Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: Be+HCt/MjRnrY6o/8eNUcDWPbUydS0VQUUX6A4pS++E=
Subject key identifier: 0E:03:C8:45:59:DA:33:0C:63:82:2D:5D:86:BD:77:A8:62:18:AF:C1
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 019678D69934D1276BC2B05D3619779396E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 02B4
Signing time: Sun 27 Apr 2025 20:00:51 +0000
Manifest this update: Sun 27 Apr 2025 20:00:51 +0000
Manifest next update: Mon 28 Apr 2025 20:00:51 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: p9MhRs5766Opxrt65Bn1VOKzB2iBErU56umJf0ogPEQ=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:99:34:d1:27:6b:c2:b0:5d:36:19:77:93:96:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Apr 27 20:00:51 2025 GMT
Not After : Apr 28 20:00:51 2025 GMT
Subject: CN=0e03c84559da330c63822d5d86bd77a86218afc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:c9:48:f4:e3:40:e6:18:ae:c5:c1:89:a4:
42:93:02:3e:ec:01:c5:3c:03:d9:f9:08:e9:8a:00:
21:91:6e:20:cb:33:96:f6:5f:bb:91:5b:2b:b3:40:
ed:7a:40:62:2b:99:81:64:76:f1:e6:a3:57:d7:28:
23:20:84:20:52:c4:be:00:6b:08:31:6a:06:46:99:
bd:15:f9:d3:77:9e:6d:bb:29:e3:27:34:fc:30:4f:
d0:ab:4f:15:1f:f0:55:1d:78:d7:85:54:a5:ea:c7:
c5:2e:77:04:89:34:70:7a:53:d0:60:83:ac:8d:12:
de:23:e4:6d:0c:ef:3f:1a:4f:20:5b:2b:c8:d7:15:
63:a4:fa:1c:64:26:bf:50:96:de:7a:f3:32:ea:2a:
f5:fa:a7:b6:af:fb:05:7f:32:74:ea:d2:e7:32:f3:
38:b5:82:eb:eb:b5:44:48:b4:6e:7f:a7:94:c8:67:
75:3d:af:12:a5:96:ea:3a:d1:e4:e8:79:7e:60:af:
8a:9f:cf:28:f3:33:34:5e:46:8d:41:98:59:29:a5:
a1:ba:63:3a:f1:49:6d:1c:e5:49:6e:18:30:04:d8:
a4:ad:36:87:60:ea:e7:6e:8d:ef:2a:b4:02:90:f6:
a9:c0:66:c2:ef:f1:ff:6c:fc:c9:7f:bc:fc:ac:1e:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:C8:45:59:DA:33:0C:63:82:2D:5D:86:BD:77:A8:62:18:AF:C1
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4d:40:18:18:d3:b5:d5:d1:95:78:bc:a0:8d:bf:4e:7e:2b:
8b:11:39:0c:77:58:bb:54:27:34:3d:80:38:85:5d:4f:1d:57:
75:5c:66:4f:0b:60:b8:89:7e:59:4d:ca:3b:7b:85:38:30:31:
d2:28:d1:20:5b:f9:a6:e9:12:2b:bf:97:2d:1b:f8:bf:bf:89:
05:bf:78:f5:35:3e:c4:b9:00:63:a9:a7:56:29:58:f4:a0:fc:
6d:43:88:de:5b:16:14:0d:27:1e:f2:9f:a5:e4:4d:10:c9:13:
34:8a:23:a5:5c:38:52:63:00:37:eb:f3:6f:b8:09:c5:b9:ee:
60:17:c5:4b:44:b2:81:92:f0:ff:c6:26:35:9d:92:1e:31:08:
28:cc:68:ac:3f:82:40:3d:70:47:c7:26:c2:f0:22:0c:d4:35:
37:91:58:41:b1:b5:53:9f:96:85:09:f3:1b:a7:d0:cf:06:3c:
f3:14:56:2a:d8:5d:dc:4b:58:07:c2:c7:b0:d6:d0:ca:9b:2a:
36:17:07:ef:c6:c5:1f:77:fa:0b:bf:c2:b7:8f:3f:fd:c7:02:
16:59:48:bf:9a:7a:10:13:77:29:1c:82:f9:cd:33:43:32:3c:
4d:fb:3a:12:f6:a2:c9:b9:f8:54:18:31:74:24:d8:fa:60:a9:
8a:0b:a5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:24 2025 by rpki-client