Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: L31l9DGA1AqYcstxbG9ZTrAiJ4muXwm1+n219NYl5ls=
Subject key identifier: 8E:9F:08:96:D2:39:DD:C6:AC:9E:6A:E1:F6:55:24:E1:EB:A2:2B:27
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 01967A1F9AF9A6835788047DEBAA08209CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 02:00:13 +0000
Manifest this update: Mon 28 Apr 2025 02:00:13 +0000
Manifest next update: Tue 29 Apr 2025 02:00:13 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: cQfwieEGsBOYFDFejrSRe+mis5iBDN+UVRNBbSQgEeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:9a:f9:a6:83:57:88:04:7d:eb:aa:08:20:9c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Apr 28 02:00:13 2025 GMT
Not After : Apr 29 02:00:13 2025 GMT
Subject: CN=8e9f0896d239ddc6ac9e6ae1f65524e1eba22b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:04:2a:f9:7c:69:00:cc:fc:8b:ba:c9:4f:
6e:95:0f:6e:7b:a4:72:e4:3f:a3:4d:b7:c1:ca:4f:
da:f5:89:d2:cd:0c:f1:e5:49:33:8c:c8:08:39:f2:
57:03:7e:be:cc:9d:24:eb:14:d9:53:bd:2d:81:bf:
34:56:89:da:0a:04:f5:bf:66:4c:09:c9:86:38:5c:
67:c4:f2:05:72:26:7b:e1:c9:f8:e8:f0:fc:e1:77:
1f:e7:b8:48:47:f2:58:c3:98:9c:06:c9:06:48:b9:
6a:05:38:f2:8e:fd:4c:61:73:6e:3c:c5:80:56:6e:
4f:81:c9:0c:1f:d8:80:a6:aa:3b:bd:98:dc:b7:ba:
5d:ff:25:f8:ae:3a:45:c2:ac:c8:0e:11:9b:60:40:
7d:a1:4d:19:ee:ec:79:b6:d8:b2:01:d5:b0:01:31:
da:00:5a:f3:dc:3e:bd:ea:f7:b3:f4:c4:2a:83:b7:
63:00:99:76:18:83:5d:9b:a4:2b:86:c2:eb:ca:f6:
5a:31:a6:c5:ef:54:65:c2:07:12:c7:a2:fe:94:52:
fc:61:98:86:cf:7d:6f:e1:8a:ba:83:6d:ec:51:4e:
96:6e:83:9f:d3:ea:5f:db:2e:3e:6c:0f:76:c9:19:
fd:1f:31:44:d3:fe:1b:30:5a:47:4d:7b:58:e0:d5:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:08:96:D2:39:DD:C6:AC:9E:6A:E1:F6:55:24:E1:EB:A2:2B:27
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a6:b8:cd:0e:26:47:93:a8:98:d8:85:21:4b:10:7c:8a:4e:
42:f5:fb:e4:20:53:f0:61:bd:64:b2:07:88:b0:99:c0:cb:76:
5e:92:26:17:28:ca:54:2b:9e:ad:3d:4e:56:ba:bb:33:a0:19:
55:e2:8f:3f:dc:eb:26:a6:b7:ed:5c:f0:48:ae:e1:a3:f0:f7:
87:8d:2d:52:71:29:b8:ac:7f:8e:ce:d3:d4:34:15:f6:1e:9f:
e5:f4:a4:fd:98:9a:78:8e:f0:f7:56:70:03:1a:ec:e0:8c:e8:
f5:20:d9:0c:4d:ab:3f:25:51:71:17:c5:3e:02:75:80:58:bf:
e9:0d:0e:f3:d7:c1:d2:0c:64:5d:37:e8:11:b1:70:0a:9b:e4:
e8:ba:97:49:a6:97:35:ea:ed:f7:2c:0b:39:c9:df:b2:04:13:
92:9d:86:18:52:b3:f3:8e:62:11:b2:3b:04:ec:e9:e7:b8:f4:
51:e3:72:f1:26:a6:66:05:1d:73:91:f4:74:31:de:59:e2:91:
37:21:87:30:5a:fa:35:c4:87:72:ad:47:25:5c:14:39:b8:12:
15:4e:fe:18:63:ef:a7:c5:43:ba:9b:29:e1:60:40:21:84:cb:
ce:94:61:92:f4:90:1a:4d:61:7f:1d:cd:16:cb:c1:79:b2:9a:
98:20:9c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:32:37 2025 by rpki-client