Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier: KPajEibksUYl9LfNc+XRdhvPYlmUWIijlp1uJ7EFp/c=
Subject key identifier: 12:33:4B:FD:45:53:2D:CF:D1:05:31:73:C6:9A:3F:EE:AD:B0:58:E2
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial: 0196D51B790D572E66DDBB90FB5534E7E2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number: 0677
Signing time: Thu 15 May 2025 18:01:09 +0000
Manifest this update: Thu 15 May 2025 18:01:09 +0000
Manifest next update: Fri 16 May 2025 18:01:09 +0000
Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: CWBq6SzY0dKylw2xj8z9AktJBtSP8AA+cXbGpZ7H5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:1b:79:0d:57:2e:66:dd:bb:90:fb:55:34:e7:e2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
Validity
Not Before: May 15 18:01:09 2025 GMT
Not After : May 16 18:01:09 2025 GMT
Subject: CN=12334bfd45532dcfd1053173c69a3feeadb058e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:7e:08:5b:49:54:b8:82:95:6a:da:fe:9a:
7a:f0:0b:0f:77:23:63:59:46:ad:41:66:4a:30:4d:
b6:93:1a:8c:19:27:e3:d1:d2:1b:93:1f:52:ab:b8:
4c:58:19:d2:3a:81:6c:ed:db:52:26:cb:3b:09:88:
6c:f0:40:7c:dd:d2:7f:47:28:b6:0c:82:ac:86:d1:
c3:f9:f3:54:e1:77:1f:ba:1b:f5:55:46:db:0a:b4:
71:8a:da:8d:85:01:51:24:ad:b9:3e:dd:90:6e:32:
68:db:1f:e9:ed:f3:97:0d:d0:1d:46:1f:71:f8:f7:
fd:dc:82:61:62:1a:04:69:db:e3:0a:68:82:60:5a:
ab:a8:26:cd:c2:80:f8:85:b9:d5:e4:0e:83:33:50:
30:69:3b:1c:7d:2c:16:bb:c6:8f:58:c6:91:2f:6a:
97:c8:39:91:47:28:40:db:2a:c1:d4:af:98:61:d8:
6d:37:f4:c5:4e:14:a4:3b:3c:8a:ce:8c:9f:5c:1c:
cb:98:fe:7f:34:05:05:50:0a:9a:01:de:43:f3:87:
02:2d:3f:d8:e2:a5:ee:c5:17:45:f2:0f:75:44:9d:
fe:a3:e7:ec:bb:0d:74:96:48:28:b3:1d:7e:e8:87:
d4:1e:c3:fc:1e:ef:da:2c:62:46:1f:20:4d:1c:18:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:4B:FD:45:53:2D:CF:D1:05:31:73:C6:9A:3F:EE:AD:B0:58:E2
X509v3 Authority Key Identifier:
keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c3:cb:83:41:c8:5a:f0:3e:c9:9c:28:46:bc:c0:a0:b7:3a:
13:91:08:1b:2b:f5:b5:b6:25:72:19:31:2a:3c:71:e4:c4:42:
f7:9f:4c:a8:12:0d:6f:d9:e8:ac:24:62:4e:72:d1:2a:dd:12:
88:cd:3b:ec:7d:29:75:04:43:4a:39:ab:58:9f:0e:25:98:cf:
2d:9f:a4:11:fc:d1:6e:9c:7e:09:f8:12:ec:72:22:04:af:eb:
96:88:63:fe:d1:83:d1:f4:39:fc:6e:1f:12:13:86:34:a1:0e:
4d:82:d4:66:5e:ad:a1:27:02:b9:16:03:60:ba:bc:42:c5:3b:
fb:b8:36:bc:08:1e:9d:fc:19:da:54:68:d3:33:a4:39:ab:73:
04:bb:b3:5f:17:15:db:7b:04:2d:8a:e2:a1:bb:46:ec:05:e6:
b2:ee:13:a0:29:b1:f8:54:19:d3:af:97:f0:51:95:09:13:f1:
e1:0e:09:64:67:ac:1b:ef:9d:e5:b0:9c:2a:89:a8:a3:53:6f:
ac:45:bb:f2:f3:9d:2e:00:49:6d:c6:39:58:21:46:f4:bf:94:
25:a9:bd:8c:14:6e:1d:3a:04:51:09:5b:67:5b:5a:d1:2f:82:
88:79:5c:56:85:02:63:93:0f:57:89:11:a6:aa:f2:88:03:0a:
91:12:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 02:55:25 2025 by rpki-client