Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier: gEWJ3ChWWSbxkuy3Q5N2wGu5auWyu3F2AeKdskLHB50=
Subject key identifier: 34:EA:33:01:D9:51:8C:C0:95:58:A9:2F:A9:11:37:D1:2B:31:9D:7B
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019635ADDA1784352DC00DA0CB60791C7CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number: 0BD3
Signing time: Mon 14 Apr 2025 19:01:48 +0000
Manifest this update: Mon 14 Apr 2025 19:01:48 +0000
Manifest next update: Tue 15 Apr 2025 19:01:48 +0000
Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: vgXsUB70PvU4GR3YmamCz/mAp3Tsqw2annu8aqkfMFc=)
2: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (hash: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=)
3: yCz-ewAMqZx7lCDPn4Ya6LAQnZ4.roa (hash: biH7dwZg2HQ2zwVaqcwP5LR/5HOneIgO7AJ9Gj1riJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:ad:da:17:84:35:2d:c0:0d:a0:cb:60:79:1c:7c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Apr 14 19:01:48 2025 GMT
Not After : Apr 15 19:01:48 2025 GMT
Subject: CN=34ea3301d9518cc09558a92fa91137d12b319d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:3c:9c:bd:ba:e9:72:fa:8e:24:96:a6:57:
e1:d3:1d:e4:07:59:38:c9:a9:a5:19:ec:ab:fb:68:
dc:57:95:e9:00:db:31:99:3c:d4:e1:66:d1:12:9e:
f3:bf:7e:9d:7c:15:1e:1a:09:5b:cf:e8:60:a8:e5:
8b:17:49:a4:73:f6:75:23:1c:da:27:5b:52:28:9d:
bc:3a:b0:ce:76:3c:49:62:d7:46:4c:0d:e3:80:70:
13:d9:5e:07:67:fd:e9:17:03:04:57:4f:a5:69:31:
c1:f9:42:3e:47:fc:c0:ae:88:4c:6f:dc:97:cc:e4:
eb:78:c8:57:ea:ff:8a:a4:57:8a:89:c7:ac:e1:46:
d1:d5:8d:57:89:88:fb:28:b1:38:e8:d3:da:4a:c6:
54:3c:db:c3:f1:0f:1d:3c:1b:6b:73:13:39:83:12:
38:45:b2:ce:a9:1b:00:bc:b1:6d:d3:fa:94:f2:96:
d0:2f:51:ff:ff:a7:5c:1b:a6:25:8e:97:84:b0:e4:
06:2b:35:f4:13:1e:be:03:bc:79:08:2a:38:2a:b2:
92:c9:c0:99:c8:2d:db:47:79:34:75:31:1d:5b:50:
a0:73:a2:c3:fd:bc:55:ac:45:38:62:c8:d3:e9:16:
a6:af:57:5b:09:83:3e:e5:98:19:39:4d:36:c4:5e:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EA:33:01:D9:51:8C:C0:95:58:A9:2F:A9:11:37:D1:2B:31:9D:7B
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5b:de:08:96:55:4a:26:10:04:37:6b:05:1c:ba:58:60:12:
1f:0c:1d:92:82:15:7a:4d:9f:4a:f7:83:f6:d8:29:81:5b:b8:
dd:b6:08:6c:c6:c0:d2:8a:57:a0:c9:5d:5a:a6:ee:69:f3:7b:
2d:d4:21:79:a5:52:10:80:e7:d5:36:10:42:7e:a9:13:03:04:
be:54:f4:86:0b:53:38:ec:76:ae:67:ae:9e:c8:4f:27:42:ff:
56:ea:c2:8a:72:98:98:ec:59:df:d4:5c:80:16:14:cb:c1:35:
f0:98:e4:a8:31:67:96:60:07:6d:b7:48:1c:a8:60:b1:72:fa:
0b:06:a4:dd:71:e3:51:99:08:1e:15:72:b8:69:d1:80:d8:31:
0e:43:11:b8:f1:0c:88:d1:98:91:61:2c:29:fe:f3:f2:d4:74:
e7:92:d4:a2:43:2f:d3:e0:16:3e:6a:c2:8d:78:00:77:28:97:
70:4f:8c:ef:19:d7:9a:7b:0f:07:51:83:81:95:68:80:70:6d:
d2:57:cf:f1:30:c8:d2:ee:b1:e0:44:df:0b:e0:18:88:40:0c:
ca:a2:30:ba:04:aa:4a:30:cb:e7:7d:3e:1e:65:af:5e:8a:33:
fc:7b:4a:83:a8:35:b8:56:a6:f1:c6:45:41:3b:19:09:8d:4c:
c6:00:c4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:28:59 2025 by rpki-client