Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
File: MGm6frw7Zy3QnsA0Th-AqhEx79A.mft (raw, json)
Hash identifier: TghqKivOxyKARhOMesgW6BJ9tkmjJ0s1lWV+4F2Osdw=
Subject key identifier: 06:DB:A6:07:4A:02:2C:70:93:CB:25:59:99:56:26:50:53:48:A5:BB
Authority key identifier: 30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
Certificate issuer: /CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Certificate serial: 01958BF276775DD35B57E61D9BFA473F5918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 20:01:17 +0000
Manifest this update: Wed 12 Mar 2025 20:01:17 +0000
Manifest next update: Thu 13 Mar 2025 20:01:17 +0000
Files and hashes: 1: MGm6frw7Zy3QnsA0Th-AqhEx79A.crl (hash: bjZvnAeG6ZSCuC6hYaSQXMpekkY11BxCY3svZXlchfY=)
2: eqJAEOy6NaY4mZwa5RQJfzteBn0.roa (hash: 4ycDfdQF4RJy7Cm3II/1bQM7j6qQFueYRHKWr/2hsvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:76:77:5d:d3:5b:57:e6:1d:9b:fa:47:3f:59:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069ba7ebc3b672dd09ec0344e1f80aa1131efd0
Validity
Not Before: Mar 12 20:01:17 2025 GMT
Not After : Mar 13 20:01:17 2025 GMT
Subject: CN=06dba6074a022c7093cb2559995626505348a5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:d0:db:6f:96:ec:af:03:44:a3:c1:0a:d7:
66:ed:5f:54:39:3c:b3:f1:f4:db:91:7b:3f:22:40:
5e:31:d2:e7:0a:c2:bd:8a:ec:a3:4c:b3:af:08:ce:
35:af:9b:3d:55:70:43:2c:25:fc:df:ee:42:f0:56:
a0:25:28:fb:02:1c:c4:a5:d7:f2:1c:30:b8:8d:ae:
86:fb:ac:3a:26:16:97:35:43:7d:8c:0d:dd:9d:b5:
b5:be:83:aa:36:8e:37:4c:18:82:1d:6d:72:c4:61:
3a:1f:4b:b2:7c:e7:59:de:27:f0:5a:37:c0:7e:03:
90:12:d1:4d:7c:d4:d7:17:40:8a:bf:2c:77:63:fe:
20:94:76:49:e7:25:cd:1a:10:1c:b8:8d:6f:90:a9:
97:1d:3c:72:bb:9d:97:fe:19:c3:a8:1a:9c:68:68:
19:cc:8e:6f:8a:5f:21:9d:9d:46:7c:7e:cf:c3:f0:
7b:d9:52:d4:0a:58:b7:c3:ff:ac:44:73:97:46:3d:
5b:20:84:23:4f:50:38:3d:42:12:71:1e:1a:7e:34:
47:c9:a1:29:90:fd:83:0d:aa:8c:c7:59:e9:75:18:
66:38:dd:b0:b3:fb:bf:0c:ce:4b:1f:7c:8b:28:66:
c9:39:ea:48:4f:5c:0a:1f:d8:c6:8a:47:80:e1:6e:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:A6:07:4A:02:2C:70:93:CB:25:59:99:56:26:50:53:48:A5:BB
X509v3 Authority Key Identifier:
keyid:30:69:BA:7E:BC:3B:67:2D:D0:9E:C0:34:4E:1F:80:AA:11:31:EF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGm6frw7Zy3QnsA0Th-AqhEx79A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4cba2f-4a5b-4435-8aec-923cb50abe2e/1/MGm6frw7Zy3QnsA0Th-AqhEx79A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:35:d6:0c:9f:d9:50:59:55:04:79:3e:33:68:1e:0c:c9:05:
9b:d8:88:3d:ae:b0:7c:ee:96:42:1c:aa:5d:68:0f:65:12:0f:
a2:69:2a:44:56:28:63:1e:ae:df:aa:34:f6:c2:8b:23:00:66:
7e:2d:d9:ab:d3:00:b8:44:3b:ec:4c:00:2a:1c:7b:c6:7f:c5:
bf:e9:b1:da:56:1d:58:73:7e:8f:e4:c3:1b:1f:74:58:40:63:
58:74:dd:c8:48:67:4e:91:56:3a:74:1e:be:40:b3:f4:da:57:
57:ed:17:3c:f7:58:f7:45:61:04:46:85:53:47:10:4f:2b:65:
44:76:8a:e1:78:c9:38:75:bb:39:cd:89:3c:c4:2e:0b:6f:2d:
98:45:04:d4:18:07:76:d6:7e:dc:b2:e0:17:1b:b7:98:32:e6:
5d:43:be:ba:9b:50:a7:6e:35:81:30:05:cf:29:38:20:93:6e:
bf:65:92:7a:6f:96:cf:4e:0e:b1:52:e7:0f:ab:50:b7:64:0c:
a4:fd:32:49:ab:e2:8d:79:b7:4b:f9:24:ff:cc:3a:19:94:90:
9a:d0:87:96:0f:d6:e8:1d:9d:80:e9:c7:e2:bf:f0:03:3d:63:
73:ef:85:11:8d:b2:98:cc:a8:64:11:a2:11:82:6d:30:e4:77:
0b:3f:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:59 2025 by rpki-client