Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File: m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier: N6c1mDXXfnFU5BwWCHpccQkKKMdOYYCNPGG7M8QZhVI=
Subject key identifier: 54:F1:02:03:16:6B:85:55:42:F6:46:16:FE:FC:3B:97:A9:8C:93:7B
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 0196876E789712B51AD2BFD4AECFD288BE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number: 090A
Signing time: Wed 30 Apr 2025 16:01:25 +0000
Manifest this update: Wed 30 Apr 2025 16:01:25 +0000
Manifest next update: Thu 01 May 2025 16:01:25 +0000
Files and hashes: 1: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: 69GfDUsr2dxo5puPuclhd+xCejnGriwyIaGmq9V7SBw=)
2: rhJcJSm_PMi8Ty8JJNNm9gt0gCs.roa (hash: 35jRPVs6JG51YgnZYUHY+bKhkmjaLSvQRKcI4y/GRMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:78:97:12:b5:1a:d2:bf:d4:ae:cf:d2:88:be:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: Apr 30 16:01:25 2025 GMT
Not After : May 1 16:01:25 2025 GMT
Subject: CN=54f10203166b855542f64616fefc3b97a98c937b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:b0:38:7e:d3:e5:94:3b:cf:dc:c8:2c:07:
a1:d1:f7:f3:cc:68:45:3b:5e:21:4b:c5:96:78:86:
48:8e:72:d5:fb:42:ef:c8:7f:dd:34:02:0b:dd:ce:
15:7f:fb:50:16:ef:1c:69:8a:e1:e4:a8:ee:60:11:
a1:6c:7a:fb:12:d9:3f:0a:27:73:7f:58:c2:6f:76:
0c:09:8d:e3:b7:bc:47:86:ef:ba:c9:9e:dd:65:6f:
a1:a0:9e:0f:d3:aa:97:4c:c6:66:67:50:b0:d8:19:
74:40:32:f1:4a:cc:c1:ac:82:6f:4e:56:80:77:94:
2e:3f:73:69:a0:ca:0a:60:83:b1:3f:49:5c:ec:81:
3a:2b:53:f1:3b:f1:a3:16:7b:28:a9:e4:64:d0:1d:
a7:03:80:2b:6c:79:14:27:b4:bc:4f:e2:e2:b4:8d:
77:81:17:a3:68:bd:51:a6:67:54:00:48:14:43:4a:
9c:a7:19:ea:91:d9:d5:bd:78:f4:42:ba:82:e0:27:
d9:37:73:23:b2:ed:5e:ae:5f:fe:0b:94:3d:67:57:
fa:6e:a0:f8:3b:ef:49:dc:b0:56:f3:07:04:f6:12:
44:b5:3f:68:1b:38:67:a6:b3:7c:c9:76:45:07:2a:
04:3b:83:02:d2:cf:28:80:88:39:3b:47:da:72:37:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F1:02:03:16:6B:85:55:42:F6:46:16:FE:FC:3B:97:A9:8C:93:7B
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3f:49:ff:a6:24:f0:26:fc:a1:ee:44:15:f9:64:05:e9:85:
ec:c4:0e:20:63:49:92:fb:c3:b8:26:d5:f7:82:15:e7:0c:79:
24:71:a2:b0:55:9d:00:d1:d5:3f:5b:d1:a2:c2:61:28:b6:eb:
61:87:e2:dd:59:29:3c:e5:94:bb:b5:c9:8d:eb:e1:7c:92:1f:
b5:b3:a1:df:88:51:32:cb:77:2e:52:8e:b5:93:60:46:dd:5a:
c8:0e:15:c1:24:50:e3:8f:e1:f4:c1:81:da:3f:af:3b:8d:dc:
e2:3d:17:71:a2:ec:7b:d8:de:12:44:11:e0:d4:e6:b1:f6:88:
a5:9f:94:9f:c9:a4:f5:2e:0f:f5:5f:97:19:c4:00:40:be:87:
62:19:af:3a:45:86:95:a5:b7:d0:a2:eb:58:df:da:ac:40:26:
92:03:a6:f6:a9:d7:d6:d9:7a:fc:51:2f:a7:ec:b9:61:7d:c3:
07:a4:52:eb:87:03:d3:ac:1f:85:59:f5:6d:b8:78:6a:a2:9d:
99:e6:51:65:4e:99:03:3b:72:f0:39:a7:0e:bd:c8:67:77:04:
0d:05:6c:69:e6:3b:5e:28:01:96:ad:d2:dc:44:11:4e:a3:e4:
b9:06:05:60:61:15:6b:d5:b9:9e:65:8a:5e:5c:3a:22:1c:d8:
a1:f6:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:15 2025 by rpki-client