Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: CEf/bVxVCjXsn3P1ma/g6DHcEPhqbQakRhEkxtaLt3A=
Subject key identifier: 0D:C1:C8:F4:5E:62:4B:24:9E:DE:B2:F3:26:21:EA:FA:76:3A:14:63
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 0196BBFFEA9DB99B5A72A1FC66BF9D2F577F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 01B1
Signing time: Sat 10 May 2025 21:00:33 +0000
Manifest this update: Sat 10 May 2025 21:00:33 +0000
Manifest next update: Sun 11 May 2025 21:00:33 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: ME4XORCGhlir48XiW+1hNu85+m4/AOWk1paXG4mSO6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:ea:9d:b9:9b:5a:72:a1:fc:66:bf:9d:2f:57:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: May 10 21:00:33 2025 GMT
Not After : May 11 21:00:33 2025 GMT
Subject: CN=0dc1c8f45e624b249edeb2f32621eafa763a1463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:45:f3:1f:9c:6d:8f:46:87:dd:d4:4f:b2:
93:ff:5f:b4:0f:10:56:1d:dc:bd:28:df:80:d5:06:
e0:45:08:f6:ce:09:31:f2:18:2c:ed:c6:7d:ab:9c:
c4:07:25:85:a9:76:44:5a:3a:b2:98:5d:40:1d:95:
9b:84:82:e9:03:49:68:2b:45:ae:5a:f9:49:43:95:
0e:a6:86:07:55:59:4a:bb:75:a0:7c:0e:c1:a9:c5:
dc:7e:0f:0b:5f:a2:d2:f1:6a:25:cb:8f:68:4a:98:
07:d6:f8:98:00:71:52:dd:92:d2:bf:b0:cb:22:cf:
38:d2:e3:2d:9a:63:ee:74:a7:67:51:32:05:88:c9:
e9:b2:4e:51:16:d3:26:8d:3f:b9:ef:5a:91:62:f2:
86:7c:df:40:e1:e5:07:10:f1:a2:4e:81:29:51:f0:
8d:6e:a1:e3:80:77:a0:5f:8a:c0:41:40:a6:e6:f0:
da:9d:f6:69:cf:79:ad:38:a7:3a:65:19:03:5c:44:
88:a3:02:00:be:76:4c:9d:aa:30:72:df:c3:ed:b8:
74:2e:51:cb:18:50:04:14:fb:ae:8a:a6:d7:18:fa:
f6:d3:6c:c9:9d:ce:36:9c:a3:5e:6a:4a:8a:45:8c:
ec:ca:d5:af:81:3c:bf:69:b4:3f:8f:4c:94:cd:8f:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:C8:F4:5E:62:4B:24:9E:DE:B2:F3:26:21:EA:FA:76:3A:14:63
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fe:2c:0d:35:0e:9e:28:ec:2e:62:27:9f:dd:00:ef:36:ce:
40:a6:f0:10:a3:d7:f7:67:cf:63:5a:49:cc:0c:12:f1:92:30:
d6:2b:86:63:57:48:2e:e8:c4:78:c9:63:42:6d:21:7b:9f:90:
e5:3b:eb:87:c4:75:97:b9:35:07:d8:e0:90:5d:94:51:5b:c2:
f2:97:92:a1:60:17:fd:cc:ea:40:c6:57:86:71:f7:45:bd:b0:
75:f6:7c:da:6b:b3:63:0b:81:ed:fe:d0:74:69:6d:52:93:7a:
ec:d8:07:39:7e:ee:b9:68:53:23:8e:0c:3a:85:1b:56:99:25:
a2:d7:d0:c4:69:d3:ba:62:88:49:8f:a6:10:b7:78:2a:81:45:
e1:6e:c6:ad:e5:42:4e:8b:f4:1a:b1:d5:17:5f:90:b5:47:87:
36:0f:82:7d:f2:5d:4e:b2:3a:d1:4d:7d:da:7b:85:2e:44:8a:
0b:56:12:4f:e4:0b:ef:87:f1:e1:e5:2d:8a:27:63:9b:17:03:
1e:1a:e5:60:89:a3:cf:8f:5c:83:56:ca:71:43:8b:27:4b:59:
f8:95:f7:1c:26:a1:95:36:3d:ef:58:8e:62:ce:2c:20:dc:cb:
21:6b:57:89:26:32:e6:c4:ec:b7:30:53:6b:8f:9e:86:cc:ec:
0f:23:cf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:26:38 2025 by rpki-client