Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: +Hkv/x8xHD0yOdVi0hz8jHtg/tP3ZZ70+T1KhQljo1A=
Subject key identifier: A1:2E:74:AE:72:59:72:78:2C:2C:AC:C4:90:14:4D:DD:7D:1E:92:45
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 01965C15ADF08A167FD5AA665A7BF5C7DF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 1307
Signing time: Tue 22 Apr 2025 06:00:46 +0000
Manifest this update: Tue 22 Apr 2025 06:00:46 +0000
Manifest next update: Wed 23 Apr 2025 06:00:46 +0000
Files and hashes: 1: dX70ap0ffv2FBe6b9Bt26afmx5k.roa (hash: cA6YfbXERPxQEeXnO3dLN4qw3GbtwfitkG8Nn52ipuk=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: mdpkPHamTcr5/QYCeT3RKd0DYtQcUfHL6yuotvzdF0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:ad:f0:8a:16:7f:d5:aa:66:5a:7b:f5:c7:df:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Apr 22 06:00:46 2025 GMT
Not After : Apr 23 06:00:46 2025 GMT
Subject: CN=a12e74ae725972782c2cacc490144ddd7d1e9245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:ca:b5:6f:83:9c:cd:5b:a9:e6:4d:7e:93:
a6:2d:72:09:45:fc:3f:0b:08:4a:33:10:4e:e5:a8:
17:a1:50:9f:42:3b:67:8c:24:3f:22:0b:f5:2b:e3:
1f:16:bd:83:a8:1c:53:fc:88:6e:6f:fc:6e:42:f1:
9d:8e:f1:fa:c6:ce:f7:f1:a5:01:6d:49:93:ac:47:
58:cb:85:cf:58:9e:d6:b1:80:d7:34:fa:c1:0c:90:
4a:b2:41:b9:bf:e1:34:58:87:8d:64:e1:2b:f2:38:
f7:ed:98:21:d0:cd:ea:74:0f:17:59:ac:5f:63:12:
dc:4e:25:a1:ca:9f:fe:fb:75:68:01:e1:2f:6d:31:
c9:4d:d7:d5:a1:8e:47:08:5b:54:0c:39:52:7e:8d:
a8:73:9e:2e:3d:bd:52:e2:44:65:64:8b:88:bb:c1:
b0:fa:72:ff:47:b3:d1:0f:3e:89:63:03:8d:10:ef:
36:b1:de:15:9e:c3:7d:12:9d:f3:cb:be:7c:13:d7:
69:39:23:bd:7b:05:ec:b0:28:8d:f2:27:87:d4:c3:
ec:47:a1:14:bb:cc:65:f1:9b:b3:05:82:f7:81:74:
82:e8:a0:91:b5:3d:95:09:0d:cb:66:6f:54:89:dc:
dd:24:43:a0:4b:41:41:fc:0f:cd:c4:af:cf:9f:5f:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2E:74:AE:72:59:72:78:2C:2C:AC:C4:90:14:4D:DD:7D:1E:92:45
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:14:58:b5:91:38:2d:56:cf:3d:7b:09:e9:67:38:c1:4f:5b:
4c:ab:db:03:c4:e8:b7:10:dc:bd:a3:bf:84:40:45:aa:85:4d:
87:86:37:94:c2:db:2b:28:5e:77:bc:33:e5:9e:43:7d:79:3d:
e6:9f:d5:c8:62:18:ab:be:da:6d:08:fb:ff:ac:ca:d0:72:89:
2e:ce:22:22:58:df:55:d7:74:3f:d1:84:a2:71:26:11:31:16:
1f:1f:c4:e6:b8:29:4e:25:ab:24:a8:48:e1:d5:0e:9c:48:82:
f9:0e:18:9c:d4:bc:a5:24:f8:3d:fa:6d:46:74:07:65:83:38:
79:3c:f3:a0:1e:12:be:0d:fc:7d:e3:87:1d:8c:55:b1:a1:ec:
13:cb:ad:69:c0:5b:89:54:24:e3:1e:c9:4e:91:45:4f:96:f3:
82:57:3f:c4:d3:15:4d:58:dc:38:16:b6:e7:d7:bc:f5:d4:3f:
ba:9b:4c:03:87:80:0e:17:85:a7:d5:3c:00:ed:c6:00:1e:7e:
cf:68:7c:d2:f7:b9:c6:93:ae:b5:2e:14:87:0f:16:77:09:82:
90:51:79:df:94:32:8b:43:b2:a9:7c:50:12:a5:37:0f:08:76:
a4:a2:ef:64:42:1f:ef:67:ba:5b:61:fe:8e:0c:09:d9:69:b6:
92:18:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:00 2025 by rpki-client