Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: c1lTGpFRx1lv+9o858UZm4spc5PFJp/hdvGcLiC6Kmg=
Subject key identifier: 49:75:58:23:83:1A:76:26:1B:8A:7B:8D:D3:15:1C:78:31:C2:94:8E
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 0196458D68E248896EF29E6F1BDDCA6EAF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0BDC
Signing time: Thu 17 Apr 2025 21:00:17 +0000
Manifest this update: Thu 17 Apr 2025 21:00:17 +0000
Manifest next update: Fri 18 Apr 2025 21:00:17 +0000
Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: 5WtO+RePP2rfx3yb0qhOwzka8csLypTaGjRCrfk0LJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:68:e2:48:89:6e:f2:9e:6f:1b:dd:ca:6e:af:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Apr 17 21:00:17 2025 GMT
Not After : Apr 18 21:00:17 2025 GMT
Subject: CN=49755823831a76261b8a7b8dd3151c7831c2948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:2b:73:78:1a:db:91:76:30:9a:46:59:a6:
9d:a6:c5:59:b5:92:67:d2:88:fe:ab:6d:65:65:69:
a0:ed:e9:34:ac:1f:b0:1e:08:00:a8:73:29:4a:50:
6a:d3:cf:5b:35:11:25:69:04:7b:dd:1f:a3:1f:29:
38:c1:a2:49:df:99:d0:db:05:66:b9:c4:8a:4d:4e:
72:31:0c:9b:e8:05:a0:7f:a8:f0:73:8f:8a:42:9c:
a1:42:68:56:dc:b1:9c:f3:43:70:df:f9:28:d3:8e:
3c:af:0e:f6:92:23:50:cb:b5:fb:aa:3a:cd:96:fd:
e6:05:8b:96:46:61:17:4c:b1:d0:40:6c:78:42:34:
9d:de:e3:d4:e3:cc:c8:5d:c9:bf:ce:fe:ff:15:f2:
34:13:aa:f9:3d:01:aa:e5:f3:fa:61:34:17:d3:d5:
26:09:ce:86:80:bb:a7:73:49:24:e6:54:ea:cf:e7:
21:dd:57:50:bb:f3:d0:5a:ab:d6:a2:d3:ab:e7:cc:
4b:fa:cc:a0:11:10:e5:62:e8:0d:5a:20:87:da:38:
9f:96:b2:78:ae:55:d8:46:8a:c8:04:e2:57:db:c8:
c7:0e:2c:aa:67:f3:b2:22:c1:91:63:6f:30:60:ad:
43:6c:03:00:6c:37:89:62:5e:9a:28:4e:f2:5a:d4:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:58:23:83:1A:76:26:1B:8A:7B:8D:D3:15:1C:78:31:C2:94:8E
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:66:86:bd:98:40:be:bd:cc:9f:9b:b0:7b:77:c8:93:8c:83:
99:b0:0e:8c:55:37:96:0e:10:87:b5:02:c8:3f:bc:d1:a8:c3:
63:6a:db:37:4f:67:7c:ec:70:c5:fa:e6:80:a3:45:fd:72:43:
be:37:2a:ee:bf:d8:28:e9:f3:46:27:92:ee:7a:0b:6f:a7:26:
e2:ba:e7:a8:e5:c0:95:86:4c:20:db:0f:33:c8:88:e0:9e:08:
12:9a:cc:c4:d6:8c:2a:73:8a:30:d4:3f:89:89:f8:25:57:61:
2e:f5:73:62:1d:9c:84:e6:81:fa:6f:7d:c1:bc:75:47:2e:a7:
d1:82:92:86:c3:21:53:24:06:c5:14:83:9b:71:3c:82:42:9b:
60:3f:aa:ed:8c:97:ac:41:69:de:ab:5f:7c:33:8d:1f:1c:1e:
43:e6:5b:cc:75:97:14:c1:d1:2e:a2:bc:e9:45:90:a4:9b:43:
f9:79:a3:68:cd:fc:4f:89:e7:56:dc:34:b0:07:2e:7e:17:7f:
5a:84:d9:9e:18:0b:59:df:41:77:f6:78:8b:13:fe:3e:f6:5d:
52:bc:16:42:17:dd:c8:52:bf:b1:bf:bd:a2:df:f3:9a:b6:13:
7b:4e:d6:b9:ea:73:7d:41:af:9f:c0:7c:bc:f3:0f:73:be:cd:
af:78:45:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:39 2025 by rpki-client