Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: JhUG97tRp1u28bA8/YRY5ix7z1Zj+dOo2xTVZ426N20=
Subject key identifier: 54:D3:F6:BB:ED:68:B7:7A:EA:76:A6:6D:35:8B:DE:64:91:40:E6:8F
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 01963F8B95C3FC769D684334488EB0DF3439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 0D90
Signing time: Wed 16 Apr 2025 17:00:34 +0000
Manifest this update: Wed 16 Apr 2025 17:00:34 +0000
Manifest next update: Thu 17 Apr 2025 17:00:34 +0000
Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: I5E6/deGEdK6EKBvJlt9q1XXcFs9BXZ0Ywsahze3Ak0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:95:c3:fc:76:9d:68:43:34:48:8e:b0:df:34:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Apr 16 17:00:34 2025 GMT
Not After : Apr 17 17:00:34 2025 GMT
Subject: CN=54d3f6bbed68b77aea76a66d358bde649140e68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:e2:4e:40:73:2f:98:e2:e4:f4:e4:e2:69:
41:2b:4f:f4:0c:02:ac:15:8b:f5:36:e5:77:8c:a1:
f5:d1:eb:e7:d0:1c:06:f8:55:ae:29:d6:ce:2f:96:
be:7a:16:b3:ff:13:a5:d8:6a:28:c5:d3:4e:1d:7e:
4c:0e:ee:a2:32:00:84:0f:dc:6b:1f:34:ad:4f:6d:
2f:fb:1c:ce:b1:fa:31:8b:b2:7f:16:ce:08:2a:f6:
d8:69:a3:fd:36:51:cb:95:58:d8:37:3b:bc:62:f7:
73:9a:aa:a4:50:f6:f5:90:88:6c:c5:a2:25:7e:be:
77:18:99:23:0b:0a:fb:26:d3:54:26:a9:a7:52:2a:
6d:9f:ca:0d:76:58:51:ce:8b:97:0c:3b:5d:ee:9f:
aa:64:33:dc:27:21:85:0e:fc:2c:97:30:c5:07:55:
31:4f:05:3f:3b:d6:92:22:b2:77:63:be:2a:1f:97:
3d:40:04:20:9a:bc:1e:ae:84:1d:fe:c2:f4:b9:f9:
18:8f:16:dd:d7:c6:ef:53:a2:9e:68:8d:53:ac:63:
de:1c:e7:1b:fd:a7:2c:12:cc:80:e2:21:44:ef:87:
97:1d:5f:e9:ae:78:55:9c:b0:5c:22:6c:17:47:76:
4a:f8:87:32:ab:11:64:32:02:2a:13:1e:eb:d3:ea:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D3:F6:BB:ED:68:B7:7A:EA:76:A6:6D:35:8B:DE:64:91:40:E6:8F
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:48:73:f2:2f:dd:d0:6c:49:7a:0c:8b:ca:54:df:51:87:b6:
17:b6:78:80:bb:de:07:8c:d3:ef:3e:ed:aa:77:7c:00:01:ee:
8a:32:72:e1:78:9a:35:ff:21:08:e9:2b:28:b6:4e:24:9d:a1:
b3:a6:a0:98:2e:50:d9:8d:ce:ec:26:69:86:51:d0:20:99:c7:
61:b4:fd:9f:d4:f5:75:f6:8d:d5:0a:15:a6:19:a4:a0:b2:cb:
23:2c:2c:83:9d:27:28:0c:5c:41:71:06:91:f8:1b:a9:f4:d0:
8a:1e:57:e3:14:d8:72:d6:01:ed:f4:40:26:ec:18:7b:d9:8d:
87:b5:21:99:9a:dd:5a:e3:bd:59:68:d2:35:b6:0e:83:cf:70:
32:a3:b4:ab:9c:7a:21:67:e8:e8:25:36:1d:21:b3:47:14:95:
5f:5d:cc:4b:4a:cb:f2:33:f6:18:94:85:db:f5:63:05:4f:e4:
af:9b:4c:0a:ec:e5:dc:4d:36:db:39:2e:60:53:e4:32:a4:4e:
83:3a:34:d1:8d:7f:cf:99:a8:a6:46:c4:36:e0:44:a3:3c:d4:
7d:97:8b:a1:68:27:a3:74:21:a7:0e:83:72:e9:0c:cc:7e:cc:
18:43:01:bf:fe:f4:c4:c5:01:0c:f8:f6:55:09:3d:bb:ea:7a:
db:44:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:58:40 2025 by rpki-client