d8:4a:
fe:3d:bc:39:cb:37:2b:1f:8e:a0:80:25:56:8d:23:f7:12:cb:
9b:38:5c:46:84:8c:cf:b6:19:db:91:fd:12:85:94:ca:ab:84:
4c:23:3a:19:a2:9a:4e:f4:78:9a:10:b9:a6:1a:f5:4c:4b:a3:
82:a5:e5:ac:19:a4:16:74:fc:06:8f:c6:3b:a8:33:37:45:f7:
ad:c4:5a:f0:9e:86:3d:9f:b9:b9:c6:35:ee:c1:61:3a:68:44:
ef:2a:52:ed:59:c5:7e:df:02:b1:19:55:55:0d:ff:8d:aa:52:
c1:98:b7:c5:2b:f4:bd:ae:a2:e3:6e:2c:36:d0:28:6d:7c:a3:
1a:57:34:21:08:6d:d7:9a:22:3d:de:f6:6f:2e:89:01:01:23:
03:32:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:16:39 2025 by rpki-client