Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
File: m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft (raw, json)
Hash identifier: 6Vuq4s0mKIE48/GWGPFFkfIPBOuXCeFhvV3/za6RG3w=
Subject key identifier: 33:E9:B8:C1:FB:2F:D4:A6:E8:EC:09:CE:16:28:87:41:71:B0:E6:C7
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial: 0196A61CF1F0C872E550BEBBD1695A3D37C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
Manifest number: 12DC
Signing time: Tue 06 May 2025 15:00:36 +0000
Manifest this update: Tue 06 May 2025 15:00:36 +0000
Manifest next update: Wed 07 May 2025 15:00:36 +0000
Files and hashes: 1: 60W-NBk3253Bk_GEI2gKgd_BE8I.roa (hash: X2dRuZeK2mpNw1Oq8MItS3tX6isys5T0YQbrPJr37XA=)
2: WMfZ9_oSWOFVeUy99ChSUELiYaI.roa (hash: H0ifkv1EEGP8mDtQZpBc/lFwxXIm4L3JwiD9/BcXTyk=)
3: m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl (hash: 89wn0dxLlkv385AskhDf4qXdFudZluc1kHJqJtiDfgE=)
4: tXaCAurW2gGTHINoOjZh72dEXKU.roa (hash: y5O02pogDW0jIlJpvO+hAt91pj2qn6goqR2eIeEiFSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:f1:f0:c8:72:e5:50:be:bb:d1:69:5a:3d:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Validity
Not Before: May 6 15:00:36 2025 GMT
Not After : May 7 15:00:36 2025 GMT
Subject: CN=33e9b8c1fb2fd4a6e8ec09ce1628874171b0e6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:7e:f3:1f:e5:94:da:40:61:68:72:c9:6d:
8e:f8:ba:be:a2:c4:bc:8b:33:6c:7a:9a:8e:9b:75:
e5:e2:4e:8d:60:b7:84:9c:3b:e3:b1:9a:ff:15:ff:
1b:9b:27:47:2d:02:08:e3:43:9b:2f:32:71:2e:bc:
3d:d4:c8:1a:62:be:ce:34:8a:68:6c:a0:31:fe:88:
b4:9f:2f:9e:e7:7d:a9:87:40:f0:4d:eb:7f:de:aa:
02:97:08:ef:91:d0:a7:a7:57:7b:c0:d9:06:33:75:
11:20:5d:13:4d:e6:96:b2:47:64:67:4e:06:37:e5:
21:1a:08:ab:e7:06:1d:68:8e:15:6b:85:54:b9:84:
ed:3b:f3:76:bb:b3:65:65:a9:5e:df:ac:65:bf:5f:
c8:dd:fa:06:49:24:09:1b:ce:66:c9:08:1b:7a:0a:
e6:ff:31:61:3b:14:b2:e0:db:24:e0:66:b5:09:26:
5e:21:1e:e6:c8:c7:ce:ef:58:2e:62:97:3b:a2:7c:
ed:6e:c5:91:18:fd:14:7a:8d:01:09:f9:f6:59:f4:
10:96:12:6c:ee:8c:30:d0:da:d2:aa:0a:4a:57:35:
02:57:27:a1:23:b3:a5:c3:da:b9:4a:c5:9e:d9:a6:
02:01:af:14:f3:b0:9d:2a:eb:54:59:dd:c6:85:53:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:B8:C1:FB:2F:D4:A6:E8:EC:09:CE:16:28:87:41:71:B0:E6:C7
X509v3 Authority Key Identifier:
keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ba:ea:b0:23:91:5b:ff:db:6d:9c:9c:48:87:03:62:ef:a3:
45:75:ab:83:cb:19:79:98:ed:75:23:af:b1:1e:92:50:1a:aa:
4c:e6:d2:20:47:43:50:2d:21:f5:33:02:37:7c:d7:68:12:a1:
71:82:3f:e7:42:0d:14:85:55:ca:db:94:45:78:b1:cc:00:88:
f2:6c:d2:99:49:43:bb:62:cc:cc:a3:ac:61:90:8e:43:22:54:
97:60:79:fa:e3:4d:09:cf:9d:d3:13:8a:2c:fa:96:1c:0b:99:
37:67:51:59:62:de:9b:45:9a:bd:72:be:70:cf:99:53:14:4a:
85:03:84:92:4b:69:13:bc:b5:9b:c8:73:cd:64:18:ed:ea:fa:
2c:f6:41:01:7a:93:75:e5:e8:fc:42:f0:7c:99:2c:4d:b1:01:
14:7d:42:70:f5:39:0f:d8:9c:62:6f:0e:4f:c9:ad:95:60:60:
6a:52:95:80:0e:f4:d7:c1:a6:67:ff:30:fa:03:1c:46:05:2e:
8b:0f:a7:70:d0:67:4f:6e:b3:be:1e:7e:af:a4:98:c6:e8:00:
56:96:f5:24:a2:85:d7:4d:43:03:c8:b8:41:2d:d7:11:03:69:
3d:e4:f3:26:3d:a5:92:4b:75:57:ce:5e:2f:52:c0:59:71:b9:
0e:97:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:56:19 2025 by rpki-client