Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json)
Hash identifier: +tjLaizYp518PWbbr4kIdW5nNPLO2PwPBVLowk98Prg=
Subject key identifier: B3:2F:4A:FC:37:87:6B:CF:48:B7:42:9E:93:08:80:48:62:AD:1D:4F
Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Certificate serial: 0196406799CCB1DDE768582A1EB51FF36402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
Manifest number: 14F8
Signing time: Wed 16 Apr 2025 21:00:53 +0000
Manifest this update: Wed 16 Apr 2025 21:00:53 +0000
Manifest next update: Thu 17 Apr 2025 21:00:53 +0000
Files and hashes: 1: Fb0UwpxCy0DRKLuSbZAzVNuZQGI.roa (hash: FQG+r4pQE3E1WCi2kVbQ4HOY+Sj6V8FJrKG1h8vbtwQ=)
2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: WS0Yr1U3rCjlCH+V5tb8WOtNCXXpwehs+2ZndY3qdx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:99:cc:b1:dd:e7:68:58:2a:1e:b5:1f:f3:64:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Validity
Not Before: Apr 16 21:00:53 2025 GMT
Not After : Apr 17 21:00:53 2025 GMT
Subject: CN=b32f4afc37876bcf48b7429e9308804862ad1d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:65:d3:79:1f:92:8f:55:ea:32:f2:ca:73:30:
93:01:d4:ee:a7:12:27:8d:84:ce:70:74:b4:65:28:
da:17:ca:48:94:68:e6:80:d9:64:a7:cf:21:ba:aa:
5c:5b:84:1c:8f:ab:a2:a9:5b:f5:43:5e:0e:b9:7a:
8b:8b:79:c2:4e:47:68:d3:01:b4:40:85:38:a5:9c:
5c:de:44:4d:53:2f:e4:4f:5f:40:c9:e4:13:e8:50:
82:2c:fa:1f:a8:25:6b:b8:31:1a:fa:aa:69:b8:c0:
68:3b:98:88:15:bb:1f:29:58:15:40:ac:f8:65:11:
ea:a1:18:b3:6f:63:2d:7a:43:99:90:50:86:c2:de:
37:92:c8:6f:aa:fb:a6:80:da:03:3a:09:ca:7e:7a:
6d:f0:c0:f3:0e:03:20:59:b2:d0:11:e2:3f:04:37:
66:3f:c8:e3:6f:f0:ba:67:09:81:0c:26:b6:0c:f4:
00:f2:e8:98:eb:38:8f:2d:7c:ba:f7:d3:45:77:f4:
73:f1:f1:16:8d:6d:c1:c5:57:c5:e2:f4:9a:8c:f2:
d6:fe:ea:bd:2e:08:67:3f:b5:71:e6:ed:11:6c:cb:
93:01:05:73:dc:da:5d:3b:24:b7:24:0a:5e:65:b7:
a3:4a:da:25:d1:21:b4:a2:f7:46:65:3f:5a:5b:6c:
34:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2F:4A:FC:37:87:6B:CF:48:B7:42:9E:93:08:80:48:62:AD:1D:4F
X509v3 Authority Key Identifier:
keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c2:c0:06:2b:28:61:6b:8b:da:7e:5b:a1:4a:96:4b:5d:60:
b4:4a:3d:0a:cd:2c:99:df:20:07:84:64:8a:ed:a7:02:b5:b0:
10:24:2f:bc:18:69:34:ed:f4:59:0d:51:e9:8c:92:3e:be:96:
20:c4:a7:2f:12:c1:c3:62:d1:6e:3f:35:3b:d6:ee:5a:dd:ad:
12:43:d4:10:fa:b2:60:3d:bf:73:3f:0d:30:d1:70:0d:e3:38:
5e:89:87:5d:17:46:18:ae:b3:87:f1:38:c4:8f:80:18:5d:e5:
35:fd:5a:d4:6b:ab:ae:78:96:20:cf:32:f2:59:9f:86:bf:26:
2e:e4:23:0d:e2:c5:51:33:03:2f:79:29:c7:2b:a1:cc:5a:26:
99:7f:74:c3:4e:53:fe:30:3b:46:9b:73:5f:d1:6a:c7:b5:31:
3a:c5:53:83:70:d8:a8:19:94:e9:15:18:bb:73:0f:64:61:ec:
19:cd:5f:ae:7b:fe:ce:97:b2:0e:1e:8c:4f:a6:f5:7c:10:cc:
a8:99:b7:ca:09:9f:0c:54:5d:fa:36:71:f8:f7:68:3d:eb:6b:
a4:e7:0b:e7:dc:fa:84:8e:8c:a9:69:7a:31:1f:89:7f:e8:9e:
ed:e9:fc:ff:ac:e5:6d:62:a6:09:2d:a1:4f:db:28:1c:2c:8d:
27:da:d3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:31:51 2025 by rpki-client