Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: u5wnErTB8QYSCpwxBUh0dnZ+PfDmBP8RQnzKKJGswBE=
Subject key identifier: 9D:AF:5D:C4:A5:44:DF:EA:96:95:C9:2A:ED:51:CD:ED:87:3A:B1:22
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 0196BDB759EB3F51E537A05E53777E14580F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 1233
Signing time: Sun 11 May 2025 05:00:32 +0000
Manifest this update: Sun 11 May 2025 05:00:32 +0000
Manifest next update: Mon 12 May 2025 05:00:32 +0000
Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: PcFTBjN4F/6aX0pzB/hsIePqGv+5EIwzXlMN2OMPVkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:59:eb:3f:51:e5:37:a0:5e:53:77:7e:14:58:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: May 11 05:00:32 2025 GMT
Not After : May 12 05:00:32 2025 GMT
Subject: CN=9daf5dc4a544dfea9695c92aed51cded873ab122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:01:54:5e:11:75:0c:49:68:c8:8e:12:9a:63:
a7:05:33:0a:5f:85:0d:a6:f0:f7:a7:16:ac:75:57:
fb:0d:8f:39:2e:ad:77:77:e3:fc:a6:3f:67:50:29:
cc:d4:a9:30:2e:7d:e7:09:e4:bc:35:5f:a7:51:b2:
9f:2b:3b:b7:64:68:58:90:5a:05:58:57:c3:20:93:
d3:fb:fa:14:b1:48:05:75:40:77:35:c1:49:1f:37:
d6:32:e4:c8:ee:b8:38:27:34:61:0f:c8:15:7f:0d:
00:5e:57:22:df:3b:ee:74:c9:7d:06:a9:37:88:7e:
b2:c4:16:de:e7:b3:52:83:87:9b:04:90:17:c7:7e:
0b:3f:9c:5e:d6:3c:34:48:35:e0:30:f7:2f:8b:e3:
41:44:50:b5:2d:8d:40:0b:19:5e:09:1b:6f:db:72:
9a:f8:ba:df:85:01:3a:9a:f6:04:40:a3:bf:43:49:
21:fa:ce:e8:b9:1a:a4:1e:5d:55:8d:67:04:b2:4a:
e5:ca:b6:2c:28:fd:25:d4:5f:de:82:46:7f:fa:f5:
1a:fc:9c:f4:8b:59:47:9d:89:93:05:52:11:b1:68:
6e:a3:d2:80:cc:6d:53:bb:3f:57:40:73:84:34:ad:
24:19:91:3e:0b:10:b4:61:59:44:1b:4e:56:ad:4d:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:5D:C4:A5:44:DF:EA:96:95:C9:2A:ED:51:CD:ED:87:3A:B1:22
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a7:89:7c:13:87:20:c4:cd:fa:40:49:a9:b1:e2:89:0b:25:
ea:f7:27:82:92:1b:2e:24:49:02:84:cd:63:71:84:99:e7:9d:
b6:eb:ed:b1:95:ec:aa:c2:b7:65:56:89:c9:87:31:9f:c0:28:
70:a4:eb:50:4f:50:7e:a5:cc:43:c9:eb:6a:38:fb:dc:4f:33:
9b:18:9c:b8:cc:2e:94:a1:e1:1e:77:2a:0a:86:4d:1c:0f:4c:
7e:da:f0:43:af:a5:94:60:61:01:84:be:ea:18:64:61:cd:61:
e5:29:9e:81:e1:71:72:dd:4a:da:6e:5b:df:2c:15:94:14:56:
4a:52:5e:e5:ee:a8:54:74:5c:42:05:63:ba:18:c8:ea:8d:f1:
f6:bb:3d:97:bb:fe:be:49:04:09:e3:c5:50:dc:16:8c:e9:cd:
4f:48:7c:66:eb:6b:e8:f9:2b:79:00:d0:d3:04:4e:ed:27:04:
db:d1:b4:d0:78:ab:65:84:bd:50:26:3f:3e:84:6f:43:3f:f6:
b9:74:35:b5:08:da:e1:59:7d:d1:a3:4b:8e:2b:18:08:ba:30:
48:2d:4d:4a:98:2f:2a:69:88:9b:d9:49:41:85:5e:99:d0:54:
d2:73:6c:af:b7:75:ee:48:83:d1:c4:a5:77:90:c2:76:83:b6:
86:b7:62:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:47:39 2025 by rpki-client