Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier: MIFE/HAX2ne5Wb3aZc++mjefvIMvacu4fxdzllCaEOI=
Subject key identifier: 0A:43:52:95:0D:5F:7F:80:D7:29:50:BA:42:BC:88:18:07:ED:8A:AE
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 01965312022FAD2079D6D6B38CAC59E9A1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number: 0410
Signing time: Sun 20 Apr 2025 12:00:11 +0000
Manifest this update: Sun 20 Apr 2025 12:00:11 +0000
Manifest next update: Mon 21 Apr 2025 12:00:11 +0000
Files and hashes: 1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: laTtruTemjraAOm7x1est/Oj5Jr566EftQFhWuuFa/I=)
2: NYziV-NFGGqBIoJkJemWo5QRXPo.roa (hash: NJwrl3v2N6LA2BTkuAAr9JlSloYvfxRMFpbHdjPuE8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:02:2f:ad:20:79:d6:d6:b3:8c:ac:59:e9:a1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Apr 20 12:00:11 2025 GMT
Not After : Apr 21 12:00:11 2025 GMT
Subject: CN=0a4352950d5f7f80d72950ba42bc881807ed8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:1f:5d:b1:e7:ce:64:05:87:5a:37:12:ef:
49:10:0b:3a:80:43:0c:62:ad:bb:0f:73:f5:fe:d5:
33:d2:8f:33:41:3d:d3:4d:ca:d4:94:2c:81:62:48:
b1:6e:82:3b:05:05:b8:cf:20:f3:af:02:a0:8e:4a:
ec:e2:23:a5:b5:2c:2d:73:32:5e:e1:a0:2e:be:79:
a6:c9:a4:dc:2e:27:7a:89:25:85:bb:ad:30:43:99:
79:6d:12:2a:0d:a3:45:78:a5:a7:22:4c:12:88:1d:
00:9d:e2:ee:68:5a:0a:8c:97:0e:ca:44:5c:08:bc:
43:d0:af:e0:e7:c7:a7:da:d2:f4:f4:96:7b:dc:9a:
bd:5e:ce:c5:e5:78:08:c0:8a:77:7b:b6:3b:08:e9:
43:80:64:23:ab:8d:20:cc:3d:4d:08:68:7b:51:9c:
30:76:97:ad:5f:42:2b:3d:88:56:42:c8:59:ef:b6:
8f:6d:47:9c:f2:ff:96:45:67:48:2c:6c:59:a1:e2:
be:75:7a:61:3e:be:86:de:25:63:6b:c7:79:cc:91:
9b:b2:82:5a:40:64:79:6a:08:55:e7:c8:b3:20:8f:
bb:1a:44:72:f8:b4:7f:87:46:6e:e8:23:bb:c3:34:
f6:6f:2e:11:fb:01:0f:40:2d:93:02:79:e8:6c:ef:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:52:95:0D:5F:7F:80:D7:29:50:BA:42:BC:88:18:07:ED:8A:AE
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f4:82:94:71:42:dd:7a:a6:4e:67:05:6a:33:c5:df:f9:17:
f9:b2:7f:55:67:bc:e0:6f:43:c8:3a:39:5c:23:40:7e:e7:0f:
b3:1f:e0:84:a2:17:19:a7:bb:9b:55:c0:1b:69:ed:6f:25:15:
11:d6:83:11:f7:10:57:be:40:81:3f:40:90:5a:83:94:d1:e2:
3b:a5:77:49:98:10:44:b7:65:7a:19:38:d1:e5:6b:5f:bd:80:
f9:58:d6:0c:cd:98:e2:49:5d:20:90:fc:d3:ff:61:44:28:2b:
b9:dd:27:20:af:92:b8:74:1c:60:f0:81:a3:f2:cb:ad:1c:de:
14:08:cb:6d:74:6b:a5:15:02:fc:2f:30:3e:6b:8e:10:35:4f:
45:c7:66:cc:68:d4:29:67:fa:dc:ee:05:ce:61:f9:7c:07:ab:
a2:04:77:3a:50:e2:78:fb:a7:3d:fc:d1:de:7e:c9:97:f8:32:
58:55:ae:a6:0c:9b:96:bb:69:4e:53:82:35:32:33:43:07:a5:
49:cc:35:76:6e:4a:cb:d6:cf:f2:3e:29:74:a7:6a:17:9f:a9:
8f:76:2c:12:45:5b:ff:50:17:be:c2:5a:b5:80:0e:82:f0:3c:
dc:d1:22:c9:3b:fb:61:66:45:3f:97:cc:5d:ca:f7:98:66:ae:
54:1b:15:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:57:13 2025 by rpki-client