Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: kdC0vSN+diN6uhn0EWgsTj+QflG/DwVJGJJaxXarTgQ=
Subject key identifier: D0:D2:54:9C:E2:68:C4:2A:58:F0:D5:44:A2:B1:FB:8A:1F:FB:00:72
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 0196C6156138774517BAF772CB5C085D9B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 07D9
Signing time: Mon 12 May 2025 20:00:11 +0000
Manifest this update: Mon 12 May 2025 20:00:11 +0000
Manifest next update: Tue 13 May 2025 20:00:11 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: eejEUaZy1CJWTITSo1sp6+r9NeUp9bR/k5ejpB6HLQc=)
2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:61:38:77:45:17:ba:f7:72:cb:5c:08:5d:9b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: May 12 20:00:11 2025 GMT
Not After : May 13 20:00:11 2025 GMT
Subject: CN=d0d2549ce268c42a58f0d544a2b1fb8a1ffb0072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:3c:90:9c:1a:4d:b5:ed:09:48:46:ec:57:
2a:04:8c:1f:1c:88:ed:26:56:4c:14:b0:54:c8:2a:
2d:2d:24:87:7e:0a:ab:b1:0d:69:46:38:d5:69:bb:
3e:29:4b:71:7b:36:04:e1:12:ff:12:47:fc:88:7c:
ff:c4:ef:ad:b3:f1:88:2f:f6:73:6a:ff:2a:ee:9e:
aa:a2:0e:01:de:38:16:ef:6d:ee:37:71:8a:7b:04:
ff:67:15:c0:7f:3a:4a:7a:ed:03:71:1c:b3:01:9c:
a2:59:37:56:81:dc:81:00:fc:a3:1e:50:50:4e:91:
1a:bc:b3:10:02:71:84:8f:d6:bb:55:bd:06:4b:dc:
a1:f0:cf:81:5b:2b:7e:23:71:60:b1:f3:02:f0:c7:
68:fe:f3:89:08:08:f1:21:b9:d5:8e:be:6d:9a:0d:
2b:8d:58:d5:af:37:25:43:b3:a0:42:1b:b2:a5:ec:
f5:1a:9e:57:40:92:c3:73:f7:da:14:e1:8d:79:ac:
ec:0e:65:a8:70:eb:71:e5:9f:49:ae:f3:45:a8:64:
36:e1:e2:d6:2b:20:a4:bb:c2:73:89:b6:54:23:ba:
5c:da:b8:31:3d:9a:4a:c4:16:0e:95:8f:bc:eb:6f:
93:46:54:75:bd:2c:a7:57:22:b5:0b:63:30:67:75:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:54:9C:E2:68:C4:2A:58:F0:D5:44:A2:B1:FB:8A:1F:FB:00:72
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0e:39:81:7a:84:c0:6c:66:59:ff:f9:2f:62:36:ff:36:ed:
3f:24:03:6e:d0:23:8b:74:a4:12:c8:0e:8d:a9:e2:d9:61:0b:
1c:77:f0:7d:27:1b:4f:cf:5d:bb:ab:14:fa:8c:79:9c:d6:26:
dd:fc:b2:53:33:4f:70:17:1b:98:18:84:44:49:7c:a9:29:fb:
5f:71:2c:de:43:ea:ac:34:12:8a:1e:1d:39:b8:23:70:71:12:
f1:e0:25:f9:b6:40:14:7d:1c:4a:8b:e8:43:43:8e:c8:78:2b:
44:26:99:6d:21:45:1e:29:ca:4e:2d:e3:15:82:82:c0:b3:07:
11:84:76:c9:cf:0a:e6:b5:43:6a:f2:38:c1:99:6d:49:40:43:
79:96:7c:28:44:62:18:8a:d8:24:bf:71:bc:9b:b2:06:85:b8:
9c:18:ea:c1:45:e8:41:e8:26:5c:be:73:7e:c7:46:8b:4d:c4:
21:82:27:f6:62:e4:d1:f6:98:76:84:09:65:d2:44:5b:b9:ae:
8a:b9:a0:0f:6f:4e:2e:8d:b5:11:6d:9d:3c:76:9f:62:e2:ac:
93:e3:ed:ad:3c:14:5d:ef:92:21:16:26:b3:6a:80:0c:f2:41:
e6:9d:b3:ec:dd:6f:65:28:67:ec:96:d4:d0:04:26:1c:b6:74:
1f:60:1f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:01:49 2025 by rpki-client