Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: q4HEsif0imRGsMMBtzpaat89qKyJTdj5jiIMEXJJDuk=
Subject key identifier: FF:13:FA:72:91:BA:6B:E2:BC:2C:0B:A4:90:99:F2:3F:B3:3D:95:FF
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 0196802215759444942AA4EE08940172845B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 146B
Signing time: Tue 29 Apr 2025 06:00:39 +0000
Manifest this update: Tue 29 Apr 2025 06:00:39 +0000
Manifest next update: Wed 30 Apr 2025 06:00:39 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: nZeHQGpcA4vSVf0J1h3LKkw/iiMToxuTMsOu/KJTthU=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:15:75:94:44:94:2a:a4:ee:08:94:01:72:84:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Apr 29 06:00:39 2025 GMT
Not After : Apr 30 06:00:39 2025 GMT
Subject: CN=ff13fa7291ba6be2bc2c0ba49099f23fb33d95ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:56:6b:6e:01:39:32:97:5f:19:b5:10:c0:
0e:56:4d:68:18:a8:45:58:88:60:bf:f2:ac:d2:68:
47:20:72:ef:c1:9a:48:f9:8a:35:b3:06:33:0e:b3:
2a:ea:a1:0f:ac:4a:71:e6:ed:57:47:b6:f1:24:ad:
53:1d:37:63:ee:ff:d9:63:70:0b:cf:ee:c0:a0:9f:
1a:a3:31:92:15:bf:b9:10:5d:fb:95:75:1f:75:a6:
19:85:a8:8b:0c:ad:0b:4f:76:53:fb:b5:6b:4c:b7:
1e:30:9b:66:3b:7a:f0:09:cf:25:53:ea:0d:8f:cc:
30:15:3b:17:3c:30:87:41:d0:27:5f:be:42:a3:2e:
91:ed:0c:c0:35:d8:97:56:f1:47:4f:f7:4c:b9:68:
46:0a:ce:8c:17:5d:c3:c4:f4:6c:f0:cb:24:15:a4:
2f:f3:53:d3:13:f9:10:83:39:46:40:0d:90:f1:a2:
13:8b:8c:32:ac:20:db:04:a6:7d:17:8e:73:9e:ba:
d1:87:80:75:b0:3f:57:62:2e:54:46:14:11:53:ce:
c5:d1:23:62:7e:4f:6d:d3:88:78:e1:b1:d5:1c:07:
75:6c:ee:3a:74:7c:0e:aa:55:cd:af:8b:f2:f3:3b:
d6:a6:28:d5:94:ab:3b:90:6f:25:92:88:29:df:15:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:FA:72:91:BA:6B:E2:BC:2C:0B:A4:90:99:F2:3F:B3:3D:95:FF
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:be:3d:3a:cd:74:d9:00:bb:f1:47:f8:c2:4b:09:15:91:17:
6d:30:59:de:5c:52:1b:1e:7d:42:49:32:d7:f3:14:e5:dc:df:
b2:8a:2f:8e:76:11:1a:54:cd:0e:af:ef:c2:7a:1b:ac:6e:a6:
0f:4d:0c:63:0a:6c:8c:fd:a7:eb:56:26:28:64:c4:7b:9e:d5:
a3:54:6e:1d:53:11:5d:b4:5c:28:b1:f0:4b:27:ac:f6:de:19:
51:87:58:fb:be:6c:f8:e4:b1:64:3f:1e:68:75:e7:04:62:f9:
31:56:b4:47:89:2b:2a:50:fe:59:fe:72:bd:1d:75:df:a3:91:
e8:2a:59:39:3e:aa:9e:9b:77:76:97:40:0d:d3:c3:17:34:9e:
c7:8d:14:d9:9b:6c:df:3d:f1:42:0f:05:35:e1:ba:c4:a9:2a:
00:62:da:e6:cd:0e:ec:74:19:61:3c:a5:48:a8:c3:01:53:97:
09:4c:ab:e3:f8:9b:35:7b:fe:c0:9f:09:0a:4e:22:3b:40:fc:
81:10:ce:7e:34:c5:2b:e3:28:8d:e6:f7:c4:d4:c1:bb:3e:22:
87:e0:9a:63:d6:21:17:06:fb:5f:03:99:8e:a1:1a:c1:86:56:
ac:c1:8f:15:45:d9:a8:5e:60:3f:17:62:a2:cf:11:42:28:37:
88:b7:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:33 2025 by rpki-client