Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: myc4/rPVp5VFQyywgI41usy6rmVJUpU4TPaQdBBRaD0=
Subject key identifier: 4E:D1:0D:D8:52:56:9D:95:82:A6:14:29:5F:EA:E4:EF:52:44:E6:E3
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 0196DB5446F4844E1385D7149BC72E08561C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 0F17
Signing time: Fri 16 May 2025 23:00:55 +0000
Manifest this update: Fri 16 May 2025 23:00:55 +0000
Manifest next update: Sat 17 May 2025 23:00:55 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: ius/Pj/4y0xf7HmUOF1cpMBIWziaVn9HwxhgdzVxe9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:54:46:f4:84:4e:13:85:d7:14:9b:c7:2e:08:56:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: May 16 23:00:55 2025 GMT
Not After : May 17 23:00:55 2025 GMT
Subject: CN=4ed10dd852569d9582a614295feae4ef5244e6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:3c:46:10:59:6b:16:de:3f:f8:7f:73:66:
5a:f7:77:15:84:6e:4a:09:6f:0b:ca:f2:3c:94:81:
63:bf:19:8e:87:06:50:a6:8f:45:ec:55:52:4f:b6:
17:93:89:77:fa:c7:06:82:f4:fe:74:7a:3f:02:3b:
47:48:5c:60:d9:55:34:36:ac:81:20:c9:c3:fe:87:
8d:38:7a:b7:75:9b:d3:8a:11:de:34:cb:5d:c1:28:
2a:1b:d6:cc:1d:5e:af:fd:f3:00:02:d3:18:7d:7f:
f7:6c:0b:f7:af:d4:9d:f4:f2:49:a6:f7:1d:60:e1:
62:e4:ec:65:ec:b5:c4:7d:41:64:55:55:c0:25:b6:
0d:46:67:10:a9:19:a4:d7:d4:9e:13:45:74:d4:38:
53:5a:22:e9:b3:4e:ca:cf:8d:c5:2a:23:55:b5:95:
ad:ab:58:df:66:27:ee:fc:1a:f6:db:33:de:e3:90:
2d:59:40:7a:e0:8e:db:ab:ef:db:b9:6c:b1:5c:b2:
84:45:54:ef:9d:81:c3:b5:35:f9:ce:85:15:5c:ca:
10:77:26:34:2a:d3:64:59:b8:ab:c6:ff:8d:fd:99:
06:e5:45:04:a7:0f:72:1e:38:20:a1:ea:ea:d8:3a:
92:4a:6e:fb:c0:f8:5b:eb:6e:6e:e5:c1:2c:c4:9f:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D1:0D:D8:52:56:9D:95:82:A6:14:29:5F:EA:E4:EF:52:44:E6:E3
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:71:fc:0b:88:1e:ec:26:89:19:cc:bc:ee:68:2d:b1:96:52:
3e:d7:2e:c4:fc:31:45:a6:e1:73:42:66:ab:8f:e8:47:75:5a:
8a:e0:fd:17:09:bf:53:0c:14:82:2b:72:63:13:d1:e9:c1:eb:
6f:89:ad:a8:32:42:ec:a4:c4:a2:ee:db:c8:81:1c:50:bf:17:
18:37:df:85:3a:a6:e1:0a:86:f5:e8:b2:97:88:3e:cc:5c:9b:
e2:c2:11:4f:05:7a:fb:94:d0:e5:f7:0f:91:9f:78:3e:cb:4f:
4b:c3:a0:46:2e:62:59:dc:c3:7d:df:c6:7d:86:3c:4b:26:bf:
34:f8:19:a7:21:2d:06:35:bc:53:db:d6:e5:10:18:ae:c8:6e:
2e:76:bd:55:84:67:71:a4:90:70:52:92:d0:5a:74:9d:4f:06:
c4:f6:01:4a:0c:7c:42:56:f6:fd:9a:ed:38:08:6f:57:dd:d2:
af:1b:25:b0:f5:6b:73:ff:a9:9d:23:d0:51:f9:87:cf:e0:27:
65:43:0a:b4:b3:bd:98:0a:ee:51:b5:4a:8e:4e:0c:6b:ae:09:
5d:aa:b5:b3:65:e7:42:57:aa:d6:22:7e:11:d2:91:2a:20:d4:
ea:43:4a:8f:68:ea:6d:39:47:6c:11:34:73:b7:86:49:cd:ec:
f5:a7:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:23:53 2025 by rpki-client