Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: ZzP+1M1Zi4U+oXKOeuIxGURJ4G50cAC1F+x+B+A1ufA=
Subject key identifier: 46:E2:7A:DB:D6:21:02:8A:EF:D6:B7:10:2C:06:B0:79:4F:8D:72:BA
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 019655DCCA62E62D01B1702200E589930272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 102A
Signing time: Mon 21 Apr 2025 01:00:55 +0000
Manifest this update: Mon 21 Apr 2025 01:00:55 +0000
Manifest next update: Tue 22 Apr 2025 01:00:55 +0000
Files and hashes: 1: ghqg6ujuEOV4Vw3b6x6YkQU8aSs.roa (hash: IATpDK+kaz0czhsEzmLbtPDJ492YJfivjvGQ/3AgHO8=)
2: rMy8dPPnYigzc4tv_MpgYXZWjBU.roa (hash: nHe7eBjoA3VTymKpGX1+aRKhTfLD28hgYmPFTLI6+4M=)
3: x5FwTTVorsGfIV2MDa8IC9dozSI.roa (hash: cVCSNkZBBh3ZJGnim77LdgANipO1Ai7iWjVLFMe9HIY=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: AfZjfwyuVF29Dj7GYCzzDoOozMPm32NfFgRg8Jxa8SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:ca:62:e6:2d:01:b1:70:22:00:e5:89:93:02:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Apr 21 01:00:55 2025 GMT
Not After : Apr 22 01:00:55 2025 GMT
Subject: CN=46e27adbd621028aefd6b7102c06b0794f8d72ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:04:36:36:93:8b:09:cd:b7:e7:f4:7d:75:
c3:0e:02:e5:eb:09:24:f1:1a:9e:07:2d:1d:81:97:
de:09:04:00:21:31:d0:18:ed:d5:e8:86:3b:75:5c:
d5:18:b2:30:9d:0d:2a:20:c9:0f:9f:8c:a9:ec:c0:
74:2a:7b:c3:7d:e9:82:e5:e7:bf:db:08:39:97:17:
5f:ff:d6:02:af:bd:ec:10:4a:2c:7d:d3:83:6d:9b:
11:4f:85:91:10:d4:b6:83:c5:44:f9:8d:43:3b:ff:
8d:43:f1:1a:9a:13:66:2f:58:04:de:1c:40:d9:a1:
e7:19:e3:c2:cb:d8:7c:f2:f8:bc:4f:94:67:04:32:
df:d8:82:26:66:a4:a8:e9:fb:43:49:a6:53:d3:7d:
b5:8e:6f:eb:70:47:9d:fe:c5:97:eb:46:2a:9e:1c:
39:6c:6e:59:48:cb:d7:8e:66:06:03:8e:ed:5b:42:
13:e4:7f:f5:d7:70:07:32:15:1d:d6:f0:ec:96:72:
3a:1e:3f:1f:1f:91:22:15:68:62:50:f7:f7:21:13:
cd:91:6d:34:c1:3f:77:fa:30:fb:50:10:cc:46:9b:
63:ce:0b:41:ec:d6:4f:5d:b3:7e:11:a3:2c:63:11:
8a:c9:bc:43:c9:c6:12:66:c2:78:14:d9:fb:e9:3d:
6c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E2:7A:DB:D6:21:02:8A:EF:D6:B7:10:2C:06:B0:79:4F:8D:72:BA
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:be:b4:f9:dc:a1:03:f7:c4:ac:56:9d:cd:4e:a0:27:f2:6a:
d6:22:fa:c2:85:36:ea:d0:26:48:99:35:dd:25:c8:33:cd:d2:
d4:0e:b3:b8:ec:cc:46:5c:c4:ca:f6:f9:50:62:bd:d2:d4:f0:
d3:ca:a5:8e:ae:4a:fc:45:b6:40:c8:a4:05:2d:5d:e4:61:c8:
2a:3b:6e:3c:bb:d3:22:3d:9f:43:a0:e6:15:38:c5:a6:8b:ba:
bf:c3:f5:c5:b4:c2:a6:63:fd:37:a9:92:84:32:56:bc:0d:41:
52:97:39:cc:14:37:74:e7:23:83:44:80:12:a7:26:eb:1a:0e:
2a:ca:d7:ad:db:a3:d7:fa:fd:73:29:39:8c:3b:06:b1:ca:07:
80:be:98:a6:ec:e2:90:2d:84:4e:f3:34:6a:3c:a8:54:25:6f:
d7:fb:98:23:f3:be:06:c7:19:e7:af:da:7a:32:7c:e2:76:67:
aa:f9:35:d7:c4:19:48:dd:2b:c7:bc:64:f4:da:c9:fb:3a:dc:
2b:f7:d0:f1:77:02:11:16:21:a2:56:3f:43:58:82:04:cb:e6:
2e:0f:4d:b7:1e:bc:81:bd:39:a9:e6:53:10:20:40:55:d6:88:
52:bb:e1:3b:7f:6f:ea:84:6a:27:46:bb:c0:f4:81:7c:cc:ca:
cf:7b:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:58 2025 by rpki-client