Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
File: MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft (raw, json)
Hash identifier: 6ypQtXDVlbZjCJWu/uNmVOb4xV86apR6JO16Id7gMw4=
Subject key identifier: 31:29:F2:20:46:C5:E2:56:52:15:B9:B3:8B:2E:7E:8B:C4:6C:16:99
Authority key identifier: 30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
Certificate issuer: /CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Certificate serial: 0196556EAAE126435A15C762383F0F084908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
Manifest number: 1094
Signing time: Sun 20 Apr 2025 23:00:38 +0000
Manifest this update: Sun 20 Apr 2025 23:00:38 +0000
Manifest next update: Mon 21 Apr 2025 23:00:38 +0000
Files and hashes: 1: BBdbuotjTMjXRl3JAeP7HEvXWvI.roa (hash: oe7eC03oYJfwYH0zG5KTjbcXBldNHb2+R11az4Gn4S0=)
2: MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl (hash: a/gApfXJ/115ODu5AifnzXlye5FFu8oz/6wqQhGaSug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:aa:e1:26:43:5a:15:c7:62:38:3f:0f:08:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Validity
Not Before: Apr 20 23:00:38 2025 GMT
Not After : Apr 21 23:00:38 2025 GMT
Subject: CN=3129f22046c5e2565215b9b38b2e7e8bc46c1699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:4f:68:e9:fc:7b:bc:8d:dc:86:ad:e7:e6:
a6:5c:c1:8d:c5:95:ae:89:36:38:1d:d1:cd:f8:7b:
26:db:c1:ba:81:71:fd:51:3b:0b:16:8a:d5:7d:8d:
2d:f7:a9:80:bc:c8:10:00:26:0a:ce:42:62:ea:f9:
f9:df:44:44:e4:ac:05:0a:6b:41:cb:23:6e:2f:35:
43:64:3a:b4:21:fe:77:49:ca:bc:57:96:ba:0e:8e:
cd:83:93:31:28:7b:82:76:69:b5:09:74:fb:5a:7a:
5b:2c:8d:1e:93:77:df:aa:f4:55:db:b7:5a:b8:50:
48:24:b2:57:be:62:e8:44:c9:c5:c5:d5:68:0d:97:
0e:11:24:c9:df:42:a3:8f:4c:a2:52:0e:42:d3:db:
4c:d1:4a:77:44:b3:28:68:b1:59:fe:a4:01:9b:c9:
04:2f:a9:dc:c0:f0:fa:6b:83:45:cd:8a:fd:b4:93:
3f:07:77:4b:a2:01:c8:51:ee:68:41:ab:8d:2f:59:
52:c9:f1:34:f5:06:cf:94:a6:18:c7:67:b5:93:e5:
cc:d2:a2:e6:0b:43:09:b4:04:60:66:37:29:0c:a8:
e5:eb:41:05:e5:59:49:f4:32:ef:37:2c:42:97:18:
0a:2f:b7:77:ef:9e:44:c2:90:6c:aa:10:f7:c0:98:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:29:F2:20:46:C5:E2:56:52:15:B9:B3:8B:2E:7E:8B:C4:6C:16:99
X509v3 Authority Key Identifier:
keyid:30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:da:f4:b9:de:bb:c3:75:08:86:8f:40:73:47:3f:ae:ab:19:
72:ad:31:c8:0a:5e:cd:de:52:c5:85:49:6e:11:21:c1:5e:9d:
c4:2f:94:53:ef:5a:b0:a2:ab:6a:77:6f:97:3c:bb:b2:39:23:
93:37:f4:4b:87:80:69:4d:14:6a:6b:5e:75:11:de:d8:4f:a5:
f7:ea:bd:6f:c1:ce:d5:23:aa:05:18:d5:f4:00:32:5b:52:55:
95:0a:ff:01:f7:d4:40:c6:d9:cd:fb:28:03:e5:f3:dd:e3:a1:
78:64:df:12:ea:e9:97:4e:50:79:70:ff:fe:df:3c:1c:f3:2c:
63:b0:97:93:88:d3:04:2a:5a:db:c0:d9:63:99:b9:f0:b2:24:
96:57:a0:0d:0f:de:ce:ba:37:48:bf:f3:7e:c6:38:9b:59:c5:
37:a4:a9:3f:c5:b8:62:05:6e:70:28:2b:2a:d7:29:59:b5:07:
da:d2:4b:72:c2:f0:4e:c7:ce:66:a2:ee:94:81:b3:87:46:21:
ef:63:07:95:0d:76:5c:07:6c:24:94:d3:a4:71:a8:8d:ec:64:
f0:4b:04:83:34:30:82:98:24:9e:ba:e5:74:5a:dd:b9:d7:ea:
56:20:77:2e:ab:7d:b6:9e:c8:62:42:ee:b8:61:84:4a:f9:df:
59:35:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:01 2025 by rpki-client