Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: 8TMAXB8MAEqIjoRWKs6h3lR80kGFo3leUaVDYmqsTqM=
Subject key identifier: 8A:6E:51:56:8D:EB:10:D8:77:E7:15:29:27:92:FB:B7:80:C7:78:62
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 0196C04A87E14F8C9CEF6F7C954D8BDE2CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 10AE
Signing time: Sun 11 May 2025 17:00:32 +0000
Manifest this update: Sun 11 May 2025 17:00:32 +0000
Manifest next update: Mon 12 May 2025 17:00:32 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: 53TApc+7cC5Jf7J+92DxU1p3l5rg+nhZDdWiKw20+g8=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:87:e1:4f:8c:9c:ef:6f:7c:95:4d:8b:de:2c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: May 11 17:00:32 2025 GMT
Not After : May 12 17:00:32 2025 GMT
Subject: CN=8a6e51568deb10d877e715292792fbb780c77862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:1a:43:ad:38:0d:52:8b:f0:56:2c:72:35:
67:de:c3:37:7e:07:ad:37:cc:67:9f:96:bf:e2:14:
6c:b1:b7:8b:6f:b2:69:bf:2a:76:7f:f1:1f:24:fa:
32:1d:e0:c8:d3:4a:1b:9f:aa:f8:b4:bb:85:d9:02:
72:23:0e:18:ba:8e:25:58:3d:a8:20:9a:7b:92:99:
97:5d:6d:6f:15:40:71:be:2a:82:cf:22:6e:97:5f:
80:8b:60:09:c6:a2:ce:80:ec:8b:48:1a:14:8e:be:
65:31:f1:48:ff:92:c5:00:7a:40:09:5b:95:f3:59:
4a:d2:64:89:80:f0:0f:9d:70:32:61:67:3c:4d:60:
cb:a8:4d:89:f9:04:8b:9d:c1:30:3c:e7:93:a4:a2:
4c:55:7f:b1:23:86:60:ec:76:5d:ef:94:ed:eb:3a:
03:23:27:3d:d3:bf:c8:1a:45:40:ef:ba:30:87:46:
54:8b:f4:58:6a:c0:89:f7:7a:20:57:66:cc:f4:7e:
e7:c0:d4:38:eb:d3:37:c4:b4:c8:06:4e:60:b6:fc:
ba:bd:f9:ac:b4:5e:13:ed:e9:b7:06:06:1e:97:b0:
f4:9a:04:58:0d:4c:f5:c2:07:d3:96:fc:01:83:42:
2c:5c:85:7c:c6:0f:72:29:63:a0:4e:74:60:e7:d7:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6E:51:56:8D:EB:10:D8:77:E7:15:29:27:92:FB:B7:80:C7:78:62
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f4:a5:89:86:58:8c:42:5a:05:57:eb:e7:36:17:1d:51:7f:
06:f9:ed:c0:b8:d6:91:52:fa:10:8a:49:d4:1a:07:73:2d:d3:
e6:01:24:32:d5:56:a0:5f:35:24:a6:ea:a2:20:cf:6c:00:11:
f4:74:bb:38:f8:46:6d:22:9f:07:7b:10:4f:21:0f:f1:31:79:
95:66:41:1f:2c:22:d8:11:c0:7f:ce:6d:a8:68:26:26:64:62:
fc:57:c0:16:b9:19:9a:3c:d1:5a:d3:e1:ad:05:66:36:d5:f5:
cc:86:38:2f:36:24:d0:98:89:11:91:32:7f:e4:86:29:d5:e2:
8b:d2:aa:c6:d4:ba:66:06:d1:d6:00:28:08:89:5d:ac:8b:70:
a6:df:8d:32:a3:30:04:81:fe:7a:08:26:a6:3a:8e:dd:52:24:
13:56:8f:7b:03:cb:da:13:01:4d:1f:b7:97:9e:ec:ad:10:b3:
f3:92:29:a5:62:5a:bb:6c:7b:e5:04:0c:f2:29:1d:69:3f:59:
61:60:cb:e8:fa:73:3a:2d:7a:5b:b5:91:24:a7:72:e5:bf:da:
13:c8:3c:52:6c:16:b1:4d:bd:c0:c7:41:e0:98:89:46:54:37:
f2:c8:95:a1:66:a7:3c:8b:29:08:ba:b7:d3:82:e4:ee:57:7e:
31:44:c6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:23:36 2025 by rpki-client