Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: DqXQEG+/sJs0pPavw7wYFyWNGMRWz07otE/qpUYhpTk=
Subject key identifier: D9:85:4E:7E:B6:F9:89:12:5A:E3:9A:FB:31:03:64:D5:A0:13:E0:16
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 019655DD21AD4E0B72FF3BE2CFEA1FDB0854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 0359
Signing time: Mon 21 Apr 2025 01:01:17 +0000
Manifest this update: Mon 21 Apr 2025 01:01:17 +0000
Manifest next update: Tue 22 Apr 2025 01:01:17 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: 8ju+u9hAsV918fIT6ulKR80IQ6HuFGobGcshImZB4vA=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:21:ad:4e:0b:72:ff:3b:e2:cf:ea:1f:db:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Apr 21 01:01:17 2025 GMT
Not After : Apr 22 01:01:17 2025 GMT
Subject: CN=d9854e7eb6f989125ae39afb310364d5a013e016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7d:1b:9f:5c:cc:12:f5:86:f0:72:5f:42:aa:
31:13:91:a8:a9:97:5b:37:f1:ed:a8:43:6a:7f:d2:
c5:54:86:97:e9:02:52:16:0d:cc:c9:94:9c:9f:6f:
80:9d:3d:7f:62:b7:2a:cb:45:39:46:bf:29:9d:c8:
0d:99:8a:99:98:c6:ad:05:f9:79:1f:a8:bb:6a:cb:
1d:c6:3d:09:b2:e5:60:e0:9d:6e:23:46:d4:49:2d:
c3:85:1b:ff:a6:0b:a4:41:b9:74:19:63:23:cf:d6:
82:d1:52:8f:09:04:92:fc:27:a8:14:62:e2:ec:12:
0f:62:71:20:ec:40:5d:a1:2d:37:79:8e:5f:68:76:
b3:94:16:b9:03:73:67:a2:0d:23:20:53:02:91:de:
06:20:62:97:b8:00:56:fe:ec:08:e4:2d:ad:71:80:
e6:af:73:33:93:54:4c:aa:45:76:20:57:14:36:4f:
76:aa:f5:05:30:cb:b4:0b:4a:ab:ce:4d:cb:ab:6d:
6f:1e:b9:58:9f:7b:30:d1:dd:3b:56:b7:93:d0:7b:
e2:0e:e1:a9:00:e5:89:db:a1:b6:17:df:a1:97:df:
19:22:46:22:2f:c8:6e:65:fa:12:0b:77:3e:8e:bc:
dc:52:77:25:c1:4f:d2:8d:29:2b:45:4f:7a:37:61:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:85:4E:7E:B6:F9:89:12:5A:E3:9A:FB:31:03:64:D5:A0:13:E0:16
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:87:b5:20:b3:b1:56:5a:9e:0d:dc:9a:a5:e1:c2:ac:96:
0b:18:df:8d:71:c0:ec:ae:68:cc:d7:22:53:57:f9:87:ac:17:
b4:26:e4:a7:e6:6b:01:1c:f1:82:48:5d:28:b3:c8:3c:72:fd:
82:53:70:16:fc:54:60:6e:db:e2:6e:6e:2c:d9:95:da:17:cb:
b8:04:92:9e:96:e0:80:e1:2b:bd:49:e1:0d:a3:fc:04:63:10:
dd:ee:09:8a:2f:b3:73:ce:5f:66:89:20:b9:9b:57:31:99:26:
4d:bf:d9:41:70:40:d2:a9:6c:80:d8:d4:bc:57:a1:e7:5a:c1:
a7:2b:4f:68:bf:e1:5b:77:72:43:42:af:d9:40:79:34:49:87:
6f:0e:38:04:3c:58:49:dd:c4:9c:00:1d:11:e1:cc:96:39:03:
00:c1:bf:97:9d:55:52:8f:f6:5a:c2:97:8f:59:da:f7:ee:42:
11:28:c8:c3:c4:3a:2b:0d:7c:68:cc:d2:2b:1a:84:17:f5:3d:
86:d4:4c:6c:28:dd:17:0f:78:fb:0c:72:73:41:c4:59:14:a4:
9c:db:f6:f5:0e:71:ab:61:73:0a:fa:dd:2b:8d:3e:93:de:1a:
ad:bb:64:b7:1f:2c:df:ae:23:95:6f:c7:e2:8a:8e:19:ee:22:
43:38:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:12:57 2025 by rpki-client