Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier: onhLH6xPwnimCq4IqS3P+coR9HYAJ81KhNQsKThfA8s=
Subject key identifier: 04:52:41:35:C0:E5:4F:9C:8E:05:3C:3A:E8:2E:50:BD:F8:A6:6B:93
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial: 01964A7D55AA9FA8748D43039FCA0E9F2246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 20:00:50 +0000
Manifest this update: Fri 18 Apr 2025 20:00:50 +0000
Manifest next update: Sat 19 Apr 2025 20:00:50 +0000
Files and hashes: 1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: xkvhF2DkYu8pCUvgq7FCIK71bbzDZkbblRg+JCiQVOQ=)
2: IjEDemst-q1ECBCro1gZY1e_lKU.roa (hash: lVdPrfdJYAgOaDiQ3SINarvDSTRfwXOI47RLJu49Akc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:55:aa:9f:a8:74:8d:43:03:9f:ca:0e:9f:22:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Validity
Not Before: Apr 18 20:00:50 2025 GMT
Not After : Apr 19 20:00:50 2025 GMT
Subject: CN=04524135c0e54f9c8e053c3ae82e50bdf8a66b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f9:ae:39:97:20:5e:83:fe:11:ed:0b:eb:82:
90:73:34:a2:25:c0:91:d3:0d:50:e4:99:ff:fc:17:
c4:94:a0:f6:83:b6:4b:00:ac:b2:0c:17:05:cc:1f:
fb:4b:bf:be:3e:61:57:0b:84:ce:4a:2a:af:36:fc:
ce:e1:ed:fc:10:4f:11:fc:be:38:48:93:f0:f7:e5:
af:d1:26:8d:86:d5:03:2c:97:2a:e3:05:3e:65:7e:
d2:63:ee:c4:19:6e:8a:5f:c6:4c:9b:0b:23:b4:b0:
18:25:e3:e5:3a:83:44:c2:96:b8:7e:83:8c:24:9b:
d3:59:ed:99:d9:6f:dd:21:5a:79:31:0e:7b:d0:0e:
ac:d4:4c:0d:92:f5:ac:2e:68:f5:b1:f0:f1:2f:c3:
d5:3d:24:ee:2a:29:53:0f:81:28:71:85:c3:28:df:
cc:c8:c3:ef:0d:3e:b5:4a:ae:39:6c:ce:e6:2b:a2:
d5:ed:3f:ee:e4:4b:fd:97:89:1b:05:14:a5:4e:2e:
1a:ac:96:b2:fe:ae:7d:24:8d:62:e7:4d:81:76:a0:
61:32:73:97:10:bb:48:66:f2:a3:0c:56:df:cd:87:
51:3d:88:a3:66:d2:59:e0:e9:cb:ef:9d:62:9e:43:
7c:85:fa:2f:b2:19:90:39:b1:16:87:1c:c8:3f:51:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:52:41:35:C0:E5:4F:9C:8E:05:3C:3A:E8:2E:50:BD:F8:A6:6B:93
X509v3 Authority Key Identifier:
keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f9:88:81:80:65:97:fc:03:50:43:f1:07:28:cc:3d:9a:01:
62:f4:06:8a:60:05:1b:dd:92:d7:94:a4:a5:0e:a5:bd:6f:8c:
72:8a:16:40:6d:1c:07:a3:ab:ec:6a:11:c9:a5:70:ea:18:f1:
3a:08:cf:b6:90:80:fa:20:8e:6c:d0:5c:6c:93:bc:0d:62:d5:
4f:bd:45:8a:fe:f0:f7:77:de:41:03:48:f2:78:99:54:b7:b8:
e8:f5:40:c4:dc:c2:7e:7b:f0:5f:e1:53:ee:35:b3:4d:d1:77:
05:6b:97:c9:c8:3f:bb:76:6b:ee:8e:8e:0a:ef:c2:ea:16:0a:
3a:1c:c9:eb:ec:bd:92:42:b4:16:b3:e8:a7:a8:91:ac:7a:b3:
25:4c:0a:6b:2a:32:91:96:dd:50:dd:b4:ba:db:80:e3:5b:e8:
e1:8e:3d:3a:b1:5c:69:b7:5e:4d:87:b3:62:37:05:64:71:a9:
e3:3b:cb:7d:43:34:a5:25:c2:67:cd:81:37:2f:e6:1f:d0:42:
bb:ea:7d:78:da:e5:d2:56:ae:16:bf:63:c0:a9:15:9a:b4:fb:
a9:b5:8b:36:2b:bf:9a:41:0a:7c:0c:d0:1b:e0:f5:3d:9c:e0:
b0:3d:31:20:aa:59:61:9e:85:ee:d5:2a:fc:ad:82:4b:7e:e1:
17:16:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:27 2025 by rpki-client