Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: LVGgeSz8bXtvk+WR5YSOgGmOcpah7eUMeZXeYvhi/nE=
Subject key identifier: 39:AA:B2:42:70:89:7E:66:96:90:16:03:60:03:E2:D4:00:AA:25:2C
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 01965FBBFD13AC58EBA4C8C1ADF68022D13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 08D6
Signing time: Tue 22 Apr 2025 23:01:17 +0000
Manifest this update: Tue 22 Apr 2025 23:01:17 +0000
Manifest next update: Wed 23 Apr 2025 23:01:17 +0000
Files and hashes: 1: 603rn0H0FYudCPnEfxZroe0bEXY.roa (hash: ryXJM2FJX8+vLU53wfrhHbpkwDPlYGyu3Muoyu9cgv0=)
2: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: tRHsOL36KMjtb6hStFn/VTTt02CwzGmK28kM4wTUg6s=)
3: mjst7aUax91GFptXcthnYyUXm5M.roa (hash: yt+uoK2SV82Kw1H7pGPHZ6f9URufEVmNUwV6zXvjHTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:fd:13:ac:58:eb:a4:c8:c1:ad:f6:80:22:d1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Apr 22 23:01:17 2025 GMT
Not After : Apr 23 23:01:17 2025 GMT
Subject: CN=39aab24270897e66969016036003e2d400aa252c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:c0:ea:c2:54:0e:4f:e4:d1:22:a8:cd:06:
52:86:7b:59:32:ec:1b:fd:8e:5d:24:b2:12:25:dd:
08:20:17:00:65:e9:e9:1e:57:72:4d:93:0c:f3:44:
78:be:d4:72:a8:28:6e:36:d6:71:ff:07:95:6e:a0:
61:ae:5d:e9:76:86:e9:46:f7:33:d2:a2:72:75:08:
2b:a2:99:67:60:fa:3e:70:7c:62:c7:8a:9e:70:2c:
d2:2b:67:af:97:23:dd:0f:ca:50:a3:99:30:5f:fb:
dd:aa:df:c6:61:76:49:47:99:8a:ad:1e:6d:02:46:
d8:91:fd:a9:b4:dc:3c:f5:3a:06:8c:21:71:f8:1c:
a3:36:b7:62:ba:40:7a:a3:68:9f:9a:72:7d:b5:b5:
17:2a:2c:a2:39:69:01:6a:b7:47:0e:a4:f7:ca:84:
b1:f3:c7:97:3d:61:7a:2c:f8:01:b5:8b:c9:a9:aa:
73:00:af:c2:d4:cc:88:df:6f:3c:4a:32:b6:90:71:
e0:40:5a:8d:b7:dc:6c:24:8b:ed:a7:0c:50:9f:28:
61:77:86:15:40:91:0b:10:77:4f:37:bb:62:3c:88:
e3:60:ee:5e:4b:19:39:11:67:dc:30:2b:eb:26:41:
e2:4b:7e:05:1a:39:41:96:f6:00:c9:86:b8:9f:c4:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AA:B2:42:70:89:7E:66:96:90:16:03:60:03:E2:D4:00:AA:25:2C
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:83:45:e9:1b:15:ff:34:bb:f9:f7:43:a5:d1:2c:e5:33:f2:
22:bb:cd:e7:00:73:5e:e4:44:9c:f2:87:94:3a:b9:2f:47:b1:
36:06:1c:95:21:fc:d1:bc:4f:62:c0:08:1e:4d:3b:16:55:11:
bd:98:57:76:cf:8a:a0:d4:62:a1:a4:80:05:f6:27:f6:a8:4a:
ce:08:dd:70:c3:f8:0c:ae:47:5d:e9:5c:11:84:3e:6b:e3:7f:
86:22:94:73:93:9f:87:e1:1c:ef:4c:97:cf:7a:7a:c0:ae:91:
7d:3a:79:d4:c7:43:07:ce:0f:01:54:99:7d:96:2b:f9:a4:4d:
c6:ae:45:06:d1:ab:6c:12:11:c3:32:e8:b8:7b:8a:b6:7d:0e:
b6:bf:4a:1d:56:2f:8d:9d:00:27:30:75:df:37:2e:55:a8:dd:
1a:eb:b9:31:48:0a:ab:df:9f:12:ec:5b:34:53:8c:19:1c:0e:
ad:90:7e:48:28:34:99:74:87:ea:9e:33:77:e5:7c:c3:1d:09:
61:88:8f:c3:46:93:3b:92:65:32:3d:c0:29:28:a9:45:02:ed:
c6:f3:99:b0:f1:de:a2:85:b2:4d:4d:81:1d:d1:f6:46:86:76:
73:f5:0b:03:c3:aa:1a:95:96:88:7d:79:5d:75:ff:ba:71:1e:
53:d6:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:46:21 2025 by rpki-client