Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: Jk+y3QosWazSFyOUrHPdVme7af1580Jjs5v+Fx2cwe8=
Subject key identifier: C7:31:3F:B8:74:C9:1E:A5:E2:7B:5F:26:40:EC:1B:0C:16:1D:1B:40
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 0196A0F6E9D8C348AD5606A61E5F5AA6BF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 15:00:58 +0000
Manifest this update: Mon 05 May 2025 15:00:58 +0000
Manifest next update: Tue 06 May 2025 15:00:58 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: XHPqx0/nNL9KRjjbXEktSOkjuLAwpKZ88Rbz+5IlK4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:e9:d8:c3:48:ad:56:06:a6:1e:5f:5a:a6:bf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: May 5 15:00:58 2025 GMT
Not After : May 6 15:00:58 2025 GMT
Subject: CN=c7313fb874c91ea5e27b5f2640ec1b0c161d1b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:48:18:85:d1:f2:25:e3:33:bd:6e:a8:9c:
89:cf:68:b8:49:5f:fe:a3:53:76:b8:53:45:00:f6:
00:01:56:65:8b:46:ce:e0:3a:d2:6b:19:3c:24:20:
0e:86:f7:fd:a9:dc:c0:5b:36:78:fb:5a:10:3f:f6:
3f:b9:aa:f5:f1:97:8f:71:a1:14:d6:b5:dc:40:45:
a1:6c:a8:24:e2:52:52:40:b1:27:af:ed:d1:ee:b8:
70:2d:c9:9e:ba:52:b4:19:c1:1d:b0:59:b0:c2:31:
c6:fb:92:a6:83:b8:82:51:85:ec:1d:80:21:93:b2:
9b:13:31:bb:4b:53:a4:57:28:82:46:03:67:0e:86:
de:8f:d0:cd:77:db:6d:4a:b5:3d:2f:67:d8:79:22:
a6:80:16:ae:50:52:00:19:4b:2d:c2:b0:2a:57:a7:
21:ba:95:c1:53:03:fa:1b:7f:ef:96:d7:94:ea:54:
14:45:25:bc:f3:f7:98:10:ed:5f:8f:48:69:4c:61:
33:cc:d1:80:f4:fd:07:65:19:f9:e3:fe:4d:b4:52:
ae:8f:bf:5c:7e:2a:7e:35:fd:f0:64:ca:fd:64:ee:
8d:5e:79:e5:5e:1d:0a:cc:70:0d:d3:42:5e:70:68:
33:27:1d:01:46:6b:d7:5f:e3:a3:b3:a5:3a:61:aa:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:31:3F:B8:74:C9:1E:A5:E2:7B:5F:26:40:EC:1B:0C:16:1D:1B:40
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bc:2b:db:b3:18:a2:d8:a9:bb:60:53:f7:a3:44:27:08:65:
d5:ef:82:7c:0d:92:ea:2b:55:d8:1b:8c:13:72:71:a2:98:46:
94:d4:a9:60:45:d2:b9:01:53:f4:21:a0:fd:d9:5f:b7:29:66:
95:f5:8f:52:2a:7d:2d:04:36:83:bf:f1:1d:51:b2:e9:ba:45:
9d:3b:f9:67:1a:0d:fa:83:d0:5a:7c:aa:ef:42:da:29:34:76:
b1:38:93:a1:ac:ff:df:d2:09:bd:64:96:01:2d:2c:3d:8e:6c:
0b:1d:4c:3a:50:e9:a1:eb:8d:9b:a6:da:9c:3f:21:08:75:45:
72:57:9e:52:97:02:98:b1:29:fb:32:99:39:aa:99:77:fa:14:
a1:d0:bf:0f:b4:50:cf:29:73:ca:44:30:aa:75:ff:40:81:93:
fd:00:d1:95:83:3d:32:c2:60:70:95:15:65:c9:c3:3c:16:10:
07:6e:b5:8d:d1:1b:12:28:f3:73:2b:28:75:7a:67:96:1d:6e:
3c:a5:1f:16:a2:f4:fd:b5:86:71:b3:93:38:31:62:48:f8:6c:
a5:27:e5:fb:15:a3:75:dd:5c:81:df:63:ac:8a:8c:3d:74:07:
93:2a:3d:cc:94:1d:ef:7c:b1:b7:6c:14:1b:90:e6:3b:e9:45:
cd:b2:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:15:37 2025 by rpki-client