Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: MlHupjoMY7pPHvpmWQKerbYRLEosy9HYhivNHuctEGE=
Subject key identifier: AE:79:F3:34:53:61:C7:FD:6F:3F:C1:36:41:5B:F4:9F:18:F1:10:6A
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 0196496AA4A37F0BA3840CDF2EE8F5641E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 15:00:47 +0000
Manifest this update: Fri 18 Apr 2025 15:00:47 +0000
Manifest next update: Sat 19 Apr 2025 15:00:47 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: 5stYKIl+JfU3U63fh0De0s4oQYRwyRrMkDtLvI4dkmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:a4:a3:7f:0b:a3:84:0c:df:2e:e8:f5:64:1e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Apr 18 15:00:47 2025 GMT
Not After : Apr 19 15:00:47 2025 GMT
Subject: CN=ae79f3345361c7fd6f3fc136415bf49f18f1106a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:f3:4b:5e:00:fe:8c:31:67:41:cd:2e:af:
b6:4f:c2:7c:6c:c0:50:aa:8e:b4:a0:a3:1f:e8:a2:
e8:7c:1b:f3:bd:a0:b8:7f:f6:8f:3a:e7:f0:8a:e6:
e6:64:00:35:52:3e:83:d7:fa:45:22:69:44:91:6d:
f3:3b:a4:d0:b0:9d:53:5b:d3:8f:3c:d3:26:32:3e:
8f:de:09:41:41:82:a6:83:0e:b1:0c:b6:4f:61:f5:
28:35:5c:06:ab:3c:34:86:1e:dc:0f:3b:4b:a3:14:
e7:61:c4:10:b4:6b:ee:1a:65:1f:f6:15:c9:11:65:
72:4c:8c:22:45:e6:f2:2d:d6:1e:bc:a2:58:f1:93:
81:e8:28:53:44:73:35:21:4a:0c:07:26:b2:ae:96:
6f:29:e0:b4:2a:cf:18:fb:9d:a3:81:5e:1a:ef:c0:
1f:0b:e9:27:1e:49:ea:27:40:77:94:26:ea:56:08:
65:31:39:f3:f2:cb:bf:95:0d:c6:6d:36:9c:ae:2b:
dc:f7:09:08:2f:79:ca:85:26:98:b4:81:77:7e:aa:
cf:70:33:1f:5d:01:cc:4b:85:7d:47:48:56:d5:b3:
8a:68:ac:03:78:e5:dd:92:7b:9a:30:67:5e:94:29:
49:d5:02:1f:d1:3d:be:06:6c:d8:e7:fd:55:fe:86:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:79:F3:34:53:61:C7:FD:6F:3F:C1:36:41:5B:F4:9F:18:F1:10:6A
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e7:ba:2a:10:f9:1a:27:18:1d:dd:7b:fb:18:6b:46:6d:ba:
20:a4:1c:86:05:e7:75:c0:0c:a3:b3:8a:7c:e5:4f:de:7c:cc:
57:ee:2a:03:2a:7e:20:85:62:65:4b:03:c1:54:5e:6c:ba:49:
34:1c:e2:6c:0c:39:e9:f2:c5:1e:12:63:70:ff:7f:b5:5b:5d:
d5:7f:36:60:da:b2:7e:db:4c:d6:fd:5b:b4:6c:21:ed:12:29:
e1:1c:9b:9a:26:e2:01:5c:5d:b0:28:c9:58:42:a6:19:26:2b:
96:56:cf:9f:d9:e6:90:2d:9f:09:84:85:8d:aa:8c:d3:98:45:
ae:5a:2c:68:b3:7a:5c:25:85:62:c8:d5:22:0f:65:57:8a:76:
d1:90:32:62:1d:1d:15:0b:b1:2f:3a:2c:dd:14:14:e3:24:7c:
fb:50:6d:f1:43:5e:61:00:98:c9:17:a5:8b:3c:f4:d6:4d:a4:
68:2f:85:b2:f5:45:0a:2e:f7:6d:15:ee:ce:cb:d8:d1:6f:2e:
87:ca:79:03:07:21:64:c7:de:6e:bf:c9:57:a1:2b:a8:30:4f:
3e:af:70:52:0b:02:26:69:7b:c3:fc:b5:16:47:05:85:cb:57:
15:e4:96:44:f9:64:1f:dc:30:aa:70:b5:b4:fb:6a:cc:02:73:
a5:e3:b2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:37 2025 by rpki-client