Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File: MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier: 7GCSLiWQyi2CZ8qkx3e8wzyGAAJ4ktXQIXaeaznHcP0=
Subject key identifier: 40:C0:4B:1F:53:50:F8:7C:69:F9:D4:7B:8F:DC:23:12:92:95:0D:39
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer: /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial: 0196515BAAF8FF9898048B6E51727D97CBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number: 05BD
Signing time: Sun 20 Apr 2025 04:01:24 +0000
Manifest this update: Sun 20 Apr 2025 04:01:24 +0000
Manifest next update: Mon 21 Apr 2025 04:01:24 +0000
Files and hashes: 1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: GGgVRa6KZFU2XmnRDWGaQm3VRzJ+PaXAakuLok3kP8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:aa:f8:ff:98:98:04:8b:6e:51:72:7d:97:cb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Validity
Not Before: Apr 20 04:01:24 2025 GMT
Not After : Apr 21 04:01:24 2025 GMT
Subject: CN=40c04b1f5350f87c69f9d47b8fdc231292950d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0a:ff:70:c7:0b:39:4d:ca:54:c3:c5:53:d7:
fd:be:ed:6c:9b:a2:0f:1d:72:ed:72:4c:e4:24:09:
28:d3:0d:7e:b4:5d:81:fc:a0:4b:5d:63:c3:fe:c1:
45:b2:af:f2:da:40:c3:80:7a:5f:78:80:3b:c5:09:
0b:af:c1:8c:14:0c:98:d4:d3:c0:95:58:d8:7b:03:
e7:45:b0:f7:e2:5a:0b:5a:9f:22:85:31:d5:61:9e:
d5:32:90:e8:e8:ef:aa:26:0a:a6:8c:08:69:73:4f:
c0:68:0e:b3:c0:8f:c8:14:10:09:f6:77:73:5e:a4:
4f:e5:8b:5a:17:20:b9:1a:b6:42:2a:3f:44:f6:d7:
10:dd:8a:04:81:49:1f:47:49:3a:6b:cb:ce:4e:b6:
59:aa:89:f7:31:24:15:e7:f1:f5:55:2a:fd:43:15:
06:98:4a:46:59:1d:eb:6d:8a:14:58:b2:50:b1:ba:
50:e5:2b:63:f8:3e:a0:cd:12:a3:67:c5:06:01:eb:
87:eb:e4:fe:45:4b:a3:ed:a1:6c:12:15:c6:50:eb:
76:f3:ba:9d:6b:a3:60:f0:7a:75:91:9c:12:d0:df:
a2:b5:2c:35:eb:e9:c9:a5:8d:da:97:aa:65:5b:b0:
73:e7:6b:af:c8:54:ad:64:20:6e:fe:77:14:42:d2:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:4B:1F:53:50:F8:7C:69:F9:D4:7B:8F:DC:23:12:92:95:0D:39
X509v3 Authority Key Identifier:
keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:aa:62:76:da:f3:ae:7b:2e:fc:a6:0d:19:56:e8:1a:cf:5b:
aa:0c:07:56:18:26:ad:3b:08:4d:c6:6c:e8:04:71:0d:e6:c7:
4f:ae:03:ed:6b:16:86:b5:bc:8d:27:c7:b3:a9:eb:80:e2:1a:
e3:d9:c2:5b:d4:73:34:6d:ae:bf:7e:da:a4:2c:be:ca:31:5e:
f2:56:52:c9:32:12:72:f1:9d:26:8f:05:e3:95:c8:d7:0b:a8:
05:98:b7:40:3d:24:86:40:ba:ed:54:56:b2:3d:0e:11:ba:61:
c7:12:17:16:8b:e4:cf:33:d3:b1:4a:3e:6f:8c:93:e2:d5:c5:
17:ea:9c:ec:48:ff:33:77:ff:72:7a:03:c2:5b:09:5b:6a:2f:
67:b6:c6:0e:8a:01:5c:57:19:c5:bd:a2:12:6b:aa:d3:49:95:
8c:e3:06:24:d8:73:4c:0f:e6:7e:40:5b:d6:d5:63:f4:c6:3b:
ea:d6:e0:9b:e0:e5:52:c9:96:0b:38:1d:2a:d1:27:09:35:e5:
a4:29:71:c0:a1:26:78:c5:96:89:db:8a:dd:fa:92:30:b6:9d:
2f:9e:96:6c:7d:87:68:de:9f:80:87:64:cd:1c:08:ce:71:38:
70:7e:dc:a3:92:2f:c7:3a:41:5b:f4:39:22:a3:f8:92:ed:57:
59:87:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:11 2025 by rpki-client