Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: l/CMQPVzyL1yHDA2dO1eheC5bsNj/RnCc4v13kRpKjA=
Subject key identifier: 0A:7A:63:64:C8:23:A2:27:49:E6:E2:64:75:13:EB:B8:7A:68:66:23
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 0196C6BAE3BCFF41ED4E5F28D8D9A3907B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 11CB
Signing time: Mon 12 May 2025 23:00:58 +0000
Manifest this update: Mon 12 May 2025 23:00:58 +0000
Manifest next update: Tue 13 May 2025 23:00:58 +0000
Files and hashes: 1: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: o7gLGJYi4mTCdcgL2TFnUfaOrs2u69yMZPVSBcBcCWg=)
2: w5RgxPZJeCHJ32aZdxHuHtsDhQo.roa (hash: Uc4RlDE0xm/vlOwUXxqVD6EiTzssOmMkcQ4YcA/6FLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:e3:bc:ff:41:ed:4e:5f:28:d8:d9:a3:90:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: May 12 23:00:58 2025 GMT
Not After : May 13 23:00:58 2025 GMT
Subject: CN=0a7a6364c823a22749e6e2647513ebb87a686623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:5f:54:c2:23:82:7b:75:57:90:f3:4c:dc:
d6:5a:c2:87:c6:74:a7:99:33:ca:84:2b:af:30:be:
98:4b:e1:78:4b:fb:08:56:e4:d5:d9:aa:05:97:5d:
36:7a:9b:5a:05:f8:4b:6d:2a:92:21:48:f8:d0:0a:
ed:ff:87:93:ba:a5:31:ea:ae:43:4e:7c:6b:a6:11:
a4:96:6f:c5:a6:11:44:76:1d:6b:a1:53:49:66:74:
7a:e5:84:99:a9:02:ee:be:22:9e:34:c9:4d:3b:59:
93:e0:21:0b:9d:b7:ed:43:18:d3:a1:a0:90:ab:bf:
14:a5:db:f2:60:6c:79:7a:99:52:d3:de:40:64:18:
fc:62:8f:4b:ba:da:38:d1:dd:4d:62:42:ae:b2:53:
b2:97:5b:c8:29:a4:f1:03:51:4a:50:7d:36:cf:43:
d4:37:36:e1:a6:ed:3f:f2:87:f1:e7:88:ff:8b:08:
f5:7f:01:ed:7f:55:51:16:69:df:ea:fa:65:22:3e:
4e:0b:35:2c:b9:5c:b7:27:94:fc:4c:73:b7:7e:af:
d7:d6:14:c5:05:c1:22:d9:20:21:ed:61:bf:3f:fa:
28:52:bd:8b:c4:75:c5:52:26:3a:4d:5b:9a:e3:ee:
c8:e1:0a:81:96:da:ff:73:1d:ce:49:15:ab:ff:72:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7A:63:64:C8:23:A2:27:49:E6:E2:64:75:13:EB:B8:7A:68:66:23
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:76:3b:bb:4a:09:2f:40:3c:18:04:1a:a8:a3:13:0e:7b:dc:
76:a4:d6:51:ea:8d:5d:c3:97:e6:1b:ee:30:06:55:22:8d:20:
5c:8d:3b:5a:cb:d0:51:21:be:9f:98:aa:13:56:69:55:3a:ad:
8f:5d:10:88:fe:bf:c3:18:57:82:7c:bf:4f:21:1d:45:01:92:
18:bc:1c:c2:a8:5c:55:6e:47:71:38:40:d5:c1:06:86:be:f5:
47:6d:cf:8f:2e:9c:47:c8:f8:52:59:1c:dc:83:33:b9:46:83:
34:f2:a4:98:cc:e5:f7:52:f2:3a:0e:e8:40:61:0f:8c:57:d4:
57:06:45:a1:d6:d6:03:28:b1:ec:95:a7:07:94:1b:81:34:1e:
cb:92:cc:4e:22:48:5d:2a:25:1e:9a:c7:44:8b:ed:60:57:92:
98:e0:23:ad:a2:e3:ba:23:a0:a2:6e:71:60:7d:08:eb:91:11:
65:95:f0:b2:58:cf:0d:73:2d:95:1a:6d:b2:af:73:22:f6:2d:
96:9f:6d:31:03:9d:64:16:59:47:ac:19:d3:87:1e:b0:d4:5b:
36:39:4a:a8:32:f8:27:41:4b:fd:fb:f5:0c:c6:68:01:05:e2:
3a:11:50:55:45:93:e4:d0:44:42:c3:f9:e7:00:db:69:eb:16:
0f:79:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:46:23 2025 by rpki-client