Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: UhWKwvF4kQp6tb7lxuNGqXQaVmOxuJ5ETqHp/9jnPhk=
Subject key identifier: 7E:EB:1E:61:B3:1F:D4:38:45:19:B6:02:BD:2B:E6:C3:D4:DB:3B:1D
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 019610FC587FC6D2B64A3BF73CDAA8B5B22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0A35
Signing time: Mon 07 Apr 2025 16:01:35 +0000
Manifest this update: Mon 07 Apr 2025 16:01:35 +0000
Manifest next update: Tue 08 Apr 2025 16:01:35 +0000
Files and hashes: 1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=)
2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: /YnfY2MqgkvFWkpzdXpWvLGTYUcQLPAGYF7bnKUUGGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:58:7f:c6:d2:b6:4a:3b:f7:3c:da:a8:b5:b2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Apr 7 16:01:35 2025 GMT
Not After : Apr 8 16:01:35 2025 GMT
Subject: CN=7eeb1e61b31fd4384519b602bd2be6c3d4db3b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:1b:fb:8a:b7:7f:15:68:b3:ce:0b:4d:18:
b8:d0:6d:0b:4a:3a:a9:d5:49:c8:6e:fc:b2:56:63:
b0:fb:ee:41:1e:d2:41:3a:74:34:f9:20:fd:5e:05:
d3:b7:68:70:2c:7b:e5:12:d6:79:5f:54:2a:15:b6:
2e:ae:e2:43:74:ab:50:e3:51:55:5a:75:0e:ba:89:
e4:a7:ff:30:c2:ba:a7:c4:55:fa:3f:1d:d0:8d:0c:
8c:38:ee:67:85:cf:fd:8a:67:0a:c2:83:db:8f:4a:
fd:96:ab:b0:af:da:1a:f4:b7:4b:26:0f:60:7d:e9:
8f:20:78:b9:a9:ed:db:58:e3:72:1c:5c:ca:76:72:
b0:9b:da:75:cb:15:ee:33:d9:df:f7:60:31:53:49:
d7:43:34:79:4b:52:99:9a:4b:78:bc:df:55:62:c6:
02:8d:8d:a9:e2:ac:90:b6:e7:bd:0f:c8:8d:b1:af:
36:d5:34:c7:b2:5c:a7:7b:a0:70:09:f5:64:3d:55:
ce:c4:e1:f7:2b:e2:e8:91:58:9d:5a:f4:77:29:d7:
58:89:f0:cd:2c:b8:ce:14:1b:dd:70:a5:4e:c6:fa:
03:31:15:82:b9:7f:c5:8e:e9:25:0e:fb:a5:1d:7d:
ac:0b:c6:b1:5f:77:6e:ba:7b:09:e1:4c:07:aa:0e:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EB:1E:61:B3:1F:D4:38:45:19:B6:02:BD:2B:E6:C3:D4:DB:3B:1D
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:64:03:56:54:a6:ce:4c:dd:2d:ae:bc:b7:b2:af:e7:fc:b8:
e7:6c:ac:92:94:a0:80:ba:22:25:d8:76:f8:41:1a:11:f8:1f:
c8:8e:c0:80:31:68:ce:be:19:29:f7:15:4a:8f:f4:6a:67:85:
8b:de:95:4b:5f:8f:78:b9:58:a6:df:9a:3b:c4:ab:3c:c5:f7:
c7:14:43:a0:f6:44:56:1b:8e:d8:03:1b:87:75:bd:07:01:c3:
64:2e:1e:ac:9e:45:1b:7e:ae:37:3a:e3:1d:8d:9b:b0:33:00:
60:09:34:4f:2e:c6:fc:ea:47:7e:cf:dc:64:1d:4b:e9:66:d0:
0a:c9:78:de:ba:84:d9:49:91:04:28:49:c1:87:44:9f:05:e0:
c9:03:5f:27:dc:3c:9b:3b:d3:33:05:c9:4c:84:98:70:f6:f4:
ad:aa:23:55:f7:db:41:bb:a8:62:8d:dd:6c:ee:31:d0:53:06:
c0:b0:dc:ac:87:23:3f:48:ce:a1:70:e0:55:da:c3:5d:a7:f4:
7c:e3:e6:84:c5:84:15:f7:a5:12:4e:04:45:de:8c:f2:74:36:
80:d6:c5:3f:0f:9f:9f:a9:e4:72:1b:0a:20:97:a7:ff:0b:5d:
4b:4b:01:e9:cc:71:c5:9b:59:c4:36:16:da:f6:97:f8:64:a5:
f1:d7:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:10 2025 by rpki-client