Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier: hEiZSm7CT3hL2z0/Kdvnkyqlpk72ByMSoaFFAeOVJZs=
Subject key identifier: 38:A5:D3:3B:40:6C:63:86:24:0E:46:5B:E7:16:63:BB:11:95:23:2A
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 0196A164A3293802217BA6474888E26ED3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number: 152A
Signing time: Mon 05 May 2025 17:00:49 +0000
Manifest this update: Mon 05 May 2025 17:00:49 +0000
Manifest next update: Tue 06 May 2025 17:00:49 +0000
Files and hashes: 1: g5PI0OIlX5tTjsen3s8hXQzEWx4.roa (hash: uE1lBW16SA+r7c4/Tg2mSsWjcv7alroQQDQoG/Ta6JA=)
2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: lfIBL88ncDwXJ7WOHa/Es76yS7M3zh1h9EIlvOt8SOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:a3:29:38:02:21:7b:a6:47:48:88:e2:6e:d3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: May 5 17:00:49 2025 GMT
Not After : May 6 17:00:49 2025 GMT
Subject: CN=38a5d33b406c6386240e465be71663bb1195232a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:e6:7e:a1:bc:86:fb:b0:6c:78:e5:9a:42:
e9:87:8c:2f:01:65:b8:56:a5:34:56:98:37:89:2b:
a3:50:b3:70:de:fe:fa:40:63:df:c9:ce:6e:9a:11:
d9:06:b6:0b:fd:27:5a:aa:c2:58:28:d4:af:59:55:
2e:7d:28:97:33:8a:49:5b:df:a9:24:ba:52:26:a8:
a5:df:93:07:fa:e6:5a:7c:77:52:6e:50:16:42:9d:
74:78:a8:de:39:18:cd:41:80:af:83:02:e7:a7:a1:
65:55:7c:37:37:f5:5d:dd:3b:e6:a8:e7:3a:2f:30:
dd:07:0c:06:56:69:36:4d:76:21:08:6c:ab:71:b7:
21:38:69:69:05:d0:d4:2e:49:80:a6:b7:95:97:4c:
f3:ad:1c:42:d4:5e:5e:4f:e1:31:c7:7c:a2:e2:98:
0f:e8:b0:5f:4f:56:37:a2:6e:ee:56:dc:82:cb:e7:
34:92:de:96:80:01:90:53:bf:6d:d3:a9:4a:12:a0:
99:58:e3:e9:4e:27:ab:29:5b:f2:1e:7e:6b:6a:af:
52:50:53:af:c9:6c:69:8c:dd:66:24:ef:fb:bb:c6:
6b:65:dc:b8:54:2c:2d:d2:9f:62:dc:1d:bf:8e:6a:
b7:5e:ba:f1:96:d8:50:3e:64:12:61:87:c0:45:e0:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:D3:3B:40:6C:63:86:24:0E:46:5B:E7:16:63:BB:11:95:23:2A
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:59:a8:5f:17:22:42:d9:de:9d:4b:33:1c:8a:5c:5d:68:
4a:7b:97:4c:ad:4f:34:cd:ce:b3:2a:13:3c:6f:5c:f8:5a:ea:
80:eb:e7:a4:60:46:62:43:32:fb:28:9c:c6:d4:60:07:d1:c2:
ec:3b:72:d6:01:4a:78:35:39:98:d4:ff:c0:d1:96:bf:93:af:
6c:ae:70:01:90:55:a2:99:94:7e:43:21:c4:84:a8:e7:eb:d2:
c3:1d:a7:98:e9:90:48:db:44:22:55:7a:a4:c5:07:65:59:5e:
fd:33:e7:78:7c:37:4c:78:b5:7d:4d:b4:12:98:ad:29:cb:62:
73:4b:58:ae:dd:01:d2:71:26:72:b1:72:d2:2f:4c:1f:b8:09:
58:e0:a6:b9:5d:6c:b8:96:2c:bb:6b:77:63:c8:50:76:18:0e:
3e:e9:3d:7b:73:80:30:e6:80:3e:63:95:25:94:4c:f5:3d:d9:
c1:94:b1:e6:e2:3c:44:af:da:5a:28:c4:a7:21:78:52:10:d1:
01:9b:2b:39:9b:4c:a9:58:df:a7:76:ab:9c:bd:04:9d:02:d0:
27:83:4b:2b:24:d0:71:77:93:7b:4d:90:17:8c:e1:90:d4:34:
9b:5b:20:27:ef:1c:98:f2:4f:cd:95:0e:47:42:48:c0:14:6f:
53:60:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:27:11 2025 by rpki-client