Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: QDtVr+TaCn/9WpsRypf7/w+V0ddM8NidSES6RGtDsrU=
Subject key identifier: E8:39:0D:64:73:2C:47:12:25:21:4D:0B:B9:1F:AC:07:CC:59:37:39
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 019646327729B29A95547D094C14542624AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 04E9
Signing time: Fri 18 Apr 2025 00:00:34 +0000
Manifest this update: Fri 18 Apr 2025 00:00:34 +0000
Manifest next update: Sat 19 Apr 2025 00:00:34 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: 2KzyBsNYGGqDKdsoBGDMqFCj6C1BXQww/1iPSyBUMxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:77:29:b2:9a:95:54:7d:09:4c:14:54:26:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Apr 18 00:00:34 2025 GMT
Not After : Apr 19 00:00:34 2025 GMT
Subject: CN=e8390d64732c471225214d0bb91fac07cc593739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:5b:36:7d:2f:0b:1a:7f:69:11:a6:a7:de:
61:62:32:8a:c2:ae:64:3e:ac:84:77:67:60:c9:a3:
b9:c9:bb:6e:d8:63:cd:d1:a1:51:da:2a:c5:b1:da:
8a:72:6b:c0:de:5a:d1:fc:52:ba:a6:fe:a2:1a:dc:
2e:b9:e4:32:fc:35:8e:02:2b:81:44:95:42:e0:97:
3d:d6:9b:f5:4b:59:39:39:40:d8:53:85:53:f3:00:
f0:d1:9f:0f:fb:18:4a:61:82:63:04:1b:63:02:88:
be:f5:aa:0d:a9:da:84:3e:65:4f:b5:d7:72:22:df:
0d:94:e8:1d:e7:3b:f2:b0:81:86:ec:37:e6:a7:e6:
ba:e8:08:06:41:5c:f8:c6:59:32:84:df:da:ff:f1:
fa:c6:e5:6c:c4:97:a8:be:20:32:6a:54:45:84:67:
d7:a0:b4:68:dd:a8:d2:8b:d7:b5:81:4a:38:60:58:
29:a3:0d:94:c5:83:f0:b7:3a:0f:8f:cc:a2:72:1d:
3b:65:6d:07:73:c1:f4:96:ab:43:07:a1:c7:6d:4c:
e5:72:d9:b9:9b:70:82:d1:9e:f8:f5:d6:90:8a:42:
f7:d0:73:34:ac:17:25:d5:87:ee:5c:9e:58:28:e3:
69:d1:6f:26:24:6d:4f:7b:ad:7c:f8:4c:cf:47:54:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:39:0D:64:73:2C:47:12:25:21:4D:0B:B9:1F:AC:07:CC:59:37:39
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:98:81:d1:2d:55:f1:28:2d:91:13:dc:39:04:14:9f:c8:76:
f0:1b:89:60:21:fc:31:81:f0:49:30:96:cd:c8:97:41:62:7a:
62:64:a3:de:c6:4d:43:30:a9:1f:59:03:85:01:e6:c4:bb:9c:
52:7f:28:b4:23:61:08:51:ac:48:f0:95:79:98:af:6a:1f:f0:
4a:e8:1c:f1:39:39:3d:e9:d3:bc:c3:f1:03:24:d1:f8:b7:3c:
6e:64:f0:ec:0d:34:5e:ab:ee:b6:04:14:4d:c7:e8:f9:59:6a:
16:7d:41:b0:09:b9:35:ab:8c:d5:4d:bd:de:95:99:51:46:2d:
f0:43:8b:9c:49:d6:ee:bf:78:01:fd:80:af:5c:ca:77:ff:2d:
c1:91:38:69:a1:3b:0e:79:1f:ee:5a:a4:db:2b:5a:b5:97:80:
09:5b:04:52:d3:b6:00:b1:69:4f:4f:8e:dd:62:bc:c6:6a:44:
fa:f0:89:78:42:26:64:80:32:a9:18:97:28:ed:fc:dc:66:5a:
72:cf:65:fd:b5:cf:54:9c:27:3d:3f:7f:82:0e:e1:1d:7d:4c:
ff:29:f9:4f:b8:e2:fc:8e:e8:a9:b1:1a:35:0b:ab:9b:f4:5f:
17:c5:30:e3:d2:46:a8:12:00:93:44:44:33:d4:62:a3:d7:c5:
a7:52:ca:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:11:39 2025 by rpki-client