Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
File: MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json)
Hash identifier: c/qI0aQtiPO+vSqIXGhFUobOol+bx/F6v/ZKZG88W1U=
Subject key identifier: 51:FE:7D:64:6D:E8:D2:3E:F9:27:D1:B9:F7:2C:56:91:50:1B:D1:69
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial: 0196549296C42C9165E247304E573D999A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
Manifest number: 0218
Signing time: Sun 20 Apr 2025 19:00:14 +0000
Manifest this update: Sun 20 Apr 2025 19:00:14 +0000
Manifest next update: Mon 21 Apr 2025 19:00:14 +0000
Files and hashes: 1: GXrNny7tuwzWiq-Z-LE5U24vo4k.roa (hash: xQ3KfJWrZ/Oh+PMOxbU8NX4YVFe6LbTJ05dku52B6s0=)
2: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: EwuReooas+gubHJ5vo4t/8sv39TB6iVHxGekvt4G3yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:96:c4:2c:91:65:e2:47:30:4e:57:3d:99:9a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
Validity
Not Before: Apr 20 19:00:14 2025 GMT
Not After : Apr 21 19:00:14 2025 GMT
Subject: CN=51fe7d646de8d23ef927d1b9f72c5691501bd169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:9a:22:5f:cb:e1:c6:02:9d:a9:5f:68:b4:
67:f4:61:f5:17:ff:05:a9:5a:f0:3f:1c:6c:9e:cb:
02:c7:03:90:2f:c3:2b:1b:82:ef:cb:8e:e2:60:c9:
57:44:c3:ea:0a:61:5d:23:f9:01:7e:91:09:55:a4:
7c:b6:9b:ba:84:c0:73:54:9c:82:2a:f0:4e:67:62:
80:e2:da:b5:9e:25:c1:22:b7:6a:2a:e7:ff:c0:bb:
08:7a:64:f3:85:3b:3c:73:dc:da:32:81:d0:1e:45:
fd:d9:ae:76:5d:04:9f:76:6e:b6:4d:25:b8:c4:c0:
0f:00:6e:65:37:c7:04:3e:b8:49:de:e8:c4:03:0b:
c3:a4:ae:2c:cf:b0:b1:6f:03:2d:15:5e:42:f3:0a:
63:e7:21:af:81:85:e3:46:44:83:05:4c:06:a2:e8:
02:94:cf:11:bc:20:ee:41:ff:d4:ca:4c:c8:7d:30:
e8:d1:a7:28:95:f0:f7:29:ed:2c:57:91:39:ae:64:
ac:a8:a6:28:0d:b6:5f:ce:92:ce:b8:90:f9:b7:ac:
0d:ed:1c:1c:08:a1:d9:0b:2c:d3:77:d7:3d:4a:31:
13:f6:9a:39:96:68:1f:32:61:62:ea:da:2b:26:02:
39:e2:5f:95:55:19:52:fe:9f:d5:ac:b2:2d:1e:c8:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:7D:64:6D:E8:D2:3E:F9:27:D1:B9:F7:2C:56:91:50:1B:D1:69
X509v3 Authority Key Identifier:
keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6b:15:03:ba:ea:75:ec:12:f4:04:a0:92:b3:9d:b4:f2:18:
e6:96:b5:04:d2:ba:f7:0a:9e:cc:ee:47:46:77:4c:5c:7b:10:
21:69:40:b9:ba:88:fc:6a:c1:c4:11:d7:30:85:45:45:8b:7c:
3a:8b:fa:80:bf:af:ac:2c:64:79:5c:9a:6c:8d:c2:ab:72:44:
20:2d:4c:51:6b:e8:88:f5:2b:2e:dc:7e:16:d9:7d:5b:a0:54:
67:df:a1:f6:3e:62:48:4d:f4:5b:57:bd:02:32:b2:6b:0e:4a:
f4:89:59:3d:bf:77:77:12:5c:cb:b1:e9:96:a5:c3:6b:af:1d:
c7:bb:95:7f:0a:81:49:40:73:80:df:90:ec:c2:c9:a3:65:11:
f4:df:1f:61:51:81:d0:99:7e:af:a8:57:38:4b:7d:c5:e0:f0:
7a:27:c1:55:41:49:a3:68:c2:6b:85:8c:0f:e9:46:c7:c2:27:
eb:7e:c8:df:2e:5a:88:58:c0:91:18:5c:b6:63:b4:93:80:91:
8c:38:f8:4e:19:91:02:20:02:7f:3b:09:5b:56:39:b1:38:43:
27:69:63:8c:10:76:19:34:a5:35:d2:20:e6:3f:22:50:78:f0:
53:1f:3c:ae:ae:f7:8d:1d:11:83:31:eb:dc:e6:bd:05:3c:62:
dd:57:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:39:19 2025 by rpki-client