Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File: M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier: QssIAq/4JEpzxVLMq38z2jNevn9DhQaLSNe/w+iw/gQ=
Subject key identifier: DC:8E:9D:3F:F7:93:53:10:C5:2F:16:72:2C:89:42:71:EE:41:58:C0
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 0196B85A3C56ABABE0164B5A08848F723A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 04:00:43 +0000
Manifest this update: Sat 10 May 2025 04:00:43 +0000
Manifest next update: Sun 11 May 2025 04:00:43 +0000
Files and hashes: 1: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: kmKN67yFFV1ElZoK5TqzyY2p1eK1tlkzVlXCEgk/A4w=)
2: eLxT2po5eGPChIMxVAix9dVpqpQ.roa (hash: 14Qj0x8EmPtQ0Mh4TujmQH1/xIMT4aZ2EIL73Ur98dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:3c:56:ab:ab:e0:16:4b:5a:08:84:8f:72:3a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: May 10 04:00:43 2025 GMT
Not After : May 11 04:00:43 2025 GMT
Subject: CN=dc8e9d3ff7935310c52f16722c894271ee4158c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f5:5f:10:88:1d:11:cc:b4:f4:d6:b5:20:99:
c5:8c:00:af:9c:03:f2:87:fd:ac:be:af:2c:b4:bb:
c5:55:16:ab:dc:12:52:43:93:ab:c6:40:bd:32:96:
39:54:9f:9b:0a:8e:1f:3b:2d:0a:bb:27:76:80:ee:
88:22:9a:b7:ba:88:55:a8:7f:8a:d8:33:d6:6f:1c:
e5:d6:f0:82:b2:07:98:4d:63:50:e1:dd:9e:f8:a5:
3a:99:47:d7:9e:5a:eb:39:fc:4a:06:0e:08:b1:80:
75:5c:44:79:4a:ed:50:82:59:12:13:01:fe:f6:e7:
a1:75:61:79:97:d6:f9:6b:a7:cf:3c:ed:e8:5e:83:
a6:ee:64:2a:b5:91:ad:f5:64:4b:ab:67:cc:98:6e:
36:fc:84:9a:5e:3e:ba:55:ca:1a:d2:3d:0b:97:b9:
56:8d:1f:b3:1f:88:c7:d0:d3:ab:93:80:27:6d:79:
02:85:57:79:66:75:cf:3f:08:f1:b5:a5:51:92:a3:
20:66:13:f1:4d:3d:ee:42:bc:3c:0e:c2:ca:aa:0a:
9d:49:06:59:44:4f:4f:4c:3e:e5:ed:c3:bf:6e:3b:
91:89:e3:3e:c3:42:c1:7c:62:95:11:36:91:b5:3a:
67:b3:39:a4:42:57:52:8d:89:fd:fd:e5:cf:eb:17:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:9D:3F:F7:93:53:10:C5:2F:16:72:2C:89:42:71:EE:41:58:C0
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:87:41:e7:93:bc:3c:c2:4b:4d:3d:4b:83:d6:09:e2:e8:be:
24:eb:97:7f:9a:a8:39:39:79:1f:6c:96:fb:80:33:be:ba:fb:
92:4b:c3:a3:ea:5b:ae:08:51:d2:c5:b0:5f:63:c7:9f:56:0a:
56:5b:f0:79:dd:2a:a3:91:45:1c:55:e7:03:3f:e2:f6:bb:ca:
d2:a7:11:0e:5e:38:ca:b5:52:fe:48:bd:a2:f2:42:9b:e8:47:
9b:5f:03:06:00:89:be:87:0f:d6:b1:ba:bb:c8:96:82:e0:d9:
c9:dc:64:f5:40:66:35:7a:4e:40:c0:b4:9f:32:f4:00:33:69:
4e:07:3c:6e:e1:87:df:60:6f:6f:77:62:75:36:5f:e4:35:02:
a2:ba:78:a2:4b:f0:d3:dc:78:82:f4:4d:c7:25:c5:81:87:29:
4d:48:28:ba:a9:94:ba:32:27:06:69:5f:76:92:3d:f6:6a:a8:
d8:58:32:39:19:3f:7d:ae:ef:e8:ee:1e:e7:26:64:97:7b:2b:
bc:d9:88:91:b8:4d:a2:0a:52:7e:98:f6:f7:f8:2e:c2:69:cf:
42:0d:e4:36:79:ee:e4:60:88:db:b6:4f:0b:0b:3a:d7:38:18:
2c:b4:05:18:cc:60:8c:b3:d3:42:10:af:5c:01:ea:76:79:6b:
6a:46:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:53 2025 by rpki-client