Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: DmbpYEVnflLjPCU58SEdhTWoHO+deyNzJ7S19XET/lQ=
Subject key identifier: B0:C5:90:52:AA:28:B7:65:99:53:43:EA:C9:8B:37:BD:00:75:2A:0C
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 01965500624DFD63C4F5FE7FAC7810B09B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 21:00:10 +0000
Manifest this update: Sun 20 Apr 2025 21:00:10 +0000
Manifest next update: Mon 21 Apr 2025 21:00:10 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: tSJTYjduxrZ52ILIDXT3m5qz95fGQb06v0z6RTDMZ04=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:62:4d:fd:63:c4:f5:fe:7f:ac:78:10:b0:9b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Apr 20 21:00:10 2025 GMT
Not After : Apr 21 21:00:10 2025 GMT
Subject: CN=b0c59052aa28b765995343eac98b37bd00752a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:36:d9:e5:ef:8f:43:ff:27:8b:78:7e:66:
2c:b6:0b:b3:ef:07:73:6e:55:40:65:30:cb:63:09:
bd:8c:67:c8:5c:88:d6:a4:39:46:f2:9f:7a:12:70:
a9:d1:06:9e:07:9a:33:af:06:4b:34:03:3a:fd:88:
51:65:c1:44:07:fc:0c:30:63:5a:3c:a8:b0:9e:32:
eb:4b:1a:75:70:ca:0d:64:77:11:49:d4:b0:a5:af:
ca:5a:29:8a:00:a3:e3:f0:e5:2e:8c:2a:bf:d4:4f:
9f:d0:59:d3:49:a8:83:ab:be:08:7e:d3:11:07:36:
6a:77:10:66:a1:75:3f:38:fe:f7:93:1c:dc:a7:83:
d9:6b:3e:11:2d:78:ba:2c:39:c4:5a:37:89:ff:7d:
11:9d:38:b1:90:33:88:3e:b5:30:93:16:0e:5f:a8:
f1:6b:c5:44:d0:1e:c3:e3:91:7f:ab:b6:6f:7d:2f:
e3:48:4c:1a:25:79:ed:0b:6d:b7:f6:96:0e:0a:d1:
81:8d:1c:ec:12:3c:3c:ea:e2:8b:5f:cc:ea:e2:4c:
04:40:45:2a:16:39:6b:29:66:b4:e7:71:ca:91:33:
7d:9c:8e:ed:b1:4b:d1:26:09:7c:5a:10:cb:e6:da:
50:85:6c:fe:79:1a:ee:12:b5:5e:48:ff:1f:4b:a3:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C5:90:52:AA:28:B7:65:99:53:43:EA:C9:8B:37:BD:00:75:2A:0C
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:78:3d:b6:ef:f5:4d:bb:1f:ba:13:ed:b1:f6:6e:20:8b:58:
5d:86:d1:77:72:78:a6:d2:6e:81:5e:44:c6:d5:2c:b2:3d:77:
dc:e3:15:3d:72:0a:71:ee:b0:2e:b3:b1:bc:74:e5:ed:32:d3:
13:28:f8:e6:34:11:5c:25:70:a1:05:99:46:57:5c:73:75:8f:
6d:72:0b:59:70:cb:c0:7e:b6:b0:2f:e9:d8:02:7c:e8:23:75:
2e:bb:19:92:65:73:ad:b3:9a:df:4e:6a:ee:e4:55:d6:63:80:
79:f3:73:7a:36:dd:10:bb:dd:e3:94:89:22:df:f8:e0:5a:f2:
de:7b:5e:ac:4b:e3:f3:6b:47:f2:61:cc:19:fb:e8:3f:e3:dd:
f9:1f:86:79:42:2d:42:e6:02:50:85:ad:07:47:e1:fd:b7:9c:
1a:e0:05:27:61:73:76:d2:59:2d:a7:e2:d1:9d:50:8a:84:59:
be:12:61:2f:f1:d8:df:5c:00:11:eb:74:65:61:67:7f:4b:a5:
79:f6:9d:13:cd:48:95:11:dc:19:a0:9c:6c:9b:b7:96:db:61:
b0:6e:68:6b:a1:04:2d:c0:ee:41:11:fb:b5:dd:c0:34:06:29:
ea:79:72:ac:0c:18:73:40:67:87:30:1a:fc:8e:8d:51:94:9b:
43:a7:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:16 2025 by rpki-client