Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
File: MTZAKhRELms6FTnWQlASjc3R7Ns.mft (raw, json)
Hash identifier: RD1zJ+dZbrxTXjYzMwPD6HLyiDHgLbXQn6HVUxdwDfo=
Subject key identifier: C7:42:B5:52:45:54:18:7E:ED:9B:8C:CF:79:6B:2C:06:47:08:19:00
Authority key identifier: 31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
Certificate issuer: /CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Certificate serial: 0195922C353530B124E77CA38C8C7088D7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
Manifest number: 2A
Signing time: Fri 14 Mar 2025 01:02:05 +0000
Manifest this update: Fri 14 Mar 2025 01:02:05 +0000
Manifest next update: Sat 15 Mar 2025 01:02:05 +0000
Files and hashes: 1: MTZAKhRELms6FTnWQlASjc3R7Ns.crl (hash: KIt6ooq+z79lU7CS1CMA1Tki4oJe4ABmcNT3QCpRka8=)
2: gk7tvvpNQKzq016DYIQrQnI1zIg.roa (hash: GqU+/Xvx9R7K2mDYSrVU8YpXujBinhqdZQ6UcdPTRQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:92:2c:35:35:30:b1:24:e7:7c:a3:8c:8c:70:88:d7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Validity
Not Before: Mar 14 01:02:05 2025 GMT
Not After : Mar 15 01:02:05 2025 GMT
Subject: CN=c742b5524554187eed9b8ccf796b2c0647081900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:f8:76:0c:c6:26:da:74:82:4a:83:74:e4:
77:55:44:17:78:20:b3:d9:ac:c8:02:23:6d:81:ee:
e6:2c:3f:16:de:c2:2d:8b:01:ea:4c:fb:8f:a2:92:
65:e6:2b:84:25:2d:7c:62:c0:b3:b5:4e:bc:ed:f6:
ec:e0:a6:66:84:15:38:e5:ef:4a:04:a5:e7:b7:a3:
7c:88:15:0d:e7:ef:a6:12:4c:d1:e4:8f:1b:4f:93:
e7:07:b7:04:3a:df:aa:9e:3e:86:22:92:d4:35:9d:
0e:75:1d:b0:34:0b:f0:bc:b3:47:73:12:92:3a:1f:
9d:dd:a9:f5:25:8a:d1:1a:6c:70:6e:6e:40:da:af:
e7:93:9d:84:7c:45:be:c6:a5:e3:db:57:bb:1a:ec:
af:6f:75:c6:46:08:a1:3f:15:e5:96:23:a2:02:57:
7a:49:9d:57:de:21:74:7d:06:53:ee:fa:2f:60:27:
f3:06:af:98:c5:22:a0:84:37:21:f2:07:74:be:49:
1f:b9:f0:c8:da:34:10:ed:cd:2b:0b:eb:05:02:0e:
98:9d:fb:66:c8:ca:38:71:3d:85:d7:d8:5b:00:5a:
fe:c7:82:dd:23:cb:4e:fb:4a:fd:5d:b4:06:24:c6:
cd:2f:34:11:98:f5:95:82:60:a8:23:b8:f7:d9:2b:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:42:B5:52:45:54:18:7E:ED:9B:8C:CF:79:6B:2C:06:47:08:19:00
X509v3 Authority Key Identifier:
keyid:31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:1a:01:10:c7:66:f2:27:6a:e6:bf:fa:ed:b2:bb:00:86:
76:2f:e1:66:7a:51:4b:7f:44:ee:a5:81:0b:14:d4:1d:29:88:
44:fe:d4:41:3d:48:11:ee:35:3a:0b:a7:66:5f:0c:61:18:b1:
14:28:13:13:10:25:6f:49:88:c3:67:3f:95:cb:d0:8f:ef:77:
40:59:69:a2:ea:74:b5:d1:62:75:7e:5a:d8:03:ba:3d:7c:38:
34:1f:75:74:82:f6:d2:05:6e:68:8b:42:79:9f:b3:76:c2:36:
dc:fa:a9:59:fa:62:bf:5a:b1:ba:14:81:2c:33:83:e5:3c:5b:
8a:0c:ee:ed:07:da:fe:13:e1:47:82:d8:c5:c9:d2:46:8a:5f:
70:c4:e6:7e:5e:93:b1:ba:34:ea:e6:0f:3a:f9:4a:44:0f:0f:
b1:2b:55:e6:4f:b5:59:d5:e5:8d:48:14:c6:7f:98:ad:c7:b0:
4c:a6:53:fc:b1:2c:07:a5:90:76:51:fe:3f:ec:8d:96:23:6b:
80:81:a3:87:ca:f8:e0:f3:94:3c:96:33:91:72:41:09:aa:72:
91:05:1b:31:7a:be:ec:b1:a7:a6:61:62:69:be:c4:ce:ab:bb:
cf:d7:d8:7a:dc:0a:b6:b3:d9:3f:fc:c5:1f:74:0c:ae:23:3d:
5a:0e:4b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:09 2025 by rpki-client