Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: QHN+5CEOhpaMvc8Ajhez8lwtnk4rsVBgU5dE6a8T8VI=
Subject key identifier: 4F:1B:04:4E:6A:9A:4E:A3:64:EC:E3:B6:60:7E:39:51:33:A7:08:41
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 01958BF225CDDF35C4B13B81A166AE85B3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 1110
Signing time: Wed 12 Mar 2025 20:00:57 +0000
Manifest this update: Wed 12 Mar 2025 20:00:57 +0000
Manifest next update: Thu 13 Mar 2025 20:00:57 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: JvSSDgjt3vPgc+FqVnhoEFKG+EugNfYTsQBsTDVoi7k=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:25:cd:df:35:c4:b1:3b:81:a1:66:ae:85:b3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Mar 12 20:00:57 2025 GMT
Not After : Mar 13 20:00:57 2025 GMT
Subject: CN=4f1b044e6a9a4ea364ece3b6607e395133a70841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:77:ec:e0:1d:3d:32:c4:25:bb:08:98:b1:
8c:99:fe:1b:d3:aa:d8:c1:96:5e:83:a6:cb:da:63:
15:96:6d:70:a0:8f:26:4a:db:90:89:63:ab:37:20:
3c:6e:71:c5:f1:e2:4b:a6:d9:0b:9a:9f:51:21:72:
48:d1:86:83:ec:04:e4:9d:97:1d:a5:35:d0:a3:c0:
41:c1:1c:66:54:85:89:27:b8:f3:9e:3e:7c:22:06:
24:d7:e8:9e:84:75:b8:e2:51:bb:52:75:98:24:53:
11:1b:a1:d6:e0:9f:f4:ae:ea:03:e1:f9:31:28:9d:
f7:1d:e5:6f:2a:4f:6d:da:19:a6:da:24:14:11:8d:
2f:da:95:f8:28:0c:f5:c4:9d:37:18:0f:7a:dd:7c:
3e:46:04:33:af:65:3c:98:95:28:e6:c1:e8:f1:4f:
a7:a7:78:ac:03:68:41:e5:2a:d2:01:42:f9:15:66:
c8:61:22:d3:16:88:55:ec:af:08:e8:86:40:3f:a7:
94:f9:5a:6c:84:49:d3:49:7e:88:a6:7e:00:9e:b4:
c9:4b:a6:6c:53:25:47:33:c5:ad:27:60:71:5f:73:
af:f8:d3:d3:f0:d0:e8:6b:49:64:c0:a1:24:01:84:
63:00:93:1a:26:86:7f:5f:3e:56:ce:ab:23:76:65:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:04:4E:6A:9A:4E:A3:64:EC:E3:B6:60:7E:39:51:33:A7:08:41
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9b:47:32:48:87:60:73:74:ce:69:fe:e7:a8:87:aa:15:b6:
d2:0b:5f:af:45:52:4d:06:15:6f:5a:7d:e9:95:d3:09:93:4d:
ce:d5:d6:dd:db:5e:ae:f0:c5:66:6f:23:81:d3:2d:6c:a9:e4:
6a:7d:76:fc:45:9c:06:86:09:b7:0a:db:6c:f8:1a:9d:05:9c:
94:d5:b9:6e:7a:81:2a:c8:f8:f0:6f:43:a5:d3:de:30:6b:7d:
d2:85:b1:d0:d6:7a:8d:eb:a1:de:1a:e5:cc:8a:71:75:d6:96:
0c:d8:3a:60:d5:f3:c5:7d:b1:13:a4:4d:aa:c0:23:93:3c:a5:
09:82:8e:57:f6:ef:66:a4:75:94:b6:66:e2:ab:d6:c2:20:1e:
9d:84:b4:a8:58:37:f5:2f:8f:b2:c6:30:16:50:47:0a:10:59:
42:78:e6:36:55:56:b0:7f:ba:c5:5f:49:d6:0a:c1:18:02:ee:
8d:f2:7e:a1:ad:ef:6a:db:f5:d1:11:3c:90:f1:e0:7a:87:aa:
5d:bc:59:72:fe:d9:24:83:ec:9c:94:48:f2:94:db:ee:6e:1c:
b9:d7:7b:71:57:89:c8:17:c7:6a:20:64:89:87:b3:1d:bd:86:
1e:2b:1e:1e:36:43:f4:25:84:a2:78:eb:3b:14:57:40:ab:dd:
b8:b7:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:33 2025 by rpki-client