Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File: cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier: RLzvTJ5/Q+2qt8vmKK3kAqfVp+UBNQsIznYiI4sjTUY=
Subject key identifier: F1:D1:83:3B:66:DC:77:A7:23:49:DF:7C:8A:FF:0A:88:0E:8F:5A:56
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial: 019659EFEDD191776C31869D53F37811CA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number: 0995
Signing time: Mon 21 Apr 2025 20:00:18 +0000
Manifest this update: Mon 21 Apr 2025 20:00:18 +0000
Manifest next update: Tue 22 Apr 2025 20:00:18 +0000
Files and hashes: 1: 8anvDKitwmoS5b1R9CoiYAIvV4s.roa (hash: sK8EhnVxeI2sQ1OgOLzF1LkVF8lOtqG5DcBtonQ6uEM=)
2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: m4SusH4pfJWfXQuoGTja7lbGkPwiI45AsVmKwapDx3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:ed:d1:91:77:6c:31:86:9d:53:f3:78:11:ca:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Validity
Not Before: Apr 21 20:00:18 2025 GMT
Not After : Apr 22 20:00:18 2025 GMT
Subject: CN=f1d1833b66dc77a72349df7c8aff0a880e8f5a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:d8:13:22:85:f2:e3:29:cc:99:92:0f:0f:
ed:76:f3:5f:51:9e:4c:52:7d:5b:53:21:56:79:fa:
33:0c:08:ab:36:f9:7d:49:bf:67:59:cf:45:cd:ec:
a3:8b:f7:28:ec:e0:7f:68:a9:9a:aa:73:05:c0:9c:
e4:f7:6e:3b:4a:47:0d:b6:cb:70:d1:18:1e:f2:81:
cd:7f:9a:c4:62:9c:46:95:cc:2b:4b:37:38:5f:26:
dc:f3:60:dc:b8:ff:ec:ea:1f:4b:5e:76:5c:12:c5:
fe:4e:cf:53:18:66:65:e1:57:62:21:d2:d4:cb:03:
c5:1c:8c:58:8b:52:75:18:45:7d:12:01:38:7c:4e:
1d:53:f0:ea:23:83:25:a3:6d:a4:5c:b8:bf:4b:aa:
17:f9:ee:f8:ce:aa:7b:c6:9d:89:dd:2c:3c:fc:a3:
27:04:a6:dd:1e:ff:bd:3e:41:36:44:9c:44:07:fd:
8f:05:1c:95:52:64:3c:59:31:e1:a1:f6:70:89:65:
8e:b5:b1:ff:40:bd:67:37:3f:d5:11:fc:0f:a3:41:
87:69:88:24:54:7b:81:27:c2:e2:83:8f:0c:b7:83:
ff:ef:5e:e8:59:70:88:05:92:f6:56:13:f2:6e:5f:
d5:89:27:6d:89:e0:c1:40:0f:1f:aa:7b:9f:75:ae:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D1:83:3B:66:DC:77:A7:23:49:DF:7C:8A:FF:0A:88:0E:8F:5A:56
X509v3 Authority Key Identifier:
keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ff:73:98:0d:6c:08:7b:b0:88:1f:57:52:47:e0:42:50:bf:
43:00:1a:f9:37:62:88:85:e7:9f:d0:d2:b4:eb:4f:67:fa:4c:
1e:12:17:a8:bf:0e:76:ec:53:ee:be:62:5c:b5:ef:c9:eb:92:
35:56:39:a2:a1:b5:6d:22:53:ab:09:43:84:d5:2c:a9:2f:b1:
d5:03:35:aa:d4:95:7c:74:3d:77:98:2d:8c:c7:42:7c:79:93:
b0:33:8c:47:d3:a6:3f:fb:b3:27:34:90:72:eb:0c:16:fb:35:
09:38:4e:b7:79:fa:34:d3:9d:fe:d7:57:a8:fd:15:d7:e7:26:
69:1c:ee:f6:12:35:7e:61:77:0c:f7:51:6e:07:9a:61:a3:b9:
b2:5b:06:63:f0:42:f7:01:5f:60:98:48:e0:e0:a5:51:53:b7:
0b:78:7c:ba:e6:37:ba:6a:f5:80:26:e0:d8:30:ed:01:9c:07:
90:f8:af:e2:37:22:41:f7:e8:4e:d0:f6:8c:c3:cd:55:44:dd:
87:8a:72:43:1c:3f:e5:64:39:24:9e:e2:ad:b3:bd:8c:33:ef:
73:f9:96:28:8b:54:c3:d7:43:94:c4:ed:37:6d:f0:5b:bc:f3:
bd:39:c7:5b:65:d1:89:fa:1c:d0:46:5f:38:09:30:c5:eb:54:
15:a2:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:43 2025 by rpki-client