Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: tjmuPEjt+N+sO9lZKiY4PCt5xv9ATsEpITcC14+a27I=
Subject key identifier: 30:FB:D8:EE:EC:72:4D:5B:F0:17:D9:34:B8:00:06:99:54:4B:0A:40
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 01964AB41155D20B0181230A4261927C84C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 0368
Signing time: Fri 18 Apr 2025 21:00:36 +0000
Manifest this update: Fri 18 Apr 2025 21:00:36 +0000
Manifest next update: Sat 19 Apr 2025 21:00:36 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: +eY+yWReOeH9dceZAs2Dgne00Ib1ETSYyhQkKryk3WE=)
2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:11:55:d2:0b:01:81:23:0a:42:61:92:7c:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Apr 18 21:00:36 2025 GMT
Not After : Apr 19 21:00:36 2025 GMT
Subject: CN=30fbd8eeec724d5bf017d934b8000699544b0a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:9f:da:98:d6:f4:89:30:1a:ba:10:81:f9:
f9:71:8a:2f:bd:6f:58:09:7b:8d:80:6a:0b:25:0a:
35:45:be:fe:a0:c8:96:e3:67:b4:3f:dd:c6:17:7b:
95:9b:30:23:e9:8e:c9:8b:bd:10:d7:56:33:f0:9b:
ea:f6:2f:7b:67:81:5d:95:87:35:76:23:ab:41:1a:
99:29:4a:d7:88:7b:52:58:07:19:a9:e7:d5:05:1f:
ab:ac:d2:df:04:e7:27:22:17:c6:8f:a8:d0:dd:60:
54:8b:30:80:c1:87:9a:21:a7:da:6c:c8:7b:b5:39:
ae:97:c2:9a:25:e9:22:80:0d:a5:e7:92:e9:b6:1a:
32:80:2c:e2:39:57:dc:11:d7:cb:db:05:93:3f:22:
e9:f0:00:15:0c:ab:35:70:69:7e:d6:bc:b1:66:42:
e6:8b:7e:e8:68:e9:66:d7:d8:bc:de:58:b5:1b:64:
c3:1c:8d:e6:18:e1:d3:0e:7b:9e:cc:7f:4c:f8:83:
03:6d:bc:f0:1c:dd:c6:cd:57:8a:9d:e8:ae:df:02:
8a:52:e5:91:49:62:42:e7:14:d3:a9:11:dd:a0:c7:
80:67:01:a7:38:56:cc:57:43:c7:70:28:67:89:a4:
bc:40:1d:06:61:a7:c0:45:c1:12:ba:1a:43:b1:84:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FB:D8:EE:EC:72:4D:5B:F0:17:D9:34:B8:00:06:99:54:4B:0A:40
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:92:49:3c:a0:31:73:0a:6c:33:ea:92:84:43:df:51:57:0e:
98:21:fa:c5:52:86:8f:9d:16:f7:d1:e5:07:b6:38:9f:62:8f:
18:83:17:4c:d0:a5:ee:d2:78:6f:67:6b:bc:8b:ec:36:0b:c7:
08:22:49:b7:ce:2e:84:11:8c:b1:4e:5e:05:4c:4f:fc:b6:3e:
4e:40:bd:2c:0b:4a:09:11:8f:30:af:d8:18:1c:8e:73:42:08:
84:3f:5f:db:97:f8:7c:36:b2:b4:83:a4:ee:c1:3f:1b:c6:ac:
91:0c:29:7b:9a:24:fb:7b:22:ad:60:41:4e:08:32:c5:b9:c2:
f9:57:1a:e4:76:59:8c:e4:1c:52:97:c5:65:b4:d3:e3:85:30:
47:67:28:d0:5a:18:42:e5:2e:0d:36:b6:d7:0e:ef:74:6b:df:
03:09:5a:5d:1a:5a:cd:a7:a8:25:ba:d9:eb:80:aa:69:a3:86:
1e:62:02:06:73:2f:d7:bd:2a:5e:50:cf:26:ef:5f:7f:fc:c2:
23:29:18:4c:6b:30:09:0e:0d:b2:e9:d2:2b:ed:7a:1f:e3:bb:
f5:36:06:0b:5b:5d:99:de:96:07:87:a0:d5:e4:a9:95:3a:2e:
e6:99:2e:d7:6d:32:c5:03:7c:db:e9:09:cc:bd:a7:ed:8b:ee:
5b:fd:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:49:11 2025 by rpki-client