Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier: AQNKkCJ0hU2dVQA42+N0OgP4W9ypT2twhf3GOJqpAkA=
Subject key identifier: 03:2A:F4:8E:7F:64:7D:16:75:94:FD:1C:EA:46:34:26:58:1C:D4:36
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 01965312828BDC211010A4E43FE3EF106DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number: 051A
Signing time: Sun 20 Apr 2025 12:00:44 +0000
Manifest this update: Sun 20 Apr 2025 12:00:44 +0000
Manifest next update: Mon 21 Apr 2025 12:00:44 +0000
Files and hashes: 1: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: jUMRXfwhIYG8wo+hvWYt9PQpt7/wE6rZ49p15HLqqIs=)
2: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (hash: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:82:8b:dc:21:10:10:a4:e4:3f:e3:ef:10:6d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Apr 20 12:00:44 2025 GMT
Not After : Apr 21 12:00:44 2025 GMT
Subject: CN=032af48e7f647d167594fd1cea463426581cd436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:81:ef:a1:d5:2c:43:37:df:10:9a:3d:4a:
39:3b:6e:b5:01:0f:85:73:61:53:51:aa:e9:53:61:
05:9d:c7:96:b2:15:2d:fa:28:f1:a6:1a:51:d1:33:
91:1b:80:31:ee:38:d5:4d:20:00:3d:ce:ec:9c:62:
67:93:6a:2c:56:61:7b:ef:19:dc:5d:db:ff:0e:3d:
5d:19:ca:3b:b6:9f:d4:7b:5d:9a:71:18:dd:1e:c9:
2f:e9:6d:7d:a3:d0:d5:fa:0d:d7:69:ba:4f:a7:11:
98:8a:f9:4d:c4:66:2d:5e:4f:41:4e:a1:af:ea:45:
f1:18:c2:c1:26:b2:15:b9:ae:b3:66:f8:ca:3b:e3:
9a:ed:fc:f4:82:3b:d2:46:60:21:93:fb:00:6d:d6:
5f:17:1e:b8:45:2f:44:7f:a7:b7:76:0b:ac:ee:00:
c3:8d:64:ba:fa:60:e8:1e:8c:35:1d:9d:4c:0f:3f:
df:c3:9a:ab:19:37:c2:0e:cb:8a:62:72:f9:cf:1c:
7a:df:9f:f4:8c:6f:5a:0b:2d:25:3b:91:2f:e0:ec:
6f:f5:35:3c:e3:9c:e7:50:51:8f:eb:86:c5:fe:86:
33:86:15:ba:89:4b:73:68:f9:29:2f:52:f8:62:06:
38:6b:f8:18:dd:6e:15:5d:c2:2e:5c:ec:f3:60:b8:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2A:F4:8E:7F:64:7D:16:75:94:FD:1C:EA:46:34:26:58:1C:D4:36
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e5:d8:24:37:a3:7f:9b:aa:e0:98:e5:ba:02:41:e4:c4:5c:
b7:99:c4:c2:32:73:0b:af:7b:99:f7:6b:1c:c6:2e:b1:e1:bb:
ea:33:30:2b:a9:8a:8c:2a:e4:34:95:d8:ab:bd:26:d5:09:e4:
33:a5:2f:43:11:92:90:22:2a:8b:64:83:f3:0f:12:c4:61:5b:
5a:7c:fd:6f:38:1f:88:f0:b9:50:be:9f:73:31:d6:ce:a7:00:
01:c6:89:fd:aa:1b:39:ac:64:3b:3c:69:3f:43:1d:67:c6:11:
4c:b5:9e:d2:7e:4d:b4:14:f9:bf:5a:1b:2d:ad:a0:4e:a7:1b:
3e:b5:1c:ca:76:70:b3:1c:74:95:69:ef:97:f8:df:4a:78:9f:
b9:96:bb:60:56:19:a6:e7:5d:ab:1f:04:6b:a0:ec:64:a2:2c:
78:69:0a:6f:e3:5a:2d:70:e3:c2:4a:f4:07:f8:f7:8e:09:a5:
68:cf:dd:6f:56:07:d0:e8:dc:ad:d3:2c:77:09:53:a3:91:20:
77:55:04:6a:68:77:e9:9a:4c:02:bd:72:aa:0f:c9:ed:3e:7e:
fe:ca:e1:52:17:d5:31:0b:e1:ff:5a:5c:db:af:a8:7c:de:00:
eb:48:30:ee:25:a8:30:ca:5d:58:6e:14:47:0b:c8:26:c9:0c:
aa:8b:5c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:43 2025 by rpki-client