Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
File: MbXwrK42UqU8caB0ojR6tvF_0_g.mft (raw, json)
Hash identifier: RdE0sW861CiyMz/zXjXmWJc4rHqozjfZHA3Lfl1UZ7s=
Subject key identifier: B6:24:FE:1B:41:61:7C:83:7C:50:B6:D4:FE:1D:5E:37:89:8D:9C:A5
Authority key identifier: 31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
Certificate issuer: /CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Certificate serial: 01958B4E16F6A00E6F37F0ED52F645488220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
Manifest number: 1421
Signing time: Wed 12 Mar 2025 17:01:45 +0000
Manifest this update: Wed 12 Mar 2025 17:01:45 +0000
Manifest next update: Thu 13 Mar 2025 17:01:45 +0000
Files and hashes: 1: KlCag1k38E35giK2RwCL86wfRww.roa (hash: 3A8pcHf0/9mVDJ/I9xf+96E0LjYi6EEs2LRUfPZpiNc=)
2: MbXwrK42UqU8caB0ojR6tvF_0_g.crl (hash: ruSOFRPgRdx4KZte7DyFP0MY+waei3albkhEehgOI9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4e:16:f6:a0:0e:6f:37:f0:ed:52:f6:45:48:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Validity
Not Before: Mar 12 17:01:45 2025 GMT
Not After : Mar 13 17:01:45 2025 GMT
Subject: CN=b624fe1b41617c837c50b6d4fe1d5e37898d9ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:a2:18:a1:e5:1f:43:0d:fb:8f:24:6b:b3:
c1:8a:f7:0b:f7:f8:76:eb:07:5f:1a:bb:2d:2e:55:
63:da:c2:45:20:57:eb:b7:f8:42:f8:fd:45:e6:f8:
a6:c8:2f:82:0a:dd:87:17:24:97:01:4e:2c:6a:56:
a0:7c:9d:59:2c:46:86:71:4f:b6:91:c1:35:f2:f9:
7f:23:9c:9f:10:57:84:db:0b:d3:a8:38:6d:57:a7:
4f:6d:81:11:46:55:6c:c9:d2:d7:15:96:15:1a:14:
cb:12:e7:a0:04:5e:43:77:22:ac:76:02:d4:cd:6b:
5b:ea:57:ef:de:fe:29:c3:03:fe:f9:14:1a:a6:17:
c6:1a:9a:5d:4b:79:18:cd:2d:b9:ec:1b:74:25:ea:
14:08:31:73:91:00:b3:13:4e:e7:45:0b:b1:91:a0:
52:df:2b:fd:ba:cf:80:fc:56:63:c9:f5:10:8a:15:
62:be:85:d9:a7:ac:0e:3e:77:5f:53:5a:70:39:10:
db:23:47:37:d9:9f:ad:c3:27:a7:89:c2:f5:26:7c:
ed:02:1b:d2:0f:4a:e4:59:dc:b3:dd:aa:87:bc:78:
2f:e2:32:81:66:e2:19:85:1e:03:79:1b:2c:a9:34:
bc:fd:4c:e9:b9:50:33:af:6b:e7:57:91:d7:c4:8f:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:FE:1B:41:61:7C:83:7C:50:B6:D4:FE:1D:5E:37:89:8D:9C:A5
X509v3 Authority Key Identifier:
keyid:31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ba:29:89:07:f9:1b:97:6b:0e:66:ce:8f:42:eb:d2:41:f7:
bf:bf:99:c9:b7:6e:89:4a:d6:2a:ea:63:51:3c:6a:93:87:fe:
69:ba:1a:a6:59:95:16:88:3e:ee:82:3c:19:8f:31:cb:30:10:
cb:60:04:75:66:3f:85:60:ee:a0:76:79:91:ce:7d:8a:ec:ae:
bc:1f:19:00:0d:a8:84:47:63:04:0d:12:ad:d6:d5:25:87:18:
40:39:3c:6d:aa:68:75:50:33:ac:d5:b4:ea:f6:b7:17:52:d0:
7b:35:27:f8:43:17:56:32:7a:5a:aa:cd:2e:b7:db:34:69:02:
fd:fc:d8:0d:aa:0a:9e:89:99:6d:92:bb:e6:0d:21:76:94:27:
87:79:b8:00:b5:d5:ff:cf:28:da:85:cb:1f:17:02:9e:a5:f1:
ed:97:e3:58:41:93:09:1e:79:f4:e3:7c:c0:ad:b9:bb:2f:c1:
b6:ee:32:e4:7c:bb:7e:15:c0:fa:9f:f9:4c:b6:71:e4:10:6e:
42:94:e2:25:48:0c:41:0d:5e:60:2c:51:dc:70:60:51:e6:87:
7f:8a:14:da:82:37:1b:95:e2:33:af:aa:2d:9a:99:a0:ee:93:
51:2d:e5:55:92:55:12:63:20:24:a3:f2:b3:7e:22:32:59:93:
84:d8:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:45 2025 by rpki-client