Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: uWnLC9z8Ri52YuuwpVH/ZkfDVqOPYdBQmsI1QvLX9yI=
Subject key identifier: FA:39:93:47:7F:68:A8:6F:2D:B9:5A:FD:A3:4E:A9:A5:E2:B5:6E:83
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 0196575CB3C1D0CBD5B41C3A231E60610372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 042B
Signing time: Mon 21 Apr 2025 08:00:15 +0000
Manifest this update: Mon 21 Apr 2025 08:00:15 +0000
Manifest next update: Tue 22 Apr 2025 08:00:15 +0000
Files and hashes: 1: N5euriRPkrPM5tpe3YMpJKwtnXs.roa (hash: Aif5H8pBLwxI+pfqg48v8EjEzgULti0iCYfChkXvfLI=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: fGmhAa3bJmKpCkFPGNgLe7tC4WCcQlk7zgZAwIKJ860=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:b3:c1:d0:cb:d5:b4:1c:3a:23:1e:60:61:03:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Apr 21 08:00:15 2025 GMT
Not After : Apr 22 08:00:15 2025 GMT
Subject: CN=fa3993477f68a86f2db95afda34ea9a5e2b56e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:be:7f:89:4c:31:92:f8:2c:07:60:59:20:
38:77:67:a8:2a:44:3d:35:22:6b:62:a0:a1:a9:6d:
f7:20:a4:45:e1:6c:bf:5e:f6:23:be:af:3a:44:0f:
4d:e8:36:9c:66:63:fa:e0:10:d4:b3:e5:86:8c:aa:
62:58:93:6e:07:f6:54:65:bf:3a:e4:4a:31:a2:a1:
72:83:dc:ca:fa:0d:bc:0b:aa:40:bc:11:15:af:95:
bf:87:2d:b7:7c:59:00:20:a1:d0:0c:d1:f8:85:24:
1e:f0:9d:13:3b:f5:80:42:08:7d:b0:aa:2f:59:83:
3a:a6:33:20:24:cf:05:12:21:0a:99:6a:38:7f:1c:
7f:78:57:e8:2b:06:3a:61:62:bc:db:62:2f:b9:dc:
bd:3a:66:6d:aa:6a:e2:af:2b:07:b7:c0:d5:29:92:
a9:c2:6e:52:3d:9d:eb:ff:dc:66:ea:e7:1d:1a:ef:
ca:9e:a1:b2:9e:0a:9e:59:07:a7:e3:a1:9b:64:2f:
58:65:0d:78:e6:7d:77:e6:1c:de:bd:48:c9:51:fd:
84:69:45:38:6c:14:68:6a:e9:1c:ae:ca:16:d1:cf:
72:52:c8:da:ed:3f:b5:dc:2c:a5:dd:b4:a5:27:28:
3b:52:0f:3e:ab:2d:1e:c8:9d:c1:af:9b:b0:5b:37:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:39:93:47:7F:68:A8:6F:2D:B9:5A:FD:A3:4E:A9:A5:E2:B5:6E:83
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:ce:fa:75:4b:9e:92:8c:a9:dc:b7:c4:5e:b8:a4:53:41:
d9:56:63:ab:3f:ed:04:2c:3a:fb:61:d8:a8:ed:88:a3:c3:3a:
f6:57:c9:3e:ff:0c:d7:cb:78:56:1a:3d:75:c6:14:7a:79:ff:
85:58:f2:35:f1:19:3a:84:0a:03:5f:16:b5:0c:a5:b0:e3:32:
36:14:d6:75:7c:7e:08:72:b1:61:7a:dd:f5:55:ab:ec:9f:34:
f9:6a:1d:23:8f:7e:f4:4d:1a:36:58:22:42:97:92:54:e1:0e:
3d:77:36:f3:c5:4b:93:eb:7d:1b:f1:d8:b9:af:1b:99:89:ab:
57:e0:b4:7a:be:af:87:10:bc:33:82:96:ec:64:36:01:00:e4:
03:15:fc:82:9d:b5:f0:ca:f4:ae:1f:50:21:8c:0c:16:33:c2:
2c:27:90:e9:32:d2:39:d6:bb:32:a7:d9:29:5a:d6:17:55:75:
5b:fe:7d:39:26:34:14:cc:54:a1:c1:68:97:a6:6b:08:fe:ea:
c9:14:36:29:87:d7:8d:12:11:34:c3:1e:8b:45:d5:55:12:3a:
3f:41:79:5d:d7:59:77:f9:27:7e:35:08:22:c1:60:d3:b1:23:
ed:25:20:23:a7:ee:92:c9:56:6a:6f:26:f5:ae:00:9b:d5:6b:
1a:23:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:23 2025 by rpki-client