Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: AWBXgDsyi/cT3Mkw0OdDzIcHKDtHJboJOnX7oatqTXA=
Subject key identifier: 84:35:EB:B0:30:1B:2A:94:D6:11:ED:DC:FE:3D:DC:46:F8:43:B8:D0
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 019655387BC414967FCCEC109A3FBF7EF432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 0EC9
Signing time: Sun 20 Apr 2025 22:01:27 +0000
Manifest this update: Sun 20 Apr 2025 22:01:27 +0000
Manifest next update: Mon 21 Apr 2025 22:01:27 +0000
Files and hashes: 1: STbkSsaZ4h0iV7Ywpice3xeLm7Q.roa (hash: OYYfvGM7goZ9gxelNf2ly9w5B8haX1abcCwOvQfYiPk=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: Jb62cfjx1ZYrcEauf3SM+4kvCk59vY1AenLPhT/LpYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:7b:c4:14:96:7f:cc:ec:10:9a:3f:bf:7e:f4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: Apr 20 22:01:27 2025 GMT
Not After : Apr 21 22:01:27 2025 GMT
Subject: CN=8435ebb0301b2a94d611eddcfe3ddc46f843b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:4f:a2:b7:8a:54:72:28:56:19:03:9a:b4:
3c:6f:20:21:00:f1:c6:08:6e:8c:e5:5c:3f:5b:62:
2c:a8:2e:c2:33:15:3a:c6:6a:43:56:31:9c:3e:10:
8e:49:1b:63:2d:b4:55:b3:f9:f1:af:5a:b7:a3:4d:
6e:7f:97:93:63:18:0d:04:c4:ee:7f:6c:f7:f7:80:
9b:aa:12:9c:eb:67:14:80:e5:43:bc:66:4b:98:70:
d7:b9:79:62:a0:88:d9:2d:21:b3:39:08:47:45:e3:
53:af:90:f5:17:39:3c:44:5c:ec:d4:c1:b0:d9:64:
34:2f:ff:f4:31:ac:62:e5:d4:40:bb:fa:0a:dc:cb:
23:21:6f:87:c1:07:bb:fd:2b:06:ea:5e:dc:a0:78:
6f:b0:aa:d4:3c:1a:6d:c5:0f:07:d6:1e:f1:80:0e:
94:8c:d7:fa:96:3c:76:40:ff:4b:79:14:f7:6b:96:
40:86:4e:bb:32:42:af:68:d5:c6:af:27:d6:aa:d7:
c8:94:f5:e4:a0:6e:67:b3:10:2a:de:a2:c9:4e:77:
51:44:cc:52:64:d7:04:54:c4:b3:f7:27:de:21:25:
1e:84:2a:b1:77:20:c1:fb:0b:59:d6:38:36:aa:22:
a6:97:89:1a:af:31:17:45:5e:37:e1:05:9b:5c:a2:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:35:EB:B0:30:1B:2A:94:D6:11:ED:DC:FE:3D:DC:46:F8:43:B8:D0
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c4:74:98:00:f6:75:af:c5:21:ce:07:0c:5a:8d:b1:d0:41:
b7:84:f0:45:f1:11:ed:8d:1b:20:3e:ac:1c:bb:bc:60:20:97:
05:a3:34:65:f3:03:cf:58:55:6e:e9:ac:f3:b9:0a:fd:d4:da:
81:8d:c9:93:d3:c2:f8:ab:9d:86:31:79:3c:74:fe:0c:aa:d2:
60:12:5e:7c:ca:27:91:2e:75:1d:c8:ae:c3:5e:47:51:b6:f8:
2b:be:1e:df:3c:98:37:d3:49:a3:e2:e6:41:fb:76:1a:5e:28:
d0:05:ae:d8:ce:e1:73:3c:72:20:2c:f9:d1:4c:1f:b7:2c:44:
a7:ec:de:ba:39:04:27:38:30:3c:4a:b5:42:70:22:91:cd:c5:
58:da:c0:96:78:83:f6:09:60:60:49:86:df:c3:47:e8:03:a0:
49:60:20:2f:15:a1:76:d2:34:3f:c6:6b:aa:8d:35:1c:f8:87:
6b:80:75:79:db:16:71:d8:c8:8c:b9:e1:35:28:1f:4a:40:8c:
1b:ce:95:02:27:b1:17:d9:70:08:5c:9d:b3:df:98:e6:e0:56:
57:c0:53:ca:4b:6d:27:6b:af:4a:f9:bf:50:05:a5:6e:64:bb:
74:50:e1:25:a1:82:02:b5:b9:47:ed:51:0c:04:a8:b3:dd:01:
d9:d6:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:11 2025 by rpki-client