Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: 9h0m30cUerDHusuZRl0vN6Dz6Gfk01yzNKVhL1AJnBg=
Subject key identifier: A4:FA:E4:AF:A4:EA:13:97:F7:F4:B6:A0:FD:51:0D:88:3B:83:A6:13
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 0196C7288E167379A149E35C948A70702D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 095E
Signing time: Tue 13 May 2025 01:00:45 +0000
Manifest this update: Tue 13 May 2025 01:00:45 +0000
Manifest next update: Wed 14 May 2025 01:00:45 +0000
Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=)
2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: ZDr0doBGBkhVnm5g06jyotW4g8HZoJoUhfpI0uSsmks=)
3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:8e:16:73:79:a1:49:e3:5c:94:8a:70:70:2d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: May 13 01:00:45 2025 GMT
Not After : May 14 01:00:45 2025 GMT
Subject: CN=a4fae4afa4ea1397f7f4b6a0fd510d883b83a613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:b7:7d:2f:ac:b5:5f:c0:be:ec:f0:d5:7d:
d5:cb:7d:9d:f0:57:06:cc:41:24:b3:52:de:86:b7:
d7:c6:fe:83:48:9d:34:1e:f3:7d:d2:73:6b:7c:eb:
5a:fc:fe:b5:dc:d9:2a:98:85:92:79:b9:ef:67:bc:
b1:84:05:f7:4b:10:c8:9e:86:8c:1b:e5:ed:bd:45:
2e:1b:ec:57:ee:b0:03:10:87:d9:c6:88:fe:59:0f:
3d:3a:1f:b1:7d:49:02:8c:73:20:2c:6b:3a:68:7b:
f5:72:41:84:89:ef:39:70:3e:ec:b5:72:ce:8e:52:
77:bf:0c:b3:7e:b8:ce:01:81:1e:fb:76:22:60:d7:
87:b8:32:91:98:2a:3d:2e:a1:32:77:ec:d2:61:37:
c1:da:38:1b:9b:8e:92:1a:2f:62:75:c5:39:a7:f2:
77:ee:be:e2:63:43:0e:49:d3:d3:2b:b9:fa:92:44:
87:64:fd:52:fd:5d:77:a0:23:c6:98:6f:e4:e9:cf:
2f:bf:f0:e1:6f:d8:fb:54:83:60:a8:24:97:77:55:
62:e4:6d:f5:fb:f1:11:f9:85:df:b9:e7:a1:9d:60:
b1:55:09:2c:b6:3d:97:8f:1b:f6:3a:5c:5e:48:c8:
76:a3:49:27:ea:a2:ff:36:d1:bd:51:c3:c9:95:9f:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:E4:AF:A4:EA:13:97:F7:F4:B6:A0:FD:51:0D:88:3B:83:A6:13
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bb:1d:53:b4:7f:9a:72:68:15:0d:52:4f:3a:20:aa:72:52:
96:88:4d:4b:a4:c5:d6:49:e1:b6:a3:25:3a:24:2d:48:bf:4b:
6d:e2:43:cd:be:5d:8e:84:3f:64:5c:3b:ef:2f:60:1f:f5:42:
cd:44:14:d1:25:db:ba:f3:23:60:14:8b:b6:48:51:f0:ab:50:
ef:f7:b0:e6:be:c9:af:86:7b:f9:bd:c6:8a:f4:fc:d5:a1:94:
d2:59:65:93:52:f2:85:4e:83:0b:b1:37:73:9c:54:de:c4:30:
26:4b:c6:d9:68:c4:a3:8c:eb:29:a2:e1:10:58:58:f1:18:2c:
55:89:ad:48:21:fe:40:06:cc:03:a2:6a:2d:17:99:0e:f3:7c:
39:7e:eb:c6:ec:94:c4:12:b2:a7:6f:cc:00:72:db:a6:e5:5f:
dd:71:c2:51:bc:29:78:1c:a4:75:36:1a:5e:36:29:30:f9:d4:
55:03:b7:bf:cd:cb:c0:71:3f:0d:66:82:63:0e:99:bb:05:03:
b4:2d:d8:52:c1:1e:95:5c:26:f6:49:0c:a6:05:da:02:5d:94:
e3:bf:f0:16:68:26:66:b0:a7:55:d2:f6:3d:25:f8:b6:59:21:
69:c2:dd:55:05:4e:23:68:a6:58:d4:d6:94:ab:0a:dd:09:ea:
2b:4c:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:57:57 2025 by rpki-client