Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier: 0s5q+RAXzcdPXoZTNsN55+sEdURPoxBRvsHq2UjG7W0=
Subject key identifier: 9E:7E:E7:9B:E1:83:B8:37:CF:3B:5F:D3:BE:54:10:34:36:F8:8D:FE
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 01967643562161BDEB399448F83F2C865F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 08:00:46 +0000
Manifest this update: Sun 27 Apr 2025 08:00:46 +0000
Manifest next update: Mon 28 Apr 2025 08:00:46 +0000
Files and hashes: 1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: T5yLTRMRk+KyhofDxw1im3O8BBQzgxTuLJOlfRPngGY=)
2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:56:21:61:bd:eb:39:94:48:f8:3f:2c:86:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Apr 27 08:00:46 2025 GMT
Not After : Apr 28 08:00:46 2025 GMT
Subject: CN=9e7ee79be183b837cf3b5fd3be54103436f88dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:61:5a:71:c7:6a:fb:3f:5b:d4:c5:8f:11:
63:e3:71:21:1e:11:1c:0a:82:59:81:59:f8:c7:9a:
a2:67:0c:42:7c:b6:b6:ff:b5:eb:04:72:5e:8c:51:
c8:3c:7a:31:da:c9:3e:ac:1b:41:a9:de:7b:30:30:
70:e3:fc:a1:e2:97:09:d0:2c:8c:af:47:9b:13:09:
ed:ce:94:03:51:c7:74:b9:b6:49:42:a1:fb:56:57:
bd:41:0a:1f:2f:36:6d:d3:01:43:85:23:f5:8c:f5:
0e:5e:07:44:aa:6b:c3:13:66:1c:6b:48:46:7c:06:
02:2c:e3:63:33:85:5e:67:aa:b7:79:fb:58:99:a5:
72:cc:9f:bd:e4:2f:fb:6e:3b:5a:1b:54:69:82:54:
48:ce:5f:56:ae:cc:7a:ec:e6:2c:ce:76:60:78:0b:
86:0b:83:79:38:0c:87:d3:a4:c7:89:cf:64:e4:13:
5a:57:c1:91:6e:fb:ba:c3:14:d1:ed:ae:57:9f:e8:
f7:f1:e8:6a:c3:ca:7b:8c:14:31:4d:b4:46:fd:ac:
b0:d1:f3:e9:eb:3d:da:e5:96:fa:26:74:f5:70:c8:
49:d1:c4:b5:cd:a4:e2:e5:91:e8:bd:65:16:24:c9:
41:2f:a8:a4:74:30:85:10:89:d4:3d:f1:73:c9:59:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7E:E7:9B:E1:83:B8:37:CF:3B:5F:D3:BE:54:10:34:36:F8:8D:FE
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:60:34:a1:12:ea:ed:4d:07:78:c7:fc:0f:63:90:ba:cc:d0:
04:ec:ea:c6:c7:74:69:64:2a:98:30:0e:ed:63:20:c2:b0:93:
bc:6d:33:e2:25:fe:21:e4:61:2b:dc:16:a4:b6:d9:89:85:90:
a9:75:a8:b1:91:e9:fe:6e:d7:a2:e4:39:fd:5d:68:36:eb:b6:
6e:58:0a:1d:77:a5:5a:6c:0c:f9:3e:bb:29:38:73:8f:52:2d:
08:d1:76:04:00:4a:7b:08:16:01:df:7a:73:56:cc:d0:7c:ea:
7a:f8:f7:65:22:65:c0:36:71:7a:db:8b:b3:56:4f:d5:6e:42:
47:4e:06:97:c1:fb:0d:34:38:7a:1f:ad:da:e4:0f:df:72:da:
f7:a0:c3:87:09:75:aa:68:a3:33:56:a7:32:4b:65:4c:c7:5f:
cf:1f:67:94:f7:ff:d8:ed:7c:2b:3b:30:86:53:ac:c2:e2:57:
a7:26:d6:ef:ec:f0:9c:25:80:44:9c:44:a4:7b:f7:bb:94:b1:
b2:0b:04:fb:6b:ec:2a:2a:b2:3a:97:97:25:d6:61:54:8b:ba:
b2:7d:be:61:92:f7:20:3e:6d:9f:82:37:3a:ed:27:c0:69:bc:
43:6d:f4:ad:9d:80:15:de:25:4b:0c:68:1f:1b:bf:3c:0b:74:
bb:1d:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:45 2025 by rpki-client