Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: C7A9+J/y9Fil+JNS6xxOYnZ5bJ86+if8qwWc1Ppysn4=
Subject key identifier: 0E:78:63:5F:7B:90:B5:5C:80:11:34:F1:1C:FF:FA:34:02:E0:C8:5C
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 0196AC1F5100AD671A8B3D06A413B3AF8390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 19:00:55 +0000
Manifest this update: Wed 07 May 2025 19:00:55 +0000
Manifest next update: Thu 08 May 2025 19:00:55 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: lFcBWWNZMMCES0T3CWMFBAbHEKORE2mjQgIje0OePPk=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:51:00:ad:67:1a:8b:3d:06:a4:13:b3:af:83:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: May 7 19:00:55 2025 GMT
Not After : May 8 19:00:55 2025 GMT
Subject: CN=0e78635f7b90b55c801134f11cfffa3402e0c85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:f0:8e:c7:b2:8c:69:98:b4:4d:62:c2:64:
42:47:6c:91:5a:4f:76:50:00:4b:1e:12:bf:79:2c:
4f:b0:d5:e7:cb:14:82:1a:2d:8e:bf:c8:05:83:d1:
82:ac:ff:7d:a5:2e:36:e4:7c:7d:9a:02:2e:55:e8:
8e:13:39:a2:fd:1c:89:3d:1b:d4:6d:da:27:07:e4:
15:8e:45:bf:eb:ec:78:ef:3d:2e:d4:ec:9e:13:f9:
15:d2:04:52:be:06:fd:f6:4f:b1:cc:9c:1a:42:7e:
1e:ff:02:50:7f:6b:65:82:a3:84:b5:bf:90:89:5e:
a8:d9:e3:9b:8b:13:a2:b2:5b:0f:13:12:1b:3a:70:
bc:db:29:e8:70:d3:3e:ec:19:fc:d1:b0:06:52:87:
de:b9:6e:0f:50:d6:ff:78:ca:58:79:8d:80:e4:40:
cb:e0:d8:87:e8:d3:d4:4e:bd:34:d5:02:e1:26:c8:
92:c0:ce:8e:96:58:d0:ad:e7:18:a0:ef:16:5c:e5:
6f:66:9f:3d:fc:08:16:6c:e9:77:1e:16:2e:85:4e:
3c:62:13:e6:58:5b:9a:47:9a:2c:e5:fb:17:a6:0c:
76:91:04:d4:85:ec:4d:ab:5a:e3:2e:5d:99:a9:9d:
9f:b8:a5:ca:e4:3e:9e:b2:c7:37:4b:d9:b2:26:dc:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:63:5F:7B:90:B5:5C:80:11:34:F1:1C:FF:FA:34:02:E0:C8:5C
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:15:72:84:b6:d0:24:83:91:90:bc:4e:53:9d:9e:01:be:98:
6e:c9:40:35:1c:54:88:ec:8d:e3:db:1a:47:4d:2b:43:1e:ac:
c9:6d:a6:74:80:b4:38:32:e2:68:b0:26:cc:7b:65:65:ef:28:
5e:ea:d0:de:3c:70:ab:9e:99:b5:10:0b:4b:bd:c7:ce:ca:81:
66:55:1e:ff:71:18:7f:3a:a2:39:0e:a2:3f:06:32:59:75:2e:
d2:b2:2f:b3:2d:62:7d:37:c7:50:c6:79:4c:41:a8:f4:c3:03:
87:9d:49:f5:21:69:8b:83:4b:58:7f:81:3a:c3:72:b7:32:ad:
36:ee:50:b2:e2:09:e1:8d:03:44:cb:90:cc:b2:61:6c:88:d7:
8c:9b:51:1e:52:96:dd:4f:f9:8a:62:b9:b3:bc:c8:7c:82:0f:
c3:bb:2a:48:7f:f7:66:8b:c5:af:d6:b7:4a:45:c8:5c:23:ad:
df:45:31:fb:a8:19:19:80:b5:47:91:2a:99:b8:67:09:9b:fc:
ac:98:aa:29:3e:85:f4:94:b1:b5:ac:d7:8e:08:78:50:09:1b:
f5:2b:4b:03:04:86:4d:34:6b:6e:b5:b7:40:e6:fc:2a:a8:2b:
e7:47:78:71:6d:77:a2:61:8e:55:27:9b:2b:1a:8d:a7:8e:95:
37:93:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:40:34 2025 by rpki-client