Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: 6KFp6ltbqsroMvstDzhxR51ZKrOFE/JYBCKjwvIWfVE=
Subject key identifier: 4E:AD:06:7F:DB:A3:8D:C3:18:40:C9:5C:3E:39:1C:A2:6A:FA:2A:BE
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 01968BEF18D81D16DACD3ECCA791B4BD70E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 0375
Signing time: Thu 01 May 2025 13:00:24 +0000
Manifest this update: Thu 01 May 2025 13:00:24 +0000
Manifest next update: Fri 02 May 2025 13:00:24 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: 8/NXpVTBTS3uihKBSj3UHoWm3LvXoMwxb4avwAIlgfk=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:18:d8:1d:16:da:cd:3e:cc:a7:91:b4:bd:70:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: May 1 13:00:24 2025 GMT
Not After : May 2 13:00:24 2025 GMT
Subject: CN=4ead067fdba38dc31840c95c3e391ca26afa2abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:08:72:eb:a1:e9:a3:3d:94:33:d9:7b:3c:
f4:3d:1c:06:dd:99:c0:e2:5c:60:dd:3a:89:5a:1d:
73:27:47:75:e5:ec:15:60:61:5f:85:b4:87:30:c0:
05:08:6c:77:80:83:18:3f:59:4b:b4:c8:c0:35:e7:
dc:b5:3f:51:bb:dc:7b:84:e9:86:89:ba:62:85:59:
43:7e:4f:19:b9:c3:8a:cd:b9:e3:48:c0:99:66:9a:
6e:e8:31:20:bb:f7:d4:06:e8:a8:af:3b:2b:1d:59:
a3:d4:f8:d7:61:97:6b:1c:b5:bc:7e:86:e0:4b:0e:
cf:72:e4:f9:fd:1d:72:01:6c:22:90:8b:aa:bf:c0:
02:ae:69:00:2c:7d:f5:70:7e:60:d6:18:8c:2c:d8:
f9:96:a4:56:15:8a:bd:2a:fa:a3:da:3d:d0:8f:d8:
58:62:e2:72:71:e6:f7:59:ad:61:6a:85:68:a6:fe:
95:7a:3a:04:78:be:4b:32:e9:9c:4c:f0:a6:f6:82:
c5:22:3c:d0:c9:06:4d:5a:e2:8d:fb:63:e7:37:76:
0f:56:f4:dc:58:19:f6:b0:f1:5a:ad:c6:8a:0c:3e:
dd:df:0d:ba:08:95:5a:05:1b:b4:e1:02:b0:5f:50:
4d:ea:a3:a7:e9:d2:95:cf:fd:ec:71:17:2e:8f:eb:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:06:7F:DB:A3:8D:C3:18:40:C9:5C:3E:39:1C:A2:6A:FA:2A:BE
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bb:2b:d5:98:d2:b4:45:6d:0e:70:96:c7:56:cf:a6:33:aa:
70:b2:29:10:a7:a5:a2:62:32:e5:cc:79:56:7e:81:6a:6e:dd:
5e:0b:b8:ae:10:23:85:24:29:f3:9a:7a:8b:3c:71:8c:c9:e2:
15:26:aa:e5:e2:c8:b3:d8:36:8f:49:df:a9:ca:2c:e1:30:8c:
41:64:94:55:2f:7c:61:dd:01:79:a0:6e:7c:66:48:7a:17:06:
03:7a:99:71:fa:1b:49:85:18:d7:f2:88:13:9c:a5:48:60:fd:
7c:fc:9e:06:96:95:c3:66:f2:90:a8:83:d0:98:2a:fb:6e:2c:
44:53:22:55:86:40:f4:de:13:02:0d:4a:2c:7b:9c:3b:03:92:
72:d0:07:11:5e:4c:98:a3:98:05:41:34:7a:45:d7:87:d2:01:
d9:c3:54:3a:4e:b3:34:79:17:6f:6e:c3:d5:69:b9:3f:37:8c:
be:d5:2e:f6:a7:bb:c8:a2:6f:22:c2:df:92:e2:88:71:10:ae:
04:17:d7:48:a8:aa:08:58:30:b0:cf:88:d4:0d:9c:af:b3:cc:
97:1a:88:08:01:8d:67:9e:e3:a5:2a:02:ac:1b:5a:04:71:c1:
c2:c9:37:5a:22:ea:2f:a6:fd:2d:bd:5d:e3:a9:6c:6c:f0:3f:
77:eb:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:30:45 2025 by rpki-client