Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
File: MbXwrK42UqU8caB0ojR6tvF_0_g.mft (raw, json)
Hash identifier: P4N4Iy1+8qLw1g/W/jTJXr/QH3M79BEVwk+Fo/EHlRU=
Subject key identifier: 4B:03:E6:D7:14:3E:18:7E:46:19:CB:6A:81:F7:DE:18:09:15:E1:C3
Authority key identifier: 31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
Certificate issuer: /CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Certificate serial: 01965236C606206D7EAAECB3EB6CDE0B4E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
Manifest number: 1488
Signing time: Sun 20 Apr 2025 08:00:43 +0000
Manifest this update: Sun 20 Apr 2025 08:00:43 +0000
Manifest next update: Mon 21 Apr 2025 08:00:43 +0000
Files and hashes: 1: KlCag1k38E35giK2RwCL86wfRww.roa (hash: 3A8pcHf0/9mVDJ/I9xf+96E0LjYi6EEs2LRUfPZpiNc=)
2: MbXwrK42UqU8caB0ojR6tvF_0_g.crl (hash: wTsw5VflOW0rNzwVEjQQhoHO6Zpii5vKiBVjd95LxVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:c6:06:20:6d:7e:aa:ec:b3:eb:6c:de:0b:4e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Validity
Not Before: Apr 20 08:00:43 2025 GMT
Not After : Apr 21 08:00:43 2025 GMT
Subject: CN=4b03e6d7143e187e4619cb6a81f7de180915e1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:3f:df:48:44:2f:fe:fe:e9:d6:dc:ac:bb:
ed:a1:83:25:37:46:e7:1e:0d:f5:2f:52:6d:c4:b4:
37:4f:64:e3:8d:5d:1d:77:d2:cc:1c:70:97:00:37:
72:79:b3:64:2c:5a:24:28:63:64:92:51:31:c4:59:
35:11:45:5e:a4:c7:c0:25:f9:08:34:67:b1:d1:f4:
40:4d:d5:77:cc:1a:b4:6e:12:33:22:86:87:a6:16:
b4:31:6d:89:3b:33:55:6f:b2:dc:f5:b6:da:3d:0e:
fa:1a:57:ba:18:e5:d3:7d:94:74:53:4a:0d:e3:e7:
a1:46:02:0a:4f:65:72:9c:7d:a3:c7:aa:0f:4a:74:
e4:cf:bc:b5:e5:af:d1:05:a1:2c:2e:cf:2c:a0:35:
23:94:43:94:03:b9:7e:a5:cd:9e:c9:2b:45:a4:17:
48:fb:d1:20:88:4d:40:fb:67:33:b1:93:b5:a3:f2:
aa:10:21:4d:a1:7e:80:b1:78:55:a7:8c:e1:44:05:
13:d3:f9:39:39:a6:47:44:b8:e1:f0:af:61:85:3d:
b0:7a:75:e8:a5:74:74:85:af:ac:0d:d0:2d:dc:e9:
2b:b3:e8:06:b5:61:b0:fc:18:ff:8f:b0:55:63:cc:
bd:f8:61:4a:dd:d9:29:59:81:9e:77:64:9f:68:7e:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:03:E6:D7:14:3E:18:7E:46:19:CB:6A:81:F7:DE:18:09:15:E1:C3
X509v3 Authority Key Identifier:
keyid:31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:78:c9:12:74:1d:c7:75:35:48:1a:93:c6:35:fc:e0:23:
d3:66:d8:50:7f:f7:3c:1d:99:61:64:48:44:87:89:81:e9:ba:
c0:65:73:48:1d:cb:ac:43:7a:2f:40:0b:67:1f:3e:39:bf:89:
f2:77:89:e5:3e:8a:04:11:06:b2:ca:53:88:3d:ce:84:d6:96:
e3:8a:ae:e1:79:5f:7e:81:2f:38:8c:50:93:98:8e:97:24:e7:
95:f3:57:23:12:95:9a:c4:2c:21:1d:b4:da:49:0e:c9:69:d0:
3b:a2:fc:21:72:4c:03:ec:36:cc:f5:85:a7:10:fe:d8:1c:3a:
51:c8:21:15:a9:53:c4:89:83:c5:89:cb:f2:e5:f3:84:0b:17:
b4:c7:bd:cc:60:db:fc:5f:03:51:8f:ec:b7:5a:b2:2f:fc:05:
f1:1e:bb:90:81:6d:a8:a2:b2:e3:e2:41:b6:39:e3:cc:64:18:
ca:2b:5c:37:4d:d7:66:4a:3c:1f:25:89:cf:40:65:71:ec:ab:
0b:64:9e:06:4e:e4:58:e1:e9:9b:81:f4:fa:b9:ec:96:8b:0a:
5f:1e:86:ac:61:9d:17:18:8b:14:71:4d:9a:68:28:42:5e:b4:
57:0f:73:38:ca:df:d4:be:29:6b:d9:37:8e:65:34:9d:51:b7:
fb:4d:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:35:23 2025 by rpki-client