Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
File: Marcypb0SkVzktiQfGuWS-D8-SE.mft (raw, json)
Hash identifier: 29QepbhV6XawDPI/vFNDmPvAsm0cOdB6lk/Uz0T3yX0=
Subject key identifier: 44:9F:B5:0D:06:43:8F:B0:EB:28:5E:B5:97:64:8B:BF:01:0D:63:A1
Authority key identifier: 31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
Certificate issuer: /CN=31aadcca96f44a457392d8907c6b964be0fcf921
Certificate serial: 0196BE5C4F4BB092B4EAF903E0E5EED22A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
Manifest number: 0C2B
Signing time: Sun 11 May 2025 08:00:42 +0000
Manifest this update: Sun 11 May 2025 08:00:42 +0000
Manifest next update: Mon 12 May 2025 08:00:42 +0000
Files and hashes: 1: Marcypb0SkVzktiQfGuWS-D8-SE.crl (hash: PtkZf1v1EcpUdgZcKtTAX85YKRy/VjE7TyAgqUzonOY=)
2: XFj03ZPCOj3qqoe8oMNPGmud9a4.roa (hash: m6E7RZQpvmKbh+R69KgZ6bmoskHz5Bb8/AlaawR8U/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:4f:4b:b0:92:b4:ea:f9:03:e0:e5:ee:d2:2a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31aadcca96f44a457392d8907c6b964be0fcf921
Validity
Not Before: May 11 08:00:42 2025 GMT
Not After : May 12 08:00:42 2025 GMT
Subject: CN=449fb50d06438fb0eb285eb597648bbf010d63a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:b3:82:ac:2f:68:2b:9e:ba:f0:e9:24:7d:
48:e0:71:00:b7:26:d7:64:0f:81:41:a7:52:3a:32:
71:1b:eb:47:a5:6a:76:88:20:a6:0e:f1:87:ec:53:
eb:1c:33:95:9e:27:98:5e:01:e7:85:e9:4b:2f:05:
84:d1:60:ed:aa:ce:97:78:92:ca:ae:34:67:29:2e:
96:7b:f0:5c:72:1c:f4:78:aa:53:e4:98:8f:f4:9a:
6b:de:b8:14:3a:13:d2:ea:4a:2b:51:cf:40:f1:3f:
22:e1:7f:ac:9e:ab:dc:84:2c:df:ae:0e:cd:37:5e:
e4:5f:dc:80:ce:2f:9a:b5:87:6c:9d:a0:3b:53:86:
9e:fe:f5:6f:f7:82:3a:a8:e8:8e:64:20:5c:de:b6:
5f:5e:24:21:89:b4:9a:38:a7:82:99:06:04:94:10:
c0:9c:eb:bb:a2:36:09:b4:0f:3c:f3:ec:00:28:f9:
aa:a3:93:e3:08:5f:95:53:68:a9:97:bc:89:43:74:
83:2c:50:1e:10:81:4f:4b:68:1f:e8:fb:d9:d1:60:
98:87:74:a5:62:8a:44:a2:08:aa:b9:9b:a1:2b:c9:
63:45:2b:c5:b6:80:8b:0b:fe:e2:83:cb:36:06:8f:
f2:6b:ab:ef:ac:cb:f8:71:f3:48:69:dc:4a:ab:ff:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9F:B5:0D:06:43:8F:B0:EB:28:5E:B5:97:64:8B:BF:01:0D:63:A1
X509v3 Authority Key Identifier:
keyid:31:AA:DC:CA:96:F4:4A:45:73:92:D8:90:7C:6B:96:4B:E0:FC:F9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Marcypb0SkVzktiQfGuWS-D8-SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/666786-561c-4bd0-a7b0-8f7fd3dc15fe/1/Marcypb0SkVzktiQfGuWS-D8-SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:e9:a4:44:4d:af:08:37:b0:48:99:e9:cb:b0:01:50:7c:
e5:93:2c:99:23:ab:19:44:b3:8d:fc:d8:04:2d:8b:99:2c:12:
dc:18:cc:8a:9a:df:a6:39:24:f4:3e:6c:bb:ef:8d:bb:09:0e:
60:aa:69:bf:14:34:d9:05:cf:be:63:4e:b8:85:86:93:14:fd:
65:bd:48:8f:b2:90:e9:b7:56:a8:14:52:3c:76:a2:23:8b:b8:
2d:c9:17:32:a3:26:d6:7c:09:e3:57:24:ea:f8:c3:50:01:33:
38:f0:e2:19:77:79:61:92:d0:20:7e:f9:bc:00:cc:e6:fb:6d:
ab:63:d7:31:9c:9e:72:d8:af:91:bb:b5:f6:f4:08:3b:53:7f:
ac:96:df:83:4c:13:da:9d:6f:2f:92:94:4b:5d:3a:2b:d6:4c:
fe:65:c0:fd:f4:5d:a5:f1:36:bd:2a:a9:68:f3:8b:19:45:81:
4b:40:e1:1a:39:50:82:af:13:5c:ba:de:8f:19:34:43:30:f2:
5b:91:d8:51:59:e8:f7:ac:b9:52:16:7c:2e:6b:82:47:91:9b:
62:e1:70:ae:f2:07:84:1d:a0:9c:96:a5:e4:bf:45:6e:bc:fa:
f4:ba:35:a8:a8:ed:54:3f:7e:39:e3:7f:6b:65:b8:ae:36:58:
b0:43:b4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:17:27 2025 by rpki-client