Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier: I8UaClzsFFNlZFxi3k8bMTs9/t68tzBImYiwdECP5+s=
Subject key identifier: 37:CF:F0:F0:7A:19:EA:89:E8:22:BB:BF:2D:F1:F1:C1:BB:05:F8:CA
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 01969FE3FB5061FB4DC5BA25DAF5F692FA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 10:00:40 +0000
Manifest this update: Mon 05 May 2025 10:00:40 +0000
Manifest next update: Tue 06 May 2025 10:00:40 +0000
Files and hashes: 1: F3E0kox0yNLNp6GPi3ZmqfgQKTs.roa (hash: UneyfmP6aoU2v1WkHtcA23llsK6rkwb/p+IXrda/FUg=)
2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: KcMieBlPpVuXn8WH4drqPsqJDLQSADo5C0V94yuxjfY=)
3: jukzQpP3Hs9hT3M_u2swPOcw5vQ.roa (hash: /+E7Xpgo8ugKY85NqX64gyU8Uakmwa+zSPYJruYsfmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:fb:50:61:fb:4d:c5:ba:25:da:f5:f6:92:fa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: May 5 10:00:40 2025 GMT
Not After : May 6 10:00:40 2025 GMT
Subject: CN=37cff0f07a19ea89e822bbbf2df1f1c1bb05f8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:d0:76:06:99:d8:94:bf:8d:68:1c:49:67:
5e:85:a2:04:2e:e3:18:0d:60:f9:99:6c:ff:58:7a:
d3:b4:76:1c:4e:18:72:52:de:3a:d5:0c:f1:31:ba:
59:4a:fa:9d:e4:d3:4f:f7:e0:ba:df:12:ae:24:2d:
8b:04:f4:4d:0f:8d:a5:78:2b:f9:b1:84:4f:05:ac:
99:94:4b:c2:53:13:10:fc:3d:10:27:d6:25:3e:68:
d7:d3:58:8b:f4:ce:62:3a:ba:3c:6b:12:65:8b:c0:
99:b4:c4:f5:84:cd:96:21:fe:6e:a8:f8:a6:4c:a3:
99:e5:4e:6b:1e:b5:b4:b5:e8:61:92:6b:2d:c6:22:
fb:e8:9b:b2:a6:11:7f:03:02:dc:19:25:19:b1:ca:
85:2b:85:d1:6d:86:40:3e:b0:f4:ab:a5:77:cc:18:
ed:16:38:14:19:58:67:0d:0c:0f:2e:bd:a5:00:d4:
6e:8e:77:f8:09:6e:5d:ad:e9:e4:d6:6b:af:c7:8c:
b2:ee:9c:bc:5a:aa:ad:e6:0c:11:b7:a2:51:c3:ff:
0c:60:6e:7a:56:c6:42:31:f6:dd:ff:ed:79:b5:b1:
9a:23:99:eb:eb:71:8c:1a:c1:b0:25:c9:52:5b:c6:
cb:03:3a:36:e6:43:21:dd:6c:8e:57:a4:3a:4d:64:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:F0:F0:7A:19:EA:89:E8:22:BB:BF:2D:F1:F1:C1:BB:05:F8:CA
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f1:e8:b2:31:f6:b1:96:63:37:4a:37:ff:0a:34:0b:59:ac:
56:09:52:c6:60:15:ac:41:bc:d1:6a:a2:72:29:97:50:78:06:
d0:09:48:69:5f:42:2a:7d:fa:ef:70:f4:4f:25:cb:d8:81:fd:
0e:41:0e:38:bd:ea:96:49:b8:34:51:b8:ce:dd:40:84:47:6d:
64:cb:ae:b0:5b:b6:80:c3:ec:2c:10:d7:87:cb:63:24:e9:08:
e9:4f:9e:99:53:5e:23:d1:59:59:2a:e5:ad:e8:37:b2:ee:42:
aa:70:67:1a:ce:65:c8:23:72:88:c9:1e:8b:92:53:f6:bc:08:
49:71:1b:c4:23:da:1d:82:fe:4c:af:35:8c:10:6f:de:29:be:
a7:99:90:ff:f3:19:d7:d2:fa:89:35:9c:0d:14:b9:2f:a9:d3:
ae:a0:ee:e7:fd:41:b5:41:08:e8:8d:0f:04:f8:4e:b9:5e:a0:
f0:9b:6a:29:63:03:98:47:c4:3b:b2:b0:22:dc:91:63:dc:41:
4a:5c:d1:d0:03:42:7b:40:3e:6e:67:ef:7a:9e:bc:33:e1:bb:
8d:d0:00:70:b6:18:fc:53:48:55:f9:90:aa:58:30:24:8d:af:
a2:c7:46:53:ad:a6:89:bc:56:4a:ad:06:d2:5f:71:cc:04:0e:
f9:00:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:41:17 2025 by rpki-client