Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: dk6qV9GOMvoRgC3T0DmdmmF6YD8UFwUyg2CFIyGe5aw=
Subject key identifier: DF:09:19:45:62:DD:68:B5:66:D1:F0:C6:44:EF:2D:56:87:49:34:21
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 0196425621CD89151906B627C3684595EA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 144B
Signing time: Thu 17 Apr 2025 06:01:03 +0000
Manifest this update: Thu 17 Apr 2025 06:01:03 +0000
Manifest next update: Fri 18 Apr 2025 06:01:03 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: PQuG7AD4yX2bYsOvU1DLMhHGFbZUTBE2erCro0z8lsg=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:56:21:cd:89:15:19:06:b6:27:c3:68:45:95:ea:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Apr 17 06:01:03 2025 GMT
Not After : Apr 18 06:01:03 2025 GMT
Subject: CN=df09194562dd68b566d1f0c644ef2d5687493421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:a4:1c:0b:41:2b:7d:05:af:be:0d:4e:66:
45:4d:22:7c:a7:cb:36:e9:6a:0b:66:d6:2d:55:90:
65:8c:a9:30:e0:ea:7f:1c:12:41:e5:98:fa:9f:1f:
6a:23:37:3b:b5:7a:6b:f1:ff:b4:bc:61:b2:91:58:
66:82:1f:08:74:86:12:42:98:39:7c:fe:69:ff:88:
7e:d4:a5:07:3b:e0:ef:14:3a:ca:a7:10:c3:df:f8:
fc:de:53:b2:9f:3b:9e:04:84:df:73:ba:84:ac:a8:
d5:fd:60:50:94:3a:94:f6:eb:f9:88:9e:48:f3:9d:
76:08:28:e7:d6:89:78:e1:a5:db:b6:52:26:f5:31:
e2:ba:28:76:1a:94:46:97:23:d0:27:2f:de:b3:c5:
fa:9f:d6:b7:da:b8:bf:de:3c:83:28:b3:b9:15:6f:
e8:3d:1c:da:ff:91:b2:cf:3c:74:d6:5f:79:85:70:
f7:df:e0:e4:a5:02:eb:82:6e:94:a7:aa:42:fb:48:
17:8b:f5:e6:7e:54:dd:d5:0e:c4:aa:aa:ed:20:18:
a1:da:86:0f:f0:86:57:b5:c8:4c:dc:a6:d1:b9:16:
bc:0b:97:60:ad:4d:82:cf:8a:a6:17:5a:f8:a6:03:
f2:0c:7d:b2:00:19:c3:4a:c2:73:b6:f8:9f:3a:2b:
8a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:09:19:45:62:DD:68:B5:66:D1:F0:C6:44:EF:2D:56:87:49:34:21
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bf:6c:8e:31:43:13:aa:b3:75:a9:e5:1e:b2:6b:2a:ef:a9:
83:25:56:12:72:14:51:b7:5c:ce:35:02:0a:b2:de:6f:84:48:
0f:5a:67:24:86:e5:45:67:53:35:43:07:25:bf:a3:48:65:db:
c6:bf:cd:4d:a1:0e:07:98:87:cf:b8:90:c3:94:20:4b:63:2f:
c0:7f:42:ff:dc:31:cc:09:1d:c0:15:04:d8:58:cd:6f:79:9f:
66:78:b9:2e:74:6c:e3:78:52:42:82:13:b9:5f:15:a8:ec:fd:
96:27:34:21:c6:5a:81:a2:0e:40:41:c3:91:85:b6:ac:3f:3f:
cd:85:e7:7a:0e:95:86:b6:e9:60:b5:e5:ec:9b:ed:c6:ad:8f:
b9:4e:97:7b:20:0b:4a:5f:31:1d:b7:68:93:59:8d:98:78:56:
13:f7:76:0f:d1:a0:0c:6f:ad:37:d6:3b:e6:0d:aa:f6:3e:10:
77:71:79:eb:a0:39:c6:89:a4:9a:24:15:67:51:32:c7:09:fc:
ab:5e:28:68:51:61:a4:77:34:dd:c1:ff:39:5d:63:bb:2a:53:
b3:cc:bc:a5:be:d8:aa:b4:09:77:ae:3e:ce:30:e2:18:92:df:
f8:8c:bc:52:0b:3b:aa:af:b7:dc:d0:6c:a2:0b:e5:2a:07:f2:
d0:b9:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:14 2025 by rpki-client