Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: qenvTr5GrXsRbcnmX1+YOlDtI1F5GNlML5NZ3zLsGfk=
Subject key identifier: 83:CE:02:5A:63:B1:9D:89:B1:5C:69:E3:22:34:1E:8A:D5:9A:7A:53
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 0196C9F27B97A86AAB9600C7D6F4B3E503A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 14:00:33 +0000
Manifest this update: Tue 13 May 2025 14:00:33 +0000
Manifest next update: Wed 14 May 2025 14:00:33 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: BzLKUPW7VrNE05aFh6ce/ccagQdheuQ7ErcGngQY8w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:7b:97:a8:6a:ab:96:00:c7:d6:f4:b3:e5:03:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: May 13 14:00:33 2025 GMT
Not After : May 14 14:00:33 2025 GMT
Subject: CN=83ce025a63b19d89b15c69e322341e8ad59a7a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:72:70:71:09:2f:55:5c:4c:4d:56:c6:2d:
c8:3f:2a:04:1e:e1:24:ae:74:10:13:6d:df:98:76:
7a:08:95:2c:e5:ff:ae:7f:e2:a9:6d:07:55:9f:b4:
49:28:a4:78:0d:d1:50:23:80:8f:6b:1c:0c:93:5d:
14:b2:21:ca:ed:60:58:49:b0:3a:4d:05:bc:b9:82:
6b:53:1b:cf:47:cb:aa:cd:56:d1:79:bd:ea:b7:24:
04:db:dd:73:4d:7a:92:6d:20:05:2d:cf:30:1c:ed:
24:17:4e:8c:6c:3d:9a:16:34:33:5d:63:fd:0d:ec:
e8:a3:d0:74:96:98:28:c7:82:7c:dd:fa:11:ff:bb:
c9:da:93:cb:d3:53:9a:df:c1:ae:25:85:d1:0e:1d:
d7:07:57:74:74:af:bb:2a:ab:71:8d:55:fa:2a:ee:
7b:16:be:a2:ef:c5:85:cb:57:f5:80:51:0a:f1:3d:
1e:05:9d:5b:77:5c:7a:6e:e7:8b:ad:5d:33:fd:83:
77:65:20:e2:2a:2c:fe:5d:7a:09:35:91:b5:6d:5f:
05:3a:fd:65:72:d8:bf:db:91:78:0b:41:87:a9:24:
bb:12:c1:0a:6c:f2:8a:aa:ae:2c:5a:09:5d:34:33:
95:44:45:3b:46:3f:99:b6:2d:a5:83:38:99:1d:e1:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:02:5A:63:B1:9D:89:B1:5C:69:E3:22:34:1E:8A:D5:9A:7A:53
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:67:43:59:98:ff:10:5e:b8:63:96:fb:e0:04:ab:cc:e4:f3:
78:7d:bc:b5:95:05:f8:e0:ca:ef:7f:2f:c9:69:bf:99:0b:51:
60:22:de:0d:4a:5f:7c:b2:a1:40:6d:ea:9c:6b:95:b8:d4:09:
40:eb:6b:e9:18:f1:58:14:76:a5:3e:82:cf:b8:19:a0:b8:df:
53:ff:67:78:a6:95:0d:9a:01:8a:c1:24:99:bd:22:78:2e:b6:
39:18:b0:c7:ec:a0:cd:b6:f7:30:1c:3f:ef:78:ed:78:17:df:
45:dc:52:ba:5d:97:97:ae:b5:c9:25:3d:b4:a6:6a:c2:71:2b:
52:8a:50:cf:6a:d5:9e:78:a6:41:3f:de:82:b0:19:79:49:ad:
43:ef:44:73:33:ae:74:73:33:2a:53:0e:cb:89:29:87:02:19:
00:e5:88:b2:b9:c4:7d:a4:57:c7:fd:63:4b:78:f6:6b:ed:29:
25:76:93:00:41:70:6a:87:d9:64:0d:aa:2f:bb:9d:4a:0e:12:
c3:f9:b7:f3:2e:82:3b:55:c1:5b:54:73:52:e5:7a:53:5c:e5:
33:90:58:5d:d7:c6:e0:40:4a:bf:31:81:ed:fa:39:2b:b5:cb:
47:aa:15:8e:b1:c6:97:ab:d4:02:ab:02:80:36:5b:a2:25:ad:
70:2a:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:45:26 2025 by rpki-client