Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
File: MFS7bp94ARuMxdPyO3C2bPaXmqc.mft (raw, json)
Hash identifier: E8nYocmbuX0u+rWRkzCFiGpMjf4D3/yP7tFSXYP7GXA=
Subject key identifier: A1:CA:F2:8B:6E:B6:A5:92:E7:5D:45:A1:8D:43:6B:61:E5:CC:DC:EA
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Certificate issuer: /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial: 01965613C2DC3BF2C314AC75FF1B197BBA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 02:00:57 +0000
Manifest this update: Mon 21 Apr 2025 02:00:57 +0000
Manifest next update: Tue 22 Apr 2025 02:00:57 +0000
Files and hashes: 1: MFS7bp94ARuMxdPyO3C2bPaXmqc.crl (hash: Z0tgdKX6iGlJP4qFeEZ+DJYdSN37afy/r+bAqQv2xxA=)
2: jIxoBxvUdMCHFAPIgbpTv82jWLo.roa (hash: HrwO1TMjewTexEY6JfFnwLbtTAOtQU58BOb2eJzb5To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:c2:dc:3b:f2:c3:14:ac:75:ff:1b:19:7b:ba:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Validity
Not Before: Apr 21 02:00:57 2025 GMT
Not After : Apr 22 02:00:57 2025 GMT
Subject: CN=a1caf28b6eb6a592e75d45a18d436b61e5ccdcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:d5:f2:f2:e0:a9:ca:e8:14:5a:3b:e9:4f:
ae:77:d0:ca:f0:65:44:55:d5:25:67:e7:8d:f4:f1:
e4:2a:91:a3:55:41:b4:2b:c6:50:27:81:fb:92:f7:
6e:6b:c5:94:a3:3c:37:76:85:4b:ef:4c:db:52:f4:
f7:53:ca:ab:43:f1:7f:0e:96:17:40:7b:f7:f7:45:
ea:af:4c:ff:98:96:f9:f8:11:5e:dd:62:fd:f5:2f:
11:46:67:88:da:06:ff:f9:83:60:5d:fe:ac:95:8d:
e6:f6:d1:3c:ae:cc:5b:91:1f:67:ed:67:59:0b:90:
f1:00:4b:b1:b6:d1:aa:51:e6:78:ec:c9:82:be:ab:
eb:2b:39:d7:9a:cc:f5:4b:76:39:4a:23:7c:a9:0e:
db:3d:0c:a1:6f:14:66:2c:c0:c7:54:65:51:b3:3b:
e4:59:7d:30:4f:12:72:4b:2a:ba:3c:2a:f1:58:68:
a2:4b:fe:bb:3c:f9:8b:f1:86:76:48:cd:de:79:7d:
3f:34:bf:ed:d8:c9:9f:32:60:32:48:13:15:85:e9:
ba:2f:42:87:eb:e2:6e:3c:24:db:b4:05:90:5e:23:
5c:e2:0f:e8:6b:4a:0e:81:04:62:b9:cc:b3:1f:5c:
b8:ea:be:59:3a:e7:8c:27:0a:ba:2d:2b:3f:90:7a:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CA:F2:8B:6E:B6:A5:92:E7:5D:45:A1:8D:43:6B:61:E5:CC:DC:EA
X509v3 Authority Key Identifier:
keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d5:9b:bd:35:3c:b2:7a:cf:de:e0:0d:e8:be:13:9b:7d:c2:
38:ca:d9:4a:d2:b1:bb:2c:bb:c5:ec:57:a1:a7:10:ac:1c:bc:
7b:8b:a2:a3:01:a9:53:22:c1:e1:74:9f:ce:6c:0c:0d:bd:d0:
1d:c5:00:82:ba:28:45:89:94:3b:17:96:49:a8:25:da:38:b8:
55:49:06:b3:f8:ba:47:19:85:d1:13:c9:8b:6a:9b:fc:28:80:
a1:f4:8c:5e:96:9d:bb:39:b9:37:ab:d4:e5:8e:a6:b1:e8:2b:
1b:bc:d0:e1:7d:54:73:27:9f:53:27:a9:48:a3:e3:be:6f:25:
7e:21:f0:13:a8:e0:73:af:ba:63:59:89:a4:89:88:45:09:86:
24:79:c0:19:2d:0e:34:2e:d7:d5:06:47:8d:5c:79:6b:4f:21:
73:ba:5b:4d:85:44:a9:b0:6e:fb:75:37:00:30:c7:c4:03:99:
ab:b3:e1:24:90:7e:b9:30:d1:33:66:67:51:7a:4a:36:33:81:
80:2a:f8:c3:14:e1:06:fb:b7:96:e9:ac:bc:ce:f6:49:0c:aa:
17:2b:b0:16:ce:fc:6e:fa:eb:f3:34:cb:3d:83:7f:bf:0c:65:
c3:d2:43:f6:0a:8c:73:1d:54:5f:6b:66:65:f6:81:6d:c6:99:
dc:18:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:01 2025 by rpki-client