Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
File: mnCwUeXN-WLbwms1JIjQgxvfmjw.mft (raw, json)
Hash identifier: 1yCyXtAdpqI3uASb0n519pifNttDR+kYIvslsKB7yRM=
Subject key identifier: B8:53:6F:D3:D7:BE:75:F9:5D:C3:2C:70:6F:1C:9B:74:F4:79:54:A2
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Certificate issuer: /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial: 0196421E8D5142CAC37606E10B01DFEC8F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
Manifest number: 11AD
Signing time: Thu 17 Apr 2025 05:00:20 +0000
Manifest this update: Thu 17 Apr 2025 05:00:20 +0000
Manifest next update: Fri 18 Apr 2025 05:00:20 +0000
Files and hashes: 1: ApYo8usd2f87kfxBSCL43GkwNl4.roa (hash: HVht7PktvVlX5vG6maaHsCCbjpS8pRttM16W+m0bt9g=)
2: Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa (hash: FmxP6Uz7faOa7pJaYu4u/4WUOpulDOhau3FqT5C1MnI=)
3: mnCwUeXN-WLbwms1JIjQgxvfmjw.crl (hash: Umhss0rJ07wJxoDhECs5wiynIuDbF/lzDvgmRnShJ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:1e:8d:51:42:ca:c3:76:06:e1:0b:01:df:ec:8f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Validity
Not Before: Apr 17 05:00:20 2025 GMT
Not After : Apr 18 05:00:20 2025 GMT
Subject: CN=b8536fd3d7be75f95dc32c706f1c9b74f47954a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:d4:53:39:bf:07:0c:3e:22:f4:76:14:73:
b7:30:b9:19:ff:95:1f:9e:e1:63:2a:ab:e0:0f:ce:
0b:28:d5:66:e1:71:1c:f6:4a:36:62:79:e7:42:4e:
5c:7b:71:4e:25:74:61:f2:d3:b7:24:7f:dc:54:69:
39:e1:24:96:64:e7:8d:5d:e1:1b:1f:4f:86:86:17:
4f:1b:ce:46:c4:1e:ca:4c:11:95:ea:7d:52:20:3e:
84:13:ed:50:1e:9f:cb:0b:a6:91:99:81:5c:89:29:
06:4b:25:0a:3b:e9:87:ab:fe:90:1c:af:8f:68:74:
a4:22:aa:49:27:09:42:a5:c1:37:37:71:36:8a:fb:
3e:5a:08:68:bf:6b:ba:98:ca:9f:17:bd:d3:53:88:
23:a2:ab:a7:93:4b:a6:1b:29:a6:27:c6:22:cc:45:
26:be:34:48:72:fe:dc:aa:e1:57:e5:32:6d:c8:ec:
02:51:b2:5a:9f:7f:5e:7f:7b:c8:56:e3:4b:1f:11:
ac:9e:ed:82:93:48:61:7f:54:54:9d:0b:71:8a:dd:
d1:f4:47:ad:c0:68:9e:e0:bb:ca:53:65:35:58:b4:
2a:94:62:ed:89:2d:1e:97:6d:eb:a9:7e:d0:d2:d7:
a9:39:24:c0:1d:00:f1:d9:bd:19:e8:67:ed:b1:3c:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:6F:D3:D7:BE:75:F9:5D:C3:2C:70:6F:1C:9B:74:F4:79:54:A2
X509v3 Authority Key Identifier:
keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f5:cd:82:ba:e6:8d:5b:89:42:b8:80:78:d8:db:b0:c9:47:
16:1e:0e:81:59:b4:73:35:c5:34:3a:43:f0:77:2a:14:25:9d:
74:b6:ef:c7:7f:66:1e:b4:90:e7:db:95:38:a5:87:19:92:87:
e4:a4:75:f4:06:6f:68:76:54:68:34:70:4e:5c:5b:ac:26:b6:
c5:52:14:e1:63:ce:cb:aa:dd:06:b0:0d:9b:b2:be:4a:ac:48:
9d:00:84:16:2b:cd:29:ba:ef:31:5e:bb:c1:ce:dd:df:2d:f8:
72:d0:59:e3:5f:f1:52:43:12:22:bb:84:0e:1b:a9:a6:5d:6a:
91:ce:79:0c:96:00:e6:56:4e:3f:0b:81:6b:80:f4:18:63:36:
47:0c:19:3d:86:e8:ef:84:95:f0:5c:72:57:4b:de:e6:0d:4f:
a1:ee:77:41:f7:1b:56:09:7d:92:be:be:ca:d1:27:92:8f:d0:
33:01:12:8d:a5:82:08:5f:bd:95:fd:97:18:b3:df:fc:08:53:
9c:15:be:8c:05:74:06:2e:70:db:ca:92:94:d9:d2:41:28:e7:
7e:5e:92:36:3b:8b:a9:97:a6:5c:13:c5:41:5d:da:de:2a:8d:
66:3f:6c:23:4a:bb:34:f3:38:07:fd:58:c4:6b:d3:8a:fc:f9:
11:85:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:36:31 2025 by rpki-client