Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
File: MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json)
Hash identifier: oloc7U4y8o7pQ+kCzsuZwvxBknIECpxD3tgIa/vrYi0=
Subject key identifier: EE:9F:EC:48:68:36:FA:0F:FA:61:5C:5A:9B:01:E7:EF:2C:BB:9A:A6
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial: 01967943EB3B1E6FE70FFB5684B6B9855C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
Manifest number: 022B
Signing time: Sun 27 Apr 2025 22:00:16 +0000
Manifest this update: Sun 27 Apr 2025 22:00:16 +0000
Manifest next update: Mon 28 Apr 2025 22:00:16 +0000
Files and hashes: 1: GXrNny7tuwzWiq-Z-LE5U24vo4k.roa (hash: xQ3KfJWrZ/Oh+PMOxbU8NX4YVFe6LbTJ05dku52B6s0=)
2: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: qQoOBmHHhehwin2h8E6SmvVcKjFgBIAmih/Z/TsdJP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:eb:3b:1e:6f:e7:0f:fb:56:84:b6:b9:85:5c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
Validity
Not Before: Apr 27 22:00:16 2025 GMT
Not After : Apr 28 22:00:16 2025 GMT
Subject: CN=ee9fec486836fa0ffa615c5a9b01e7ef2cbb9aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6d:57:68:80:fa:ec:15:d6:ca:90:2d:cb:91:
d1:b7:8a:2a:b3:f1:e2:df:ca:fb:2e:88:fa:ae:5d:
13:f3:5a:b6:14:e2:3a:9f:b5:e6:ea:79:10:31:47:
46:de:d8:99:ca:97:84:56:78:0f:90:e2:b8:94:2d:
90:31:3d:30:95:36:04:e8:a0:c3:83:9f:e1:ab:e6:
44:0f:e8:2a:50:d0:9d:c7:c7:84:b7:bd:93:5e:7d:
46:ba:23:e5:80:fb:b2:46:ba:e8:42:5a:0b:8d:65:
a3:84:7a:01:54:df:14:6a:21:f3:55:f4:d0:a7:2d:
90:ea:4e:4d:b4:f9:19:16:82:54:fa:d6:3a:68:ea:
5d:ee:a0:03:71:cf:f4:30:59:dd:e9:18:c7:0e:0a:
b5:8f:e4:f1:ef:64:d8:a3:e3:b9:36:f9:8d:22:ff:
1a:5d:8b:ee:67:12:43:21:9c:8a:14:13:29:9b:8e:
d3:43:a1:84:57:07:72:4f:cc:fc:7c:cb:81:18:e7:
e4:87:2f:2d:ab:a5:f2:69:d6:39:d6:03:b6:e5:b1:
96:66:33:4c:44:36:cb:a0:46:26:28:dd:f4:52:50:
80:db:2c:a7:e1:50:e7:87:7b:ec:2f:33:4a:02:1d:
be:5c:e9:d3:e4:11:b7:06:7f:89:5a:e9:6c:1e:28:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9F:EC:48:68:36:FA:0F:FA:61:5C:5A:9B:01:E7:EF:2C:BB:9A:A6
X509v3 Authority Key Identifier:
keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:42:06:d1:c8:5b:2b:f9:77:ff:9c:22:ab:51:53:4b:6a:16:
ab:fd:4a:2e:ff:08:fe:d8:b9:f6:17:2d:be:7b:0c:3e:ee:21:
d8:6b:15:6d:87:4b:df:24:1b:00:7d:7b:59:2e:22:98:ba:17:
2b:39:a4:2f:99:0f:60:f5:1b:b2:ea:c6:31:2d:25:86:10:d7:
77:24:a7:c4:c8:64:e2:9c:14:76:a8:24:bf:55:95:2d:07:76:
b8:01:7b:2b:65:aa:0c:9e:30:9c:76:02:27:09:f6:73:7a:cf:
ce:fb:06:2f:1e:26:df:df:52:10:8e:23:5a:7d:b2:50:84:c3:
89:b7:b6:2b:2a:4d:ac:2a:48:fd:fd:16:70:89:24:ec:0f:2e:
74:d6:6a:13:84:d4:3d:42:30:08:c6:70:b3:e5:cb:f9:8e:9b:
4d:46:88:1c:2b:59:8a:9f:2e:88:15:10:f9:1b:fd:4c:e4:de:
62:02:ee:b2:dd:8c:aa:ba:d6:68:bb:e0:dd:cd:5c:e5:e1:26:
9e:19:03:1b:06:59:5c:2b:51:6e:ab:71:1c:1b:7d:83:39:c6:
d6:c7:e5:6e:21:6d:c6:ed:b9:ec:71:5b:2f:de:61:da:a1:4e:
c6:79:28:92:cf:15:b7:ba:ae:a2:da:81:73:4f:a5:a7:e1:e1:
c4:68:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:21:52 2025 by rpki-client