Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: Dfl/Bt+3so3PpTe3Io8taDMWslAZtpaZJ2C7J3+olYI=
Subject key identifier: B2:CA:8B:73:FF:A3:A5:A0:A2:68:48:D7:F4:82:FA:60:33:9D:A7:F0
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 0196759E60313560F9F1B0062C50DFB2CA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 074A
Signing time: Sun 27 Apr 2025 05:00:35 +0000
Manifest this update: Sun 27 Apr 2025 05:00:35 +0000
Manifest next update: Mon 28 Apr 2025 05:00:35 +0000
Files and hashes: 1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=)
2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: GIB30Y7qoUfhU/2RtazOEFF6Fk1HL8GpTgt0xIyc5Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:60:31:35:60:f9:f1:b0:06:2c:50:df:b2:ca:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Apr 27 05:00:35 2025 GMT
Not After : Apr 28 05:00:35 2025 GMT
Subject: CN=b2ca8b73ffa3a5a0a26848d7f482fa60339da7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:c8:09:f3:a2:58:45:d0:a4:c4:a7:41:c8:
f7:56:de:c7:fd:23:1d:fe:0b:cf:9d:6e:26:57:a6:
8d:6a:2d:74:d4:6e:4b:67:f0:36:fb:5e:e3:0f:e7:
71:81:4d:ae:7c:53:0c:d5:3c:51:31:3f:b1:d9:04:
f4:ba:5e:c2:55:82:0f:18:35:36:e5:1a:c0:21:d6:
0f:06:fc:ee:ac:d8:ae:99:51:0b:bb:80:00:89:ae:
29:06:b2:17:fb:53:58:23:04:87:be:f2:49:5c:ed:
60:05:96:52:44:57:d1:ce:fe:ee:8b:f5:3c:4f:00:
82:6b:c1:d5:ae:36:f8:e4:a9:f6:02:47:0a:8e:d2:
a6:f8:f8:e8:d6:90:35:85:33:f0:1c:cb:ce:9a:82:
4b:3b:11:ef:af:1e:8f:86:34:b8:67:ed:99:67:9b:
65:88:e3:74:38:b7:cd:f1:0e:cb:fa:60:97:52:fd:
34:6e:c1:1f:71:6d:a3:fa:78:2b:72:4c:52:06:cb:
41:45:61:fd:36:5a:82:d5:d7:de:6d:dc:0b:00:40:
f2:a7:9c:91:69:d3:f0:15:09:94:b7:cb:27:a6:d6:
2a:a7:9f:e1:43:fb:03:06:d1:a4:0d:09:8f:34:4a:
7d:f9:ee:a8:31:7b:34:56:8f:3a:f9:3c:00:d8:27:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CA:8B:73:FF:A3:A5:A0:A2:68:48:D7:F4:82:FA:60:33:9D:A7:F0
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6d:98:af:38:fd:4b:2a:fc:16:2a:7a:51:79:41:0a:70:cd:
b4:0e:6b:93:41:99:3d:3b:17:21:e2:71:0e:3b:4b:80:8a:5c:
b5:0e:bb:19:7a:3b:85:09:df:a3:78:5b:22:9d:27:4e:f2:00:
fb:3f:9c:2e:83:4a:df:31:2d:6d:5e:78:71:82:a3:54:cb:66:
92:d7:07:f7:64:e0:41:c0:47:16:34:06:9c:57:e8:d2:dc:ad:
62:90:59:0b:52:67:28:ec:de:fb:77:21:3b:72:6a:13:33:c5:
4a:a6:e7:1d:e3:85:b4:21:22:6d:5d:8f:f0:21:57:40:76:a9:
cd:4a:f0:c0:c1:77:96:48:44:36:83:d0:dd:4c:a0:af:c8:f2:
95:e7:c6:2a:e4:95:ed:f8:a0:07:c2:8f:f2:eb:e3:7e:bd:a8:
59:cf:28:e4:e3:16:8a:c2:06:da:05:fc:c0:0d:19:e0:28:88:
62:03:59:9d:24:b6:8b:f1:10:7c:66:99:78:ee:07:5f:23:f1:
83:8a:ae:67:ec:96:28:6a:9a:a4:20:45:98:b7:80:d4:95:97:
f6:1d:f4:14:64:cd:1d:b3:40:83:a1:ba:da:9a:c9:dc:ec:b1:
ea:6f:54:69:fe:ad:0b:1c:02:33:77:13:b2:7c:fa:86:46:eb:
4a:e6:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:11:46 2025 by rpki-client