Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: sjvUhIqLKSlPDy6160sKIKtE+moOmGUrxJBK9ruxVcM=
Subject key identifier: 17:DE:6C:58:C8:E6:10:40:0B:0B:EA:84:E2:86:38:FA:FB:73:3D:48
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 019655A55860A620FD6EE591D5A7B5FAE02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 1239
Signing time: Mon 21 Apr 2025 00:00:21 +0000
Manifest this update: Mon 21 Apr 2025 00:00:21 +0000
Manifest next update: Tue 22 Apr 2025 00:00:21 +0000
Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: uqU67kc+kIsIP6ETof7eNO+hqZV+SPZHD8zsFO2yOOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:58:60:a6:20:fd:6e:e5:91:d5:a7:b5:fa:e0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Apr 21 00:00:21 2025 GMT
Not After : Apr 22 00:00:21 2025 GMT
Subject: CN=17de6c58c8e610400b0bea84e28638fafb733d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8e:a2:e5:77:c2:f1:8e:e0:b8:72:e9:35:e5:
9c:68:e4:7a:91:2c:7f:d5:6f:ff:a9:ae:43:a3:b2:
86:c4:15:ad:f6:6f:95:93:91:39:43:01:67:49:62:
c5:fe:37:8d:90:86:09:19:b8:ef:bd:8a:20:0b:6e:
f2:3f:0b:f2:3c:c0:62:ba:1d:0f:04:d0:df:36:b4:
ff:1e:4c:3c:c2:71:48:a3:e3:f2:61:e8:b2:f0:e7:
2f:11:04:aa:60:42:f4:75:52:8d:74:59:ca:00:f5:
41:65:53:1a:c3:48:aa:03:5f:65:f7:cb:be:e1:2f:
ac:48:ad:33:d7:a9:5e:75:5a:69:7d:22:ea:07:74:
49:d6:fc:8d:45:26:52:9d:69:93:44:f3:0e:50:cb:
07:9d:65:da:2c:50:50:c7:c5:76:d3:8f:bd:1a:61:
1e:51:36:4a:c5:05:c1:78:fa:30:82:1c:57:67:3d:
20:55:ea:96:ef:68:87:1e:5b:96:bf:bb:d6:8f:d8:
90:76:ee:9e:d9:1b:88:f3:c6:af:19:cc:d3:fd:25:
1c:3e:ca:56:c5:02:a0:eb:bd:1a:c4:dc:a9:d4:0a:
27:cc:9a:44:ad:2b:b8:2e:68:e1:72:48:f0:41:c1:
fe:14:f3:7a:65:67:89:19:c8:1d:b8:b7:25:07:b0:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DE:6C:58:C8:E6:10:40:0B:0B:EA:84:E2:86:38:FA:FB:73:3D:48
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:21:37:fe:2e:ed:13:90:07:fb:7f:df:93:22:e9:32:75:
5e:a1:e0:b6:3e:9f:73:ff:1b:c3:4c:a0:3c:ab:00:9b:3f:60:
41:46:3c:be:e6:8a:c9:e1:4a:fe:e5:56:9d:83:5b:10:a0:c0:
87:ce:51:01:40:af:fc:88:40:ed:ff:d9:b3:c0:87:f4:1d:b1:
7a:fc:f2:81:d0:6e:b3:9c:2d:ca:23:57:86:52:31:49:59:be:
f8:e5:64:5e:35:07:a1:1e:9f:48:23:e8:c2:ab:1a:21:8f:c6:
d6:80:93:8c:75:12:a7:14:30:5a:25:35:48:f0:4d:7d:30:e7:
70:3c:8f:7d:1e:be:9b:ad:16:83:d4:80:44:25:c1:3e:b1:56:
f4:d1:f1:74:9c:5e:36:0a:f9:1a:87:56:08:7b:10:de:94:62:
32:e1:88:bd:3a:3b:f1:f1:e4:b0:e4:0d:3e:9d:6b:73:c0:67:
ed:11:cf:50:7d:56:9c:5f:c0:9c:58:a1:c6:0e:13:c0:40:02:
74:85:8c:ca:bb:7f:c6:1e:a3:07:c2:26:7a:32:67:c9:d5:2d:
60:6f:91:d2:ed:28:8a:3a:ba:5d:d0:71:95:6c:79:5e:9e:4f:
07:77:ca:c9:e8:39:3b:0c:82:29:6a:ab:af:ef:4b:20:78:d3:
44:d6:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:40:02 2025 by rpki-client