Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json)
Hash identifier: cmvZEqGSo0BgcXiT8WFGM3RprLZlkP+iX81UqbENkxQ=
Subject key identifier: 3B:98:42:F4:A7:C0:DE:A2:0D:63:F5:63:B5:4E:39:E9:F1:71:EC:C8
Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Certificate serial: 01965537D8F0D0C34E40B70E1B29B024FF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
Manifest number: 01C9
Signing time: Sun 20 Apr 2025 22:00:45 +0000
Manifest this update: Sun 20 Apr 2025 22:00:45 +0000
Manifest next update: Mon 21 Apr 2025 22:00:45 +0000
Files and hashes: 1: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: 6nNZUEYPC+PR+o7WP13PAe+2ndRSYLs0LwoUDPWk9Kw=)
2: l_KNRz-DOMsGFsOq9QowWZSTlSY.roa (hash: npXTC3HvU34eVfQ3A8stCbWQJ3DirxlZznu2fCVNFbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:d8:f0:d0:c3:4e:40:b7:0e:1b:29:b0:24:ff:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Validity
Not Before: Apr 20 22:00:45 2025 GMT
Not After : Apr 21 22:00:45 2025 GMT
Subject: CN=3b9842f4a7c0dea20d63f563b54e39e9f171ecc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:73:fa:73:73:ab:9d:e6:c5:ab:a6:84:7c:
56:9d:86:6b:3b:67:3b:15:f8:1f:2a:35:3d:09:72:
6d:94:3c:0e:05:c6:42:bf:e3:25:5b:78:f6:2b:06:
01:5c:d5:38:b6:6b:06:13:9d:2d:46:ef:6a:4c:cc:
0f:47:60:ee:58:81:da:70:f5:cb:c3:fc:1f:a4:96:
75:05:20:7e:dc:33:4f:57:73:7f:71:75:b1:55:44:
8b:44:b7:73:aa:be:b9:ec:63:82:1e:00:69:dc:53:
6c:fa:0c:ba:df:d9:7a:f4:e5:03:8c:5f:b0:f6:21:
79:53:fe:bf:4c:65:59:92:b3:94:da:ca:5a:e4:e2:
ce:4d:f6:16:ae:3e:15:1d:09:b5:b1:07:98:4d:07:
4a:30:1b:5a:a9:18:f4:d8:44:c5:bf:b5:8f:bc:b9:
81:79:11:e1:09:be:84:96:1e:af:b4:d5:f6:e3:74:
43:56:60:20:a7:83:89:5a:fe:d4:bb:bb:e8:c8:24:
46:43:e0:56:55:9e:6c:c4:72:94:fe:fd:2d:14:8e:
bd:6c:ab:87:6a:eb:69:eb:2a:cd:ec:15:a8:50:2a:
06:60:da:bf:bd:c7:4c:a7:f6:85:14:ee:c1:fc:29:
2a:5b:df:0b:e6:0f:93:ac:ff:82:be:02:8d:49:10:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:42:F4:A7:C0:DE:A2:0D:63:F5:63:B5:4E:39:E9:F1:71:EC:C8
X509v3 Authority Key Identifier:
keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:19:e8:10:c3:cb:d5:ab:19:b3:07:0a:9a:a9:13:dd:61:e2:
dc:8c:8f:4f:12:2a:55:41:5c:fc:7e:8a:4f:14:8b:09:7a:d7:
87:27:89:36:00:3a:da:d7:3a:ad:44:32:83:2e:7b:cd:65:c4:
2d:d1:ab:c5:d7:76:c0:23:e0:7b:05:7d:9c:bb:18:de:14:ba:
e0:41:4e:62:e7:a6:72:c4:84:69:91:77:71:ea:fb:45:68:ec:
ca:18:50:13:42:d8:a8:ba:8b:3c:72:1b:1d:a8:c1:96:3f:9e:
52:2c:8b:8b:85:c4:d6:6d:4c:2b:3c:14:1c:30:a7:f9:6b:31:
04:67:a8:8b:54:14:1c:0c:23:00:3f:bf:2c:9a:82:02:1a:17:
ed:1a:f9:67:05:4b:a7:60:a4:7e:60:47:db:9d:78:1e:df:66:
30:ce:be:b6:a0:e7:b4:c1:a9:96:72:de:2e:30:8f:46:ee:13:
18:cc:eb:a0:be:04:bd:29:43:3c:0e:a5:1e:78:26:c4:f5:ad:
b7:7f:35:a3:09:07:f4:e5:6b:39:c2:11:cf:24:0e:63:b8:21:
81:95:d5:2b:72:8d:4b:f8:21:8c:96:1b:4d:29:fc:79:a0:6c:
79:06:51:b8:05:4e:79:ec:68:e7:7f:4d:6f:9c:25:7b:7b:9f:
8f:56:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:51:32 2025 by rpki-client