Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: 5iB9lCTdGEhBzVK+VWNcfLlLOG1PYvjkhd6RGURRNlk=
Subject key identifier: F9:2A:61:29:AC:A7:E5:33:62:56:6F:A0:80:FA:85:88:96:26:9E:44
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 019676B12E547517A05DE7AA6BD4D4B24DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 10:00:45 +0000
Manifest this update: Sun 27 Apr 2025 10:00:45 +0000
Manifest next update: Mon 28 Apr 2025 10:00:45 +0000
Files and hashes: 1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: MFUHlmyD7Mn0rPyUg/ECEOXHRIxg8z8YYAcJkgAEfwE=)
2: w22fMY9NDCCcG4e2_IUcNQ_Kq9Q.roa (hash: pqPEuP/XkZYkW0RjNxblrG+NfoIqGAgVKY/Jqk/oP3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:2e:54:75:17:a0:5d:e7:aa:6b:d4:d4:b2:4d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Apr 27 10:00:45 2025 GMT
Not After : Apr 28 10:00:45 2025 GMT
Subject: CN=f92a6129aca7e53362566fa080fa858896269e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:3e:de:80:db:09:06:2d:d9:df:e5:8f:f2:
e9:b2:d6:57:a0:49:f0:52:77:bf:5d:a6:74:2e:8e:
de:b6:b9:ca:91:d6:f7:60:e6:0a:be:d1:79:e3:d5:
8d:75:6d:54:1c:99:30:d5:8d:69:65:ef:55:a6:60:
51:ac:02:05:db:f8:18:79:5f:02:23:1c:80:e6:eb:
b9:ef:0e:07:ae:4a:d8:90:39:23:4c:75:3f:75:45:
8b:7d:29:63:dc:2d:67:2f:26:4a:06:8c:5c:cd:c0:
38:77:05:7b:98:35:92:53:4e:b2:7c:43:45:4b:5e:
24:22:c1:f6:e5:68:ed:a5:79:4f:c2:7c:7e:e2:a9:
70:d4:d8:e9:12:38:37:db:6f:52:ba:36:d4:e5:83:
f2:d4:60:ff:8e:56:a0:a4:8c:d9:e6:33:d2:d7:58:
f2:4f:cb:06:b5:d9:c3:62:b7:cb:7c:cc:e4:4c:7e:
30:91:8d:d2:60:49:ec:91:06:f6:cc:fb:a7:d7:48:
48:44:f9:8f:97:f6:66:d9:11:f0:73:88:7b:f8:7c:
eb:0d:e8:7f:c8:ec:ad:38:b2:68:44:63:d0:20:92:
37:a0:1b:94:14:0f:f5:1a:20:95:75:99:ac:43:12:
06:cc:b6:72:15:e4:50:bc:8b:0d:c7:5a:7a:81:e6:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:61:29:AC:A7:E5:33:62:56:6F:A0:80:FA:85:88:96:26:9E:44
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:61:9b:3a:10:e9:04:e9:12:27:65:67:ff:1b:7d:fc:09:eb:
0b:b3:bd:e8:40:07:6a:50:2a:d8:12:f8:d3:dc:3d:fb:bb:ee:
3f:37:08:96:df:49:d6:50:9c:3d:a3:a4:8c:28:32:31:ef:48:
85:b4:81:e2:10:fd:5f:6b:25:93:02:1f:2a:db:17:1e:24:1d:
6b:96:1e:a9:d3:b3:8d:93:96:46:88:89:6d:bf:b5:d5:30:fc:
fd:92:4d:d3:19:ad:eb:83:86:23:c1:79:65:56:e9:3c:31:90:
37:c3:45:e1:f0:04:58:8a:0e:29:c3:64:af:cf:51:ac:70:89:
27:dd:20:84:2a:b5:e2:27:c3:9e:54:43:9e:05:74:99:29:90:
fa:84:d5:fe:f6:dc:0e:7c:5d:37:38:53:b7:15:d2:bc:df:c4:
73:b3:11:64:6b:1c:97:73:f4:17:23:3d:9f:76:ee:de:62:bc:
fa:42:28:dc:cd:10:20:ae:54:e8:2a:d0:aa:17:6e:c9:1a:53:
af:3d:61:b4:09:fe:a0:42:1f:92:55:38:4e:b5:c8:f3:56:e9:
69:7e:df:ff:f1:c7:b1:fb:29:4d:0f:83:a9:43:74:c1:e5:54:
60:ca:1d:98:0f:e0:a9:91:f2:9b:36:b8:fc:55:d6:67:96:d3:
03:03:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:46 2025 by rpki-client