Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File: MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier: YwaimoUu2GOKZG4LaAiMged5siM2G7BGROoZu0+xanM=
Subject key identifier: 1F:AF:07:CF:8F:B0:38:AF:AC:B7:90:21:71:0F:52:5D:4C:A5:36:F8
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer: /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial: 01967BA0AE5E28AC7A27EC5105223BDAD238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number: 03B1
Signing time: Mon 28 Apr 2025 09:00:50 +0000
Manifest this update: Mon 28 Apr 2025 09:00:50 +0000
Manifest next update: Tue 29 Apr 2025 09:00:50 +0000
Files and hashes: 1: 2qX7OdgapT1BAlqvcn-h20H3SjY.roa (hash: mYdYSfl5U26j0DpruXdVtTOn2QH2B7ImuHJ/Oabup60=)
2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: 7LjEZWiQCDXUO7Zm/GIxMbJjP8IZagXc/YF8exwFtWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:ae:5e:28:ac:7a:27:ec:51:05:22:3b:da:d2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
Validity
Not Before: Apr 28 09:00:50 2025 GMT
Not After : Apr 29 09:00:50 2025 GMT
Subject: CN=1faf07cf8fb038afacb79021710f525d4ca536f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:24:0b:c0:8e:80:9e:ed:b3:40:d6:07:65:
b6:d0:4b:0f:eb:89:7c:62:df:28:dc:ea:56:dc:66:
d6:a5:5f:20:2f:f3:3a:be:6a:fa:95:21:56:e2:ae:
50:d4:8b:5d:4b:48:94:f9:bb:16:4b:c8:c9:9b:c1:
bf:59:bc:8a:67:1f:5f:9d:3c:a1:b7:d1:e6:4f:de:
83:18:55:45:58:6d:0a:82:29:46:0d:54:23:8f:ec:
be:18:0d:fb:7d:3b:c9:40:60:c2:1d:8e:b6:2d:11:
fd:56:f0:ab:17:23:60:37:06:13:f6:94:e0:15:cb:
dd:c8:ec:14:b4:d8:1e:20:7a:81:75:f1:2b:56:9e:
7f:ce:c6:58:07:25:22:6d:7d:62:f9:9e:75:65:c2:
7b:1b:9d:6c:c4:33:bd:e8:07:62:94:9e:2b:dd:1e:
42:bc:b9:36:86:00:11:23:24:21:4a:ab:1b:19:c1:
26:a1:40:84:80:1d:51:44:62:db:2e:82:ce:af:1b:
0b:5d:45:e7:4a:02:49:8d:84:73:62:39:d0:ec:4d:
dc:f7:b3:36:27:5d:c2:67:7d:28:6b:f0:93:34:ec:
a8:dc:e6:f5:d0:15:a4:51:2d:78:49:7b:3f:da:83:
eb:b6:67:a2:ff:c3:20:0f:7c:a3:bc:9f:53:bb:e8:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AF:07:CF:8F:B0:38:AF:AC:B7:90:21:71:0F:52:5D:4C:A5:36:F8
X509v3 Authority Key Identifier:
keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2a:6e:ff:df:43:93:9b:bf:c8:68:da:a1:fb:fc:af:ed:66:
57:7f:e1:41:3a:bf:58:fe:c4:bf:0a:0c:be:64:4d:b0:e1:92:
1c:43:2c:5e:f5:4e:0a:20:ab:fe:a2:b6:dd:86:a1:99:1f:90:
ba:03:11:5f:4d:06:e2:8f:f5:df:60:9c:48:ee:10:91:69:d2:
45:8b:da:8a:6f:68:7e:aa:26:32:97:ea:db:ca:d7:b6:ca:d9:
96:c9:37:4a:28:7a:60:3c:f0:2e:ac:5f:ef:44:34:e8:44:32:
62:71:98:1d:d7:6a:3d:89:6a:4e:ed:c4:51:a3:18:b6:02:16:
ef:1d:b5:24:46:86:dd:35:8f:27:f8:de:67:8b:55:64:4b:7f:
aa:3a:54:76:4e:94:89:7a:2d:d0:11:11:a2:39:af:3e:a4:cd:
db:e7:a0:d8:e4:1b:a8:c7:3b:8f:db:02:17:7e:ba:4b:06:01:
06:76:04:0c:73:ca:05:c8:7c:0d:34:5d:94:af:01:10:53:6f:
fb:65:8b:2d:ec:4b:3f:1e:2a:83:4a:2d:44:8d:9b:ca:6c:86:
8f:c2:fa:d2:71:e3:6e:c8:ac:cc:77:c0:d6:ea:4e:65:e1:b0:
49:d2:b8:61:b9:26:ae:eb:60:8d:d9:42:41:8d:b6:a4:72:09:
02:7e:c8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:53:38 2025 by rpki-client