Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: KABBqDdG1bKSC6sxLiEYoz8KcZiXGNCFMaV2YRRki0Y=
Subject key identifier: 5A:61:99:B0:8F:DE:FA:D6:87:9C:CB:90:19:E3:FB:04:C4:53:2E:F5
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 01964D7E71AB6E3A12A7E2C6CF92107A47F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 10:00:54 +0000
Manifest this update: Sat 19 Apr 2025 10:00:54 +0000
Manifest next update: Sun 20 Apr 2025 10:00:54 +0000
Files and hashes: 1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: 5Ywla6s5bcxUIGV7AhpHpa/j6rv+eOJOMOklQMurhOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:71:ab:6e:3a:12:a7:e2:c6:cf:92:10:7a:47:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Apr 19 10:00:54 2025 GMT
Not After : Apr 20 10:00:54 2025 GMT
Subject: CN=5a6199b08fdefad6879ccb9019e3fb04c4532ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:2f:e0:d6:30:21:2c:be:ad:0b:09:1c:31:
7e:64:90:88:17:aa:4d:fa:8e:34:9e:e0:d3:df:c5:
89:7b:e6:f1:ad:bd:d8:fd:3e:64:f4:55:d8:4c:39:
df:0c:ae:90:fd:06:80:28:32:9f:a5:87:b8:b5:0e:
d8:0e:5c:d4:ab:14:79:36:a5:42:4d:03:0b:d8:2a:
4c:a5:44:e8:81:c9:69:b6:08:f5:72:f4:9c:d1:7b:
72:76:5c:06:c4:ab:f6:e7:73:ed:23:71:c9:2e:fe:
72:d0:d8:35:be:33:7b:57:2d:93:9e:05:d6:02:a3:
e9:ab:74:a2:41:f7:3d:87:be:c6:4e:66:dd:0a:25:
d1:cf:28:a2:a0:81:48:a3:7b:f8:0a:8b:cc:53:a0:
9a:a4:aa:a5:2f:b3:06:e1:c7:d8:ae:05:a7:7d:44:
de:c0:4e:ca:12:72:70:b1:32:2c:35:4c:31:ea:8b:
22:cf:86:ba:fc:ca:f0:da:15:44:1f:10:ae:87:52:
73:4b:1c:fb:e5:a0:3d:af:d9:36:d8:8e:44:f3:11:
f6:e3:d5:5f:a2:33:fb:7d:2f:52:8f:c7:d0:d6:10:
8d:09:a2:80:48:2d:de:ff:13:35:a2:e1:84:1e:b9:
8e:20:bd:7d:e1:88:b3:7b:d0:ce:7f:b0:b3:2a:e7:
53:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:99:B0:8F:DE:FA:D6:87:9C:CB:90:19:E3:FB:04:C4:53:2E:F5
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:1b:e6:84:fc:be:f8:7e:a1:da:df:87:5d:b1:37:fe:ba:24:
ad:c5:d6:78:f1:82:4f:69:d5:24:3e:88:56:c7:22:18:ff:f8:
59:34:b1:10:28:7d:4f:c2:a4:e3:82:1f:68:9a:ed:bf:1b:6c:
52:78:92:e7:48:5d:e0:2e:8a:8b:33:9e:0a:ed:ad:fe:8e:c7:
b5:33:ba:52:4d:2b:da:63:72:c1:f2:2e:f1:50:0a:7c:05:59:
4f:1f:70:86:03:65:f0:07:ae:b3:00:9c:ed:7e:4b:05:ff:3a:
0d:94:06:d1:96:66:5c:60:f6:d1:e3:83:2c:33:1d:64:ed:28:
e1:d2:22:99:be:ca:cc:1d:dd:99:c3:c3:5e:4b:c0:42:93:f2:
6c:9f:40:c5:67:8b:eb:a5:f9:fe:c6:64:f4:ed:6f:44:b2:02:
96:e5:9a:3b:55:b4:ca:70:07:a6:f7:6a:30:04:ce:1d:1a:e3:
a1:d2:97:f5:0c:25:91:c9:f4:8d:51:92:34:3c:82:eb:d5:38:
ee:df:04:92:67:a0:60:33:81:a5:c6:54:59:56:c8:a4:d7:52:
3c:b7:2f:7a:35:4c:d5:c0:1d:bd:b8:6f:2d:7c:fc:2c:27:b2:
9d:61:43:0b:54:52:c5:72:e5:70:08:bd:38:1e:6d:d8:8f:e3:
3e:45:24:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:05 2025 by rpki-client