Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: SMxawTWW/ZS0NrdZBNMblBfusm3GwXjK6b25ft0RJa8=
Subject key identifier: 0D:B5:4F:F9:2B:73:BC:AC:69:E4:FF:99:8C:FF:B5:14:1F:0A:37:DC
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 01964C6B7F09A28104F822FEBD020F96C39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0B28
Signing time: Sat 19 Apr 2025 05:00:35 +0000
Manifest this update: Sat 19 Apr 2025 05:00:35 +0000
Manifest next update: Sun 20 Apr 2025 05:00:35 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: XRyxlzdGOlDToZ5JsDYIJslU22Y0FgQzpeIJmaXZqBo=)
2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:7f:09:a2:81:04:f8:22:fe:bd:02:0f:96:c3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Apr 19 05:00:35 2025 GMT
Not After : Apr 20 05:00:35 2025 GMT
Subject: CN=0db54ff92b73bcac69e4ff998cffb5141f0a37dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:e3:3a:7c:9b:1f:c0:e7:eb:9e:9b:37:2c:
01:5f:49:8a:49:e4:37:32:95:46:fb:aa:9d:8a:22:
a5:8f:7a:83:4b:9c:d5:9d:8b:1d:19:06:1a:c8:e5:
c3:32:f9:1b:c3:1a:2d:52:9b:0d:16:4b:6c:2f:1b:
b8:1c:5b:97:c5:8e:2b:88:0d:45:27:de:07:1a:de:
c0:fa:4d:aa:c3:34:c7:aa:0b:26:0a:77:49:e5:5d:
33:14:f1:bf:85:f6:a4:2c:3c:5e:03:fb:34:8a:b2:
1e:3c:72:a1:16:f6:b7:9f:69:10:e4:cf:a0:16:2c:
cf:44:5c:d6:b1:b8:64:45:f2:f2:76:b6:e8:bd:28:
6f:19:d3:b8:81:bf:2f:5e:3a:69:dc:00:36:7d:a4:
48:2f:2d:c4:4f:88:13:c1:1f:2f:2a:09:0a:43:37:
cb:fe:d3:c2:7d:d1:b6:6b:75:c2:b5:13:5d:f8:c3:
f5:8d:5d:f5:e3:66:75:4e:ba:ef:41:6f:39:15:00:
9a:5f:ef:3c:e9:00:37:63:fb:87:41:21:a8:a4:8d:
85:b7:80:13:82:9a:4c:75:1c:0a:e2:8b:70:ab:a6:
cc:73:6a:e4:9a:5b:b7:c9:0e:c4:3b:4a:4d:10:f5:
66:08:d0:f7:46:59:1e:c6:08:a0:91:da:47:ba:d3:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B5:4F:F9:2B:73:BC:AC:69:E4:FF:99:8C:FF:B5:14:1F:0A:37:DC
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f9:80:79:91:ca:d8:f3:77:e1:74:af:d5:90:81:82:5d:73:
0f:d2:20:67:e4:b0:f6:41:c4:3d:d2:08:b6:38:07:82:05:6b:
46:e1:0e:c6:a5:31:68:f6:79:82:d7:fc:ae:40:7a:73:7a:7f:
6e:69:c1:7f:5f:7f:3f:57:03:18:70:1e:07:cd:29:28:b0:e8:
52:bb:66:0d:56:54:7d:2a:7f:0a:30:2c:4e:e7:aa:62:2a:ab:
52:3e:b4:01:47:79:85:0b:95:f7:7d:e6:20:b0:8f:02:fd:fa:
33:6e:f3:5c:2d:2b:27:23:c0:c4:8d:76:f4:a8:b1:dd:77:a7:
60:ef:bc:24:7c:5f:83:0d:a1:e3:b6:1b:4a:77:85:7a:9c:6c:
42:11:a8:14:ed:ab:df:e8:e6:98:dc:a6:7c:4f:ee:46:e8:7e:
73:d2:05:3b:9c:1a:05:fb:7a:bd:0c:22:01:d1:15:33:23:fe:
c6:5b:4b:34:d6:1c:d4:ad:bd:0c:5f:10:f9:3e:3f:a7:1b:39:
e8:68:f8:8c:9c:f7:9c:ba:51:78:80:e7:af:b8:77:2a:61:3f:
e3:64:a6:4a:70:d0:09:c4:a5:c2:7c:6e:cc:1c:34:a3:4c:d2:
9e:bf:ee:bf:6f:55:64:26:7f:4d:72:ff:bb:c8:cb:42:be:9f:
bc:e9:62:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:16:58 2025 by rpki-client