Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: +zHj7Nrg4RML8yHIgrcKc9bjRMX19ONV2g9ig4GtJKw=
Subject key identifier: 4A:04:9F:FA:0B:76:45:3D:28:20:B6:4F:68:3B:FA:02:E4:FF:79:9B
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 0196507F4CA5CF9EA8C2D7BFEDD0F3B0EE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 122B
Signing time: Sun 20 Apr 2025 00:00:42 +0000
Manifest this update: Sun 20 Apr 2025 00:00:42 +0000
Manifest next update: Mon 21 Apr 2025 00:00:42 +0000
Files and hashes: 1: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: WgDogog5X5nHbfCuvUrPEee8tWa+e+JYlI8X9rvAnMY=)
2: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=)
3: zmcBckUxuKaBoSS2-IE8qAAieFk.roa (hash: zuTF25+EetsvafVF215FiE6HAdQFZXfOVRgob3VxMdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:4c:a5:cf:9e:a8:c2:d7:bf:ed:d0:f3:b0:ee:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Apr 20 00:00:42 2025 GMT
Not After : Apr 21 00:00:42 2025 GMT
Subject: CN=4a049ffa0b76453d2820b64f683bfa02e4ff799b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:e0:6f:62:2d:6d:3b:02:77:f5:42:43:8c:
f4:8a:43:07:3f:5e:6c:87:64:d0:25:86:f3:5f:88:
c5:4f:24:36:4f:78:75:86:58:37:60:6b:35:0b:85:
05:bb:73:b7:38:95:6b:d9:de:71:0c:dd:94:88:9b:
f7:fa:cf:23:06:4d:4f:6b:60:d9:17:07:a4:32:0d:
4b:94:82:20:6a:d9:4e:8a:73:1f:78:72:1c:53:43:
32:6d:b0:54:1a:fc:25:f5:84:59:b3:b3:39:e2:9b:
fc:95:0f:1b:04:5c:70:1c:b6:3c:51:6a:b2:b9:27:
61:2e:22:18:fc:68:27:6e:88:20:65:92:d2:1a:41:
9f:46:39:ee:3c:c1:e3:85:aa:bf:0c:58:ae:6d:87:
62:b9:d2:ca:9a:d0:18:ba:0c:f1:fb:17:79:d2:f9:
bc:a0:0f:ed:01:67:6c:89:c2:e8:c7:84:e3:f3:d8:
cb:44:a8:e7:ae:4d:96:18:3c:a5:63:6d:0a:6a:af:
95:19:3d:ca:f5:26:52:a9:b5:8f:92:a2:23:19:40:
1b:95:9a:16:1d:d0:52:fb:c4:79:ce:88:44:5f:d8:
82:b3:69:f2:83:d1:78:59:cb:b3:b5:d6:d6:c7:b2:
96:73:06:55:03:79:de:ac:57:4b:f0:b9:25:f3:4d:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:04:9F:FA:0B:76:45:3D:28:20:B6:4F:68:3B:FA:02:E4:FF:79:9B
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:05:bb:e1:44:08:a4:d1:aa:ee:d6:e4:84:05:a1:66:2b:cb:
08:e2:86:7d:2b:4c:20:e7:5d:b0:a6:b1:f8:d0:dc:55:f1:a1:
de:7e:f1:d4:e3:ce:ad:d3:ce:aa:0a:25:ed:0b:3b:56:c8:8b:
dc:1c:33:22:7d:03:52:c8:0f:42:0e:d9:e5:7b:96:3e:fd:18:
e3:ee:1d:e7:17:a8:b4:b1:ce:34:c2:9e:43:1b:c2:42:42:91:
4a:a8:89:e4:5e:14:92:a0:05:2f:06:ca:95:bb:52:a6:f6:96:
aa:88:46:12:7d:44:7c:7f:7c:b9:01:f7:6e:90:d5:48:f3:6d:
af:c4:7b:f2:3b:7a:2b:b0:9e:81:59:72:90:26:13:3b:2f:31:
86:b9:c2:43:b2:44:f3:1f:e8:70:a5:a0:61:03:b3:bb:9e:d4:
43:f9:c4:19:16:ff:f6:9d:a0:c0:64:d0:58:39:06:2b:66:9e:
b8:26:97:b1:16:af:a5:35:99:06:54:bc:22:ba:81:8b:46:f2:
b9:f0:25:20:30:2c:44:7f:f0:c2:21:7a:ae:5a:36:5f:4e:f8:
37:04:c6:ae:34:5b:e6:21:ce:75:70:26:1e:d6:7a:2d:04:98:
eb:d7:f6:c4:25:7c:e8:1e:6a:de:f5:07:10:39:d3:b8:da:b4:
d3:41:f0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:03:12 2025 by rpki-client