Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: c/nWV4IJKWHcPtof9envkWDbEW2yS62K50krtADR+L0=
Subject key identifier: 46:D0:BD:E5:0E:33:7A:D7:9C:85:52:DE:39:66:DB:92:72:68:DB:41
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019640304D276B14727B04749BF281EEFDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 14F6
Signing time: Wed 16 Apr 2025 20:00:29 +0000
Manifest this update: Wed 16 Apr 2025 20:00:29 +0000
Manifest next update: Thu 17 Apr 2025 20:00:29 +0000
Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: VfmK2J3CuvZL5UxBQJXkhCbM/HJrxLRXKMqALyI2eOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:4d:27:6b:14:72:7b:04:74:9b:f2:81:ee:fd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Apr 16 20:00:29 2025 GMT
Not After : Apr 17 20:00:29 2025 GMT
Subject: CN=46d0bde50e337ad79c8552de3966db927268db41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:37:66:1e:29:96:92:cb:80:c8:78:5d:5f:
eb:6f:6f:35:cb:93:eb:3f:82:63:87:60:45:57:1f:
0f:b2:9b:01:a7:bf:50:21:0f:34:8d:fc:9f:12:6b:
0c:be:29:31:ed:5a:f2:c8:59:c6:c5:c7:bc:c5:14:
50:93:2f:d1:17:21:86:5e:72:24:1e:ca:e3:8e:18:
3a:0e:74:dd:87:e4:82:24:4b:1b:31:46:3b:80:51:
b2:b8:5b:31:01:a5:f9:e1:00:1e:87:24:5b:f5:58:
cf:ad:92:50:ec:df:fc:7d:a3:58:02:3a:ea:bd:2b:
89:15:13:61:f1:a4:4b:e1:ed:05:d2:fc:67:d9:63:
95:a2:84:64:da:70:a8:fa:4f:77:ba:c6:89:92:53:
13:bf:a9:58:48:b7:f4:d0:04:c2:45:90:bd:37:82:
87:3f:e8:0e:9e:e1:c0:fe:d9:3f:90:dc:6c:28:8d:
52:ad:de:34:cd:8c:2c:aa:d3:86:26:e2:bb:b0:e4:
80:01:3b:48:ce:a1:2f:a2:11:6e:49:15:e0:84:d7:
97:9d:4e:28:6e:fe:9b:a6:0b:ee:c4:0d:29:4f:f5:
46:73:6f:4d:3d:2d:4c:ab:65:2e:1a:36:be:26:c5:
08:50:91:30:30:d7:3c:a6:72:77:51:34:fd:e4:bd:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D0:BD:E5:0E:33:7A:D7:9C:85:52:DE:39:66:DB:92:72:68:DB:41
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bd:f3:98:57:41:3f:d4:70:26:29:5b:31:dc:b3:6f:62:f4:
4d:a0:4f:7e:2f:b3:ed:ba:3c:fa:b3:8b:e8:e3:42:da:64:ee:
49:40:9f:7c:af:b9:6f:8d:b2:5c:0f:4e:0b:57:a8:c4:b4:68:
4b:e5:49:8c:b2:bd:dd:bc:19:62:56:92:cc:e4:ca:6e:18:ad:
5d:a6:6e:25:16:cf:db:42:15:6a:e9:e4:04:0f:81:48:d4:11:
2c:8e:12:91:62:c2:0d:e2:5e:aa:27:cf:41:66:d8:d1:47:d4:
5f:9c:b1:59:8e:76:b9:f2:18:4d:3b:b4:1b:d5:7a:4c:a1:71:
9e:89:b5:93:52:00:77:7c:bb:89:43:a8:54:00:2b:98:96:ef:
4a:83:9d:2d:c5:af:a4:23:43:66:6f:98:49:e0:97:36:a6:f1:
09:df:81:c1:58:20:1e:f1:0d:be:b4:35:83:00:aa:57:4c:72:
32:66:71:66:9a:79:23:15:52:64:7a:bf:9b:c5:ce:e0:bc:aa:
6c:f2:7c:29:c5:3e:c8:9c:5e:11:fb:d3:34:e6:bb:c5:93:95:
65:26:e3:a3:9a:f5:07:1e:05:32:ec:e2:93:6d:55:54:80:ba:
41:0c:89:cd:80:b5:85:a8:cd:35:57:2c:67:e8:84:32:0c:e8:
da:cc:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:44:08 2025 by rpki-client