Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
File: mur6lsnVY-ZQulkv-wbizutqCFk.mft (raw, json)
Hash identifier: KBjsF7KEhWxwfjSLls/xWGYwgX4fbuLHDhwfz1T9K3c=
Subject key identifier: CD:40:31:35:18:DC:41:26:CC:4E:51:85:41:76:36:7F:AC:D5:96:06
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Certificate issuer: /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial: 01965492EA89F09E98FF1CFD5FA83DB8B634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 19:00:36 +0000
Manifest this update: Sun 20 Apr 2025 19:00:36 +0000
Manifest next update: Mon 21 Apr 2025 19:00:36 +0000
Files and hashes: 1: Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa (hash: 7yboFI0VfCPRE/G2/gMEN7pPuKOLyqEoyViA8/cI6kQ=)
2: irj1HjAurNUv-4zFYoq9zYDgdlE.roa (hash: Q709g8riB8kWPE65HcwVtvNF/Lb15QFI8yUUJR0G7Y0=)
3: mur6lsnVY-ZQulkv-wbizutqCFk.crl (hash: KmWNqpVJP1PLohHNHxC8BTfm0AIR6HeCTSzS/gEOA98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:ea:89:f0:9e:98:ff:1c:fd:5f:a8:3d:b8:b6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Validity
Not Before: Apr 20 19:00:36 2025 GMT
Not After : Apr 21 19:00:36 2025 GMT
Subject: CN=cd40313518dc4126cc4e51854176367facd59606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:99:cd:b1:62:c2:db:28:44:0d:ec:ba:b1:
a5:c4:a7:6f:67:59:0a:16:35:67:06:c3:46:45:87:
52:5a:54:2c:69:eb:80:cd:fd:a0:2f:c4:d2:8f:aa:
91:33:ae:02:cb:9e:35:f6:bd:36:50:52:05:d8:00:
48:dc:74:99:62:4f:7d:bc:69:f2:14:fd:a8:30:ea:
47:2e:d4:72:7b:c5:b8:0b:a9:be:2b:d2:c1:34:fc:
93:89:02:03:90:4a:cb:5c:8c:a0:70:a8:82:71:be:
59:95:b1:b0:77:fc:85:37:fc:1f:75:74:62:53:fc:
3f:63:8a:76:c7:34:1f:62:f7:a9:67:be:ca:a6:89:
87:a2:4d:bd:2c:e4:42:e1:19:4a:69:db:97:2e:82:
0d:66:51:5e:cd:41:b5:04:76:d4:af:26:21:15:e8:
98:84:c2:7e:f6:e8:fc:92:e4:25:98:51:b3:6b:52:
76:cc:2f:78:44:b8:90:60:9c:8d:0c:43:da:48:7e:
df:b4:2e:88:86:de:e3:8d:47:f7:53:37:5e:44:24:
39:82:5f:f4:be:f9:9d:33:1b:b3:c8:ef:94:e2:04:
ce:19:40:76:54:5c:11:d1:13:ab:eb:7d:0c:1f:34:
b6:07:96:50:64:dc:19:01:af:e2:50:85:d5:c6:f6:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:40:31:35:18:DC:41:26:CC:4E:51:85:41:76:36:7F:AC:D5:96:06
X509v3 Authority Key Identifier:
keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1a:b7:4c:88:4f:8e:99:0d:63:bf:95:93:8e:6d:21:25:72:
70:0a:42:b3:8a:75:ea:a1:04:0d:07:df:ae:9c:82:ec:9f:16:
de:3e:81:c6:25:c4:9a:ef:6b:61:61:04:6a:8b:80:00:ae:4e:
f3:3e:be:1e:29:47:94:65:5b:a5:73:ff:9a:65:db:06:52:c0:
0b:8d:9a:b5:10:b5:63:92:ba:83:4a:75:01:aa:ba:0a:c5:52:
dc:be:f2:ce:f6:e0:d8:97:08:e5:d4:dc:bc:92:69:11:60:68:
11:96:45:32:f7:83:ad:40:ca:8f:fb:3e:94:91:fe:60:dd:0d:
9e:30:e3:a3:97:72:94:4c:63:cb:ab:66:ea:b6:ee:ba:fb:1b:
63:e6:07:ef:46:b6:be:2b:3d:d6:b6:19:57:98:06:61:4f:32:
11:1f:af:0a:f7:77:7c:d4:3d:45:2f:95:25:34:a6:32:91:5e:
c4:17:3a:f0:c8:3f:e3:86:eb:3a:80:ca:7d:cb:c2:c1:45:bd:
7b:bf:34:63:e1:69:36:1a:9b:8d:03:a2:fa:51:cc:90:6c:09:
c8:1f:1d:32:85:46:eb:65:b9:26:41:00:43:10:a8:ec:80:eb:
80:4b:d5:79:14:e7:51:f8:6d:0c:57:72:00:19:ea:1c:e3:da:
a3:1e:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:57 2025 by rpki-client