Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier: eOIVNMpfUGK7+zACA0Z6Wau1Rm3wcc7LpwhfoK32Hgg=
Subject key identifier: 58:9A:1D:1A:09:47:86:41:2B:50:2C:8A:D7:C8:C0:5F:18:30:E1:20
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 01961245B426CECA35B3652457E44D486BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number: 0FBB
Signing time: Mon 07 Apr 2025 22:01:19 +0000
Manifest this update: Mon 07 Apr 2025 22:01:19 +0000
Manifest next update: Tue 08 Apr 2025 22:01:19 +0000
Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: RXYIi6fqdIHGKxZE9fgQSWf7MR6/Qa6t6V2N28f/q18=)
2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:b4:26:ce:ca:35:b3:65:24:57:e4:4d:48:6b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: Apr 7 22:01:19 2025 GMT
Not After : Apr 8 22:01:19 2025 GMT
Subject: CN=589a1d1a094786412b502c8ad7c8c05f1830e120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:c3:bc:08:e0:4d:9a:bb:30:86:68:65:39:
e1:dd:64:eb:05:b7:b5:02:ba:5d:71:e0:c9:50:bd:
56:34:f6:12:48:b2:13:a3:0b:ff:9d:7b:90:3d:ca:
32:bc:bc:7f:5a:d6:9b:7f:2c:c2:e1:3d:01:4b:42:
f1:f0:07:7c:12:ad:18:4c:a1:6b:e0:30:c5:ad:9e:
0c:a8:85:4d:a1:0c:55:ac:6b:6a:e0:1b:d5:66:8f:
07:98:df:97:26:9d:80:bf:86:d0:1e:0a:87:ea:c2:
85:f6:49:6a:44:e3:45:d9:5d:42:bf:66:29:66:60:
2d:1d:a9:bf:5d:8c:6b:7e:8b:b5:f1:5f:ed:4c:f8:
5f:9d:6c:19:9d:0a:84:d3:32:12:63:4d:81:81:69:
02:cd:46:5e:d0:79:8d:fe:cf:f5:bd:6f:ac:aa:97:
f8:f6:2d:4b:20:d6:a9:39:f4:18:1b:7f:77:eb:e1:
c3:cd:ff:f2:6c:3c:6a:bd:14:55:e4:3a:1d:fe:09:
39:5b:97:11:02:e3:29:a9:0a:ce:a7:bc:3d:31:3d:
d7:ce:8e:2e:9f:4f:c1:84:63:47:20:d8:06:2d:40:
12:92:d2:3d:de:f5:f9:48:5f:67:1f:a9:ed:7e:d5:
2e:a4:d8:17:44:0d:5f:24:89:b4:06:00:48:61:91:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9A:1D:1A:09:47:86:41:2B:50:2C:8A:D7:C8:C0:5F:18:30:E1:20
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c8:46:7d:9b:a9:02:cf:4e:86:75:45:d1:89:72:89:86:86:
c0:87:04:85:13:53:e2:bd:84:55:ec:94:3b:d3:d3:7e:3a:5f:
07:37:f1:f7:57:e0:ef:b0:3a:6d:79:17:73:dd:e4:2a:35:2a:
6d:4c:5e:23:0f:14:1b:c0:74:dc:94:37:32:7a:e8:70:64:87:
98:80:4e:d0:62:21:45:84:02:80:ec:7f:71:d0:20:17:3b:ba:
dc:de:62:19:3a:64:8c:c1:78:85:6b:5d:e9:8a:df:8a:4d:e0:
8a:bd:6a:f6:cc:19:f4:9d:11:fe:45:75:d4:90:44:6e:22:be:
83:f7:f0:f6:38:13:0e:ca:f6:ee:ed:9e:fb:bc:b8:8e:92:b6:
df:fa:d7:98:42:eb:3f:67:e4:44:5b:84:aa:a2:d6:c7:2e:13:
56:f7:87:86:31:be:07:21:68:e7:49:1b:16:5e:bb:c1:96:94:
df:52:f6:55:6d:25:5b:f1:27:d7:0b:79:a0:83:45:9d:87:57:
b4:df:62:d7:49:74:c2:36:3e:53:00:7b:51:ab:e6:76:42:06:
c1:80:b9:90:5d:6d:b5:ad:45:47:ec:54:00:94:a6:91:fd:ca:
8a:a0:00:b0:05:bc:8b:5d:af:f3:0e:ca:57:d0:10:6d:34:94:
7d:b3:2f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:10:03 2025 by rpki-client