Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier: u+cyEQz+kTYCWbwAnGd3tmCUANk31LU8Q3JPkh//pXc=
Subject key identifier: 4B:6F:36:1C:BD:E6:16:46:10:7D:66:FB:D1:E9:46:51:47:B8:6C:EC
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 01963F8B967B928540AF9498F9D8285740A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 17:00:34 +0000
Manifest this update: Wed 16 Apr 2025 17:00:34 +0000
Manifest next update: Thu 17 Apr 2025 17:00:34 +0000
Files and hashes: 1: FVoKa0hbyicRxj9T5QoKnrF-IQk.roa (hash: PJKMkHGyKfQ7AHpH2DcIDSD5neBvRyes+CMY82lEecA=)
2: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: 2uK7KxXWhWDILeGyYxOgx4Vn14BbzUw3jCOlK7fEIgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:96:7b:92:85:40:af:94:98:f9:d8:28:57:40:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Apr 16 17:00:34 2025 GMT
Not After : Apr 17 17:00:34 2025 GMT
Subject: CN=4b6f361cbde61646107d66fbd1e9465147b86cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8a:62:78:c5:3a:8e:f4:ab:30:84:ad:b5:5a:
17:6d:31:dc:98:cd:03:59:7b:6c:82:3d:23:52:36:
81:2f:db:f0:8c:cf:50:48:12:04:58:35:ab:47:30:
50:82:47:d5:66:ff:6d:7d:b3:0a:e1:40:53:48:db:
f7:7e:d3:18:59:3c:6f:c6:31:b9:1b:ce:d0:59:ef:
ec:b9:f2:f7:fe:3d:7e:38:70:49:3d:fb:1c:2b:38:
3f:5d:69:af:80:47:35:58:9a:69:d0:9b:54:43:0f:
56:cc:c6:a2:25:d2:af:f8:e4:a4:2a:74:f9:0a:a5:
70:c8:d0:5c:5f:3b:23:6b:45:36:c0:9a:29:b7:bf:
47:89:2c:19:7a:6b:f9:ec:ae:9d:e3:76:f5:30:1b:
9b:7e:6e:59:2c:97:f5:00:9c:e4:87:b5:b4:b3:2a:
ab:0d:91:0d:dc:62:93:1c:b1:07:39:cf:11:a9:83:
13:7b:ae:6e:ec:5a:2b:67:d7:08:51:17:08:1b:a6:
b2:57:49:d9:57:ce:2c:89:f1:25:15:4b:7f:ad:9b:
cf:82:19:fe:40:13:2e:af:ef:7c:fd:cf:64:b8:15:
58:a7:c0:7d:c5:98:86:51:15:c3:25:d6:fe:62:bc:
36:d8:cb:20:a9:1e:1a:5f:14:31:28:a0:39:03:20:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6F:36:1C:BD:E6:16:46:10:7D:66:FB:D1:E9:46:51:47:B8:6C:EC
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:80:88:fa:25:be:f8:e1:b0:69:c8:2e:86:d7:0e:7f:3e:ae:
b7:30:4d:f8:0c:a9:f2:c3:78:8a:7a:b2:1a:cb:9d:b4:d5:4d:
a3:3c:89:89:de:d1:5b:d0:0d:c5:6c:4d:91:aa:57:a0:40:05:
11:f7:43:36:f9:09:91:61:43:63:85:16:48:2e:2b:2d:c2:d2:
a3:96:a4:c6:98:39:de:28:07:17:5e:af:56:55:43:b2:3a:02:
41:82:7d:03:6f:ef:05:8f:c4:98:88:d6:cf:4c:e7:26:ce:af:
54:84:eb:0d:09:0d:d4:ad:46:af:61:86:cc:2f:3a:9b:32:dc:
2f:25:a1:7a:b6:d3:a5:c9:a0:3e:96:db:3c:a1:13:e2:98:63:
44:ea:d5:0c:c1:b6:2a:47:b2:b2:53:48:4a:be:c6:ea:da:7e:
6c:4c:7f:f1:19:5f:28:00:de:d7:de:f9:e6:14:df:87:66:84:
8a:7d:5d:6d:54:57:5f:02:e3:e4:9f:02:39:72:ef:14:08:d0:
bc:56:57:93:e1:74:b1:23:b5:46:08:83:ce:49:d6:16:63:f2:
4c:b5:61:6a:3f:d1:6a:6f:aa:ed:4a:d2:36:6a:8a:16:bc:e2:
4c:43:05:1e:e6:05:4c:18:02:0a:ee:a5:2f:62:25:7f:6e:0a:
de:ff:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:18 2025 by rpki-client