Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File: mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier: EDoyd2qIEdM03GC/SgpJY2A/vQS2Ua/LRzfsuHC9Hlk=
Subject key identifier: A7:F8:F7:93:0B:6D:13:36:D6:00:6E:5D:E6:FF:C7:DE:94:79:EA:79
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial: 0196187E08C0C2C7544A75CC804BD1E503C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number: 1060
Signing time: Wed 09 Apr 2025 03:00:34 +0000
Manifest this update: Wed 09 Apr 2025 03:00:34 +0000
Manifest next update: Thu 10 Apr 2025 03:00:34 +0000
Files and hashes: 1: ONDqQfjr9_AJ9RydMAScKqXbPqA.roa (hash: tzIBuHIsI+gH6B58aDq25YyBMDZoGOkfi5bBeLvI+/k=)
2: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: Zejt/r3vZ3Zi4InCq+JSRcTQ0f2qu304iSGievoj6G4=)
3: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (hash: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:7e:08:c0:c2:c7:54:4a:75:cc:80:4b:d1:e5:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
Validity
Not Before: Apr 9 03:00:34 2025 GMT
Not After : Apr 10 03:00:34 2025 GMT
Subject: CN=a7f8f7930b6d1336d6006e5de6ffc7de9479ea79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:c9:63:38:4f:04:d4:9c:6c:57:82:25:d2:
ba:75:98:f2:82:37:9b:76:96:4d:48:2c:fa:6e:d7:
e4:e4:12:6b:8e:5f:c8:27:f8:cd:46:4d:ff:0a:65:
a6:b0:54:b4:76:c1:03:69:80:de:f3:cf:99:04:1c:
36:ac:48:2e:30:8e:38:68:d1:a4:87:89:e9:2a:3a:
a0:61:ef:d2:48:dc:32:64:fe:be:6a:ce:d8:96:7f:
74:c1:14:a2:7b:11:47:c4:9a:57:a5:62:9f:27:5f:
1d:bb:3d:5b:e1:47:d5:46:10:f5:23:a8:bc:c3:57:
06:7a:af:bc:a4:13:b1:93:7a:3b:27:10:19:d1:e8:
24:f4:84:a6:20:bc:cc:03:4d:20:94:61:eb:7b:7c:
1f:ff:f9:cd:1d:47:a0:61:06:03:7e:ea:b7:0d:6f:
96:74:13:46:28:90:dd:8d:70:53:f8:a2:03:8b:d9:
2d:90:83:62:77:f6:2c:ce:9b:8a:df:61:62:79:6b:
d9:72:28:55:f4:a6:1e:f9:d0:12:57:c3:b2:ef:61:
dd:a0:96:22:1f:e4:f3:97:b4:23:d8:a3:46:39:64:
b9:6a:df:e5:6a:2b:83:1a:14:00:d2:dc:2d:38:12:
15:bc:92:0f:a9:e5:64:48:e4:fd:8f:f1:55:23:35:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:F7:93:0B:6D:13:36:D6:00:6E:5D:E6:FF:C7:DE:94:79:EA:79
X509v3 Authority Key Identifier:
keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ec:db:3f:65:75:e9:ee:2b:31:c4:f8:0f:5c:14:91:39:b1:
63:7d:e2:48:af:3c:92:56:28:f8:eb:9d:d0:68:e8:05:d3:33:
eb:79:bd:9d:a2:d5:b4:04:a0:1b:38:6b:d1:a6:84:07:37:2a:
df:53:71:31:8b:7b:33:3d:1d:53:da:18:d0:52:3b:cf:14:a3:
85:5b:d7:01:a0:13:65:4f:74:a6:25:8c:df:5d:97:b6:cc:90:
c2:97:65:73:f6:7b:1b:a7:6a:10:79:fc:a7:7e:cc:85:e1:da:
87:47:61:ed:4b:5c:04:b5:7c:ff:31:5a:03:31:0d:64:b5:b5:
85:38:d9:79:99:ff:cf:86:f8:5c:25:71:83:4a:1e:72:47:cb:
a9:a8:96:0c:a6:7e:c2:65:f7:88:40:9b:a6:bc:f2:fd:bc:0b:
3f:84:07:84:c1:d3:55:db:5c:12:b8:f4:ae:b3:9f:b5:22:a7:
08:9a:b4:46:4f:82:89:d1:82:45:31:4e:23:bb:33:7f:38:0c:
9b:19:6f:b3:db:5c:78:2f:4d:43:7d:b0:c2:48:9c:3c:51:ab:
b3:81:6f:29:b0:80:d9:6a:6d:20:7c:15:c7:00:89:f4:99:07:
97:de:5a:8a:3f:5c:7f:45:ff:2c:86:f8:e8:76:18:72:ae:1f:
b6:a4:35:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:25:30 2025 by rpki-client