Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier: YbBWhozcK7t5ooRbFzg3xfrqOeIiGjWxdtJvYFeOHuw=
Subject key identifier: E8:7D:F6:4F:AA:CA:5E:1F:4A:35:63:D0:06:A1:94:76:6B:00:50:FD
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 019652DB33F3C39C760F1BBAC3B909642533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number: 14D2
Signing time: Sun 20 Apr 2025 11:00:19 +0000
Manifest this update: Sun 20 Apr 2025 11:00:19 +0000
Manifest next update: Mon 21 Apr 2025 11:00:19 +0000
Files and hashes: 1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=)
2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: 486a0pLDp0L9ipjDysRPZa9pd06e44L+IK3JLiqzNfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:33:f3:c3:9c:76:0f:1b:ba:c3:b9:09:64:25:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: Apr 20 11:00:19 2025 GMT
Not After : Apr 21 11:00:19 2025 GMT
Subject: CN=e87df64faaca5e1f4a3563d006a194766b0050fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:2c:17:3f:20:61:fe:56:7b:b7:e3:c8:68:
88:43:c3:ed:33:fa:a8:55:aa:00:38:e2:a5:7b:a6:
e2:11:c9:cf:00:7a:3e:88:39:3c:6b:92:6a:ba:25:
9b:83:e0:94:37:61:ec:ef:f2:05:19:2a:dd:46:fa:
9b:0f:c7:01:93:bd:77:6d:da:78:45:78:76:24:b6:
8d:68:f1:81:8c:47:52:d8:3f:fb:a2:f0:44:01:c2:
82:91:0d:50:dc:bf:25:f6:d5:d3:32:d5:1f:66:67:
81:f2:13:78:0b:71:87:05:af:bf:03:39:b3:94:a8:
d4:21:4d:84:e3:48:fc:c3:2b:8b:21:fd:86:b9:35:
ff:d1:b1:25:83:47:80:75:e8:35:d9:d0:88:8f:8c:
b8:ac:7e:4d:0a:8a:9e:b6:8b:8c:e5:9a:16:d6:3d:
37:cf:ce:67:95:84:64:c5:6b:db:b7:e4:a4:ec:7e:
8e:6e:68:8e:2c:d8:4b:84:c3:55:d1:c2:c3:72:01:
c9:d2:5f:c8:b7:0e:7f:a4:0c:63:5d:53:a8:16:0d:
1d:7a:ee:e2:17:42:d8:93:e3:44:04:1c:68:b4:cf:
ad:d0:97:d4:80:69:a9:72:bf:7c:05:3d:37:50:30:
c8:87:38:a6:00:d9:f9:ff:62:c4:85:94:65:43:07:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:F6:4F:AA:CA:5E:1F:4A:35:63:D0:06:A1:94:76:6B:00:50:FD
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ff:22:4b:ea:56:50:f6:dd:03:56:43:53:7b:f4:f2:49:e2:
0a:1b:9d:f7:35:d6:36:72:cb:81:99:56:2f:fe:47:31:8d:73:
89:fa:e6:a5:7a:2e:90:be:e8:44:88:e7:1b:f4:c1:2e:41:8b:
a8:5a:f8:d0:2e:0a:2c:5c:8e:37:04:6b:66:4a:14:45:73:e1:
b8:17:50:2f:16:4e:a1:46:12:c8:ea:ce:57:26:0c:78:36:24:
7f:c6:e0:2e:49:23:27:c5:b0:a4:8d:25:d5:16:20:ed:f5:a6:
84:88:94:3a:5c:4d:39:09:6e:93:eb:ba:70:55:3d:4e:f1:8b:
f5:ac:2c:84:57:85:16:cc:bf:90:7e:1a:36:e3:63:07:db:66:
de:b2:b2:71:b7:a0:c7:d2:d4:d5:20:3c:73:84:ac:f3:ac:fb:
66:49:52:e7:2d:7a:09:e8:2a:48:a9:83:f4:c2:e6:1b:1d:77:
b8:66:7f:a2:4b:5a:a2:ab:34:f9:28:49:b1:d2:22:e4:90:d0:
fc:9c:f1:86:a9:1f:fa:40:ec:a5:e5:d8:d3:ec:6d:15:d1:5b:
ca:56:dd:68:ca:0a:73:5e:39:fc:98:16:4c:43:56:d2:a9:63:
d8:07:5e:48:04:42:da:d1:9c:78:2d:35:24:ba:25:d2:6d:f2:
e2:bc:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:22 2025 by rpki-client