Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier: sYhkGjEkSXTpLrgcGSaWigCey0HaK27HIHHNXJb05A4=
Subject key identifier: EB:54:10:0D:39:97:28:92:D5:53:BF:EC:EE:05:D6:34:40:B0:EC:7D
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 0196DE55C396981272786E749B92E1828AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number: 0F1F
Signing time: Sat 17 May 2025 13:01:24 +0000
Manifest this update: Sat 17 May 2025 13:01:24 +0000
Manifest next update: Sun 18 May 2025 13:01:24 +0000
Files and hashes: 1: CxgP4WGmDc-j3ZUPD_Rcb4uV8ns.roa (hash: XodVBcVXpLoQd1C4J0bRPfMq7vIVpbrh7r32+gpZkVk=)
2: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: 8KU30wpwL6pF2UkEj7Gy3/0iYzHBEl3Ei5AbU+HA98g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:55:c3:96:98:12:72:78:6e:74:9b:92:e1:82:8a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: May 17 13:01:24 2025 GMT
Not After : May 18 13:01:24 2025 GMT
Subject: CN=eb54100d39972892d553bfecee05d63440b0ec7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:ce:8d:c5:bf:12:9d:38:72:29:c5:e5:dd:
54:78:d3:01:fd:c7:b9:42:bf:43:b1:24:46:b5:e7:
6a:29:e8:04:55:ce:f7:2e:90:42:e4:27:a7:64:ea:
c4:17:58:72:32:22:9b:a9:01:6c:9e:5b:e2:fe:e7:
fe:0e:ce:2f:c5:6a:a5:ab:09:87:2b:b1:ad:7a:a2:
ca:33:43:3d:8f:aa:d5:41:15:ca:35:b2:12:72:ff:
fa:4d:e5:75:23:0f:38:11:93:8e:9a:2c:ff:36:ee:
32:49:b7:06:4e:8f:3a:31:98:db:a8:d3:52:41:30:
f8:af:14:3e:77:8e:78:4c:08:8a:74:d4:0c:e3:f5:
62:a0:24:22:a0:f8:85:5e:1a:50:27:56:7b:de:a5:
20:2e:13:f2:33:fa:69:4c:bf:1c:3c:ab:dd:31:19:
63:d1:05:fa:16:c9:d2:a0:f7:79:f7:f2:44:6e:63:
b0:0c:41:07:88:7f:61:c3:91:ce:11:e1:1d:2e:ce:
9b:9c:00:c3:24:ac:92:60:a9:1e:1e:4a:0a:0f:1c:
e8:d0:db:3e:d8:d3:f8:28:3c:6b:09:d0:90:00:5c:
63:e5:40:ab:6d:a9:c2:77:13:5b:0b:12:bf:4b:11:
9c:20:11:f0:cd:ab:b7:c3:86:18:9d:00:2f:ae:ce:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:54:10:0D:39:97:28:92:D5:53:BF:EC:EE:05:D6:34:40:B0:EC:7D
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bc:f7:48:c6:0a:c8:81:3b:a7:bd:f5:4f:f5:20:50:67:7c:
e9:df:59:c7:4f:2b:9e:87:94:ce:5a:e0:18:cf:b2:d0:49:5d:
a8:bc:a5:18:b4:b1:48:0d:09:3a:6f:c6:5b:31:31:c5:87:b8:
df:cd:61:1f:f3:18:c1:1d:5a:39:61:31:dc:63:eb:d3:29:c8:
09:f0:f0:43:21:5d:29:50:37:ed:80:60:d7:f3:6b:a4:03:2d:
f8:52:b2:3f:ec:ff:9f:01:8e:23:29:19:6d:c1:88:4b:5b:99:
5c:c4:f2:3c:32:e9:c7:d4:ac:f3:8e:87:3f:1b:1c:69:f8:b6:
1a:23:60:8f:b4:46:d6:2a:64:ac:03:6d:3e:1d:4d:d9:f0:57:
55:5c:07:8d:43:7d:01:5f:a9:7f:5d:20:c2:fe:0d:74:b1:d3:
15:5c:97:23:09:f5:46:63:bf:46:93:8e:55:b1:a1:bc:ef:5f:
11:ee:d1:ba:2c:01:b8:04:92:25:5b:3c:e0:21:f4:83:ed:c4:
06:9a:49:65:14:ee:54:8c:78:f6:90:a3:3c:f8:ec:40:70:d6:
74:32:3c:1b:73:6f:32:9b:c9:e6:7a:31:2c:f3:79:87:db:95:
16:94:71:bc:00:53:1e:e2:c9:d5:4a:fb:af:c5:74:2b:9a:6a:
51:cf:ff:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:49:34 2025 by rpki-client