Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: m+zXtp541kklb6aHIUYm7+FUi9j/ra8SjP8+aBiftS0=
Subject key identifier: 60:5E:CB:36:B4:D9:4E:E7:3C:67:4A:8B:5A:C6:65:58:39:DB:4D:F9
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 01961621C3C2AAC148CEEC334F33A09EAD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 0C5F
Signing time: Tue 08 Apr 2025 16:00:33 +0000
Manifest this update: Tue 08 Apr 2025 16:00:33 +0000
Manifest next update: Wed 09 Apr 2025 16:00:33 +0000
Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=)
2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: qFc/gizCpDzHe9bQ0a4I/kVn2DnKgJ+NSUsjxChXiqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:21:c3:c2:aa:c1:48:ce:ec:33:4f:33:a0:9e:ad:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Apr 8 16:00:33 2025 GMT
Not After : Apr 9 16:00:33 2025 GMT
Subject: CN=605ecb36b4d94ee73c674a8b5ac6655839db4df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:48:55:6a:ed:76:6e:81:76:9b:d3:37:19:
5d:d6:3b:47:59:8c:6c:95:97:1a:f7:0b:b8:5d:2c:
e2:bf:36:28:52:9a:9b:8a:8b:b5:29:e8:28:19:bf:
7a:a5:77:6f:5d:69:ee:64:41:a0:a0:71:50:7f:61:
f7:27:46:39:2d:a4:5a:32:ab:93:86:48:39:4f:af:
b9:f7:01:54:5b:34:b6:66:69:54:db:19:1c:4d:bd:
1c:13:20:0f:f1:16:03:70:06:ca:5f:03:4b:14:26:
c7:3c:ed:1c:58:8e:fb:4e:9d:df:f8:f1:28:10:da:
27:fe:08:60:b8:60:c3:ee:77:42:26:96:a5:cf:cd:
06:c2:66:a9:ed:76:0b:a9:7f:35:79:1d:ec:c7:96:
8e:65:45:67:f8:23:b0:a2:a6:bd:dc:b2:80:15:0e:
a0:3e:de:74:4c:5a:5a:25:cc:79:60:97:b7:60:a6:
1a:c9:a4:6b:f2:fc:f0:db:de:ac:85:a7:db:9d:a8:
74:25:20:fb:ba:be:36:e7:6a:2a:c3:fb:c9:4f:0f:
bd:19:2b:3b:21:dc:3f:ce:6f:d4:19:9b:21:6a:ee:
1c:cc:b0:93:af:a3:aa:ce:43:a7:8b:79:90:57:23:
42:40:96:94:2d:34:e8:d1:c8:eb:fb:8f:22:bf:8c:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:CB:36:B4:D9:4E:E7:3C:67:4A:8B:5A:C6:65:58:39:DB:4D:F9
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:80:2e:57:58:bf:9c:bd:28:1a:6e:8c:ac:af:92:60:47:56:
b2:59:e8:be:46:0d:3a:55:d3:1c:f4:02:09:44:70:59:06:e8:
08:95:27:84:a2:75:7a:5b:bf:97:ee:2d:4e:25:9d:dd:25:52:
44:58:91:18:d9:ac:8d:3b:5c:50:c4:c3:9f:dc:87:ce:02:11:
e8:c0:cb:08:63:02:3e:71:b8:d1:c2:9f:92:6b:db:41:a3:a4:
6c:01:7e:87:fb:47:a3:01:73:05:a4:41:b0:4d:73:23:b4:53:
8a:33:be:b3:d9:67:dd:5c:cc:8e:09:e3:96:c7:ce:71:ed:1c:
69:65:df:53:b5:02:67:14:71:45:dc:92:c9:4a:69:53:08:90:
ca:3f:43:fe:1c:19:8f:b7:b6:6e:28:d9:24:c7:a7:bb:78:53:
67:96:ac:66:99:03:98:82:1b:9d:6b:5c:20:27:b8:bf:54:24:
88:9a:dd:9d:80:40:e8:54:78:ed:b0:ee:cc:0b:18:d4:74:b5:
26:f1:92:3d:d3:e9:c5:57:59:1e:47:bc:72:9a:35:92:84:22:
3f:63:0b:f7:43:44:d3:85:96:f0:58:d4:f8:39:d5:e5:29:4d:
cb:53:61:02:ee:fd:2c:24:2c:be:86:90:d7:8c:81:c1:c4:8d:
ce:36:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:23 2025 by rpki-client