Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: 0NgyAuY7gzT5nrQ2z1bmLMdBqPeOlXd0vT1NqmynZMg=
Subject key identifier: AA:21:90:3A:7A:6B:FA:7C:9B:A4:07:42:45:9A:E2:B0:39:CC:7F:44
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 01958B4D4FC54DC552259180042D92A71A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0B8C
Signing time: Wed 12 Mar 2025 17:00:54 +0000
Manifest this update: Wed 12 Mar 2025 17:00:54 +0000
Manifest next update: Thu 13 Mar 2025 17:00:54 +0000
Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: 3ntSUUVWrjEarHFnrBHBtnSqfmjUE3Z6UK7nCzWAKS0=)
2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:4f:c5:4d:c5:52:25:91:80:04:2d:92:a7:1a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: Mar 12 17:00:54 2025 GMT
Not After : Mar 13 17:00:54 2025 GMT
Subject: CN=aa21903a7a6bfa7c9ba40742459ae2b039cc7f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:6f:e2:b8:6e:bb:25:35:94:c1:e0:ac:c4:
78:e8:2c:62:27:e1:49:15:1b:73:02:c9:7e:0a:3f:
91:d3:a2:10:0b:9f:c1:a5:5f:eb:2e:fd:1d:83:51:
f6:6f:63:99:0d:3f:d6:42:f2:04:b3:57:d8:97:13:
de:e5:f6:8f:92:ad:28:94:1d:29:61:05:6f:b3:6d:
9f:f4:85:5a:d7:87:63:bf:55:f7:3e:50:f7:3c:0a:
40:c9:cc:76:32:00:34:af:ac:98:69:d2:13:d4:07:
14:29:11:0b:23:08:9c:42:8b:b4:74:a8:f5:09:e4:
95:2e:5e:74:ae:21:4f:80:53:fb:2f:f3:42:29:85:
c7:b3:c1:0a:17:6d:5d:51:58:b5:08:73:e4:20:a4:
fd:35:b5:5a:2c:25:67:5b:c7:81:93:9f:b1:08:a4:
53:9b:11:56:e0:03:7d:aa:6e:ff:91:fc:fe:f0:a2:
ef:5d:23:a0:38:98:6a:43:3b:88:55:15:a0:37:4b:
2b:89:8d:f4:07:e5:07:ac:f8:70:95:c0:cc:4e:f7:
d7:82:e6:41:9f:84:60:06:b3:14:d1:46:f1:b8:03:
3a:48:b4:ba:63:55:99:65:41:3e:60:da:70:3d:70:
52:b8:67:52:7e:b9:a1:3f:69:7f:2e:5f:6e:2f:79:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:90:3A:7A:6B:FA:7C:9B:A4:07:42:45:9A:E2:B0:39:CC:7F:44
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c0:40:b6:e4:8b:c7:a1:72:80:64:f7:34:fa:aa:21:0a:f7:
55:4f:58:e5:0d:e4:8e:c9:03:f5:3a:2b:aa:e0:e1:9d:cf:e0:
91:2b:5f:4b:fd:3b:b5:4a:78:5a:9d:63:41:b2:e6:19:1b:a1:
30:ff:a3:8b:b7:10:4d:ab:2e:77:8e:b6:f1:4c:53:4d:58:df:
58:46:63:11:14:39:b4:c0:f9:a5:dd:18:6e:0b:ab:3f:14:4d:
6d:17:7b:e0:75:3a:62:cb:93:ba:4d:ed:46:8d:2b:7c:4f:46:
91:e9:dc:a2:bb:2b:58:51:8e:70:ea:45:30:a8:b0:ef:ee:be:
71:52:16:5c:51:69:5f:50:2e:e4:66:3f:29:48:22:ed:38:97:
0d:87:cb:9c:0f:ae:6d:f4:03:cf:25:27:9c:a2:82:74:b3:84:
fc:d5:a0:39:b3:ac:1b:f7:b7:23:a0:6a:7a:1e:32:e6:ab:d8:
c1:1e:41:f2:38:92:0a:f9:23:52:dc:dc:08:c0:3c:07:b3:ac:
28:f9:41:ca:3e:54:a8:32:c8:ec:a3:15:de:43:f6:60:80:97:
05:ef:e9:3f:f9:07:dc:39:37:7f:fb:46:50:e2:62:7b:92:da:
db:6b:38:47:39:12:1b:d4:fa:00:00:b2:d0:07:b0:02:63:8f:
f7:e0:10:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:31 2025 by rpki-client