Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier: /VA/9/kH0ECIsgq3wiyHFBwL5hZexeazHx7XZuID2mI=
Subject key identifier: CE:1A:88:6A:0A:85:72:16:C0:0A:30:67:F6:DB:45:EA:4B:DC:79:CE
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 01968AA61B325F2687BD0CF1EBBB49E0B5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 07:01:03 +0000
Manifest this update: Thu 01 May 2025 07:01:03 +0000
Manifest next update: Fri 02 May 2025 07:01:03 +0000
Files and hashes: 1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=)
2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: GDnKbsIZDCSsalX/sB8lCDznQJplCoNAA4ZgyV4YdNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a6:1b:32:5f:26:87:bd:0c:f1:eb:bb:49:e0:b5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: May 1 07:01:03 2025 GMT
Not After : May 2 07:01:03 2025 GMT
Subject: CN=ce1a886a0a857216c00a3067f6db45ea4bdc79ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:e5:9b:83:c1:f3:01:4e:1b:73:31:c0:24:
77:2c:79:a8:ac:c9:98:95:4a:b2:f9:fb:2e:53:b5:
e6:76:d2:d9:31:d1:d0:4a:75:4c:2e:05:4a:18:da:
64:08:e5:c0:76:45:ac:47:4a:d0:f9:a2:52:d8:b4:
35:97:f3:8f:a2:06:5e:a6:bd:a8:5b:7e:9a:a4:3d:
5b:18:bd:f2:f8:c7:00:c1:74:d8:03:7a:d2:f2:51:
8e:e0:89:ff:a2:72:bf:07:ba:d6:45:3d:65:3c:fa:
33:f9:f6:3a:0a:a2:9f:f9:63:45:7f:61:1b:0e:07:
60:e0:1e:20:d1:fd:d4:dd:50:8d:f3:2d:ae:23:c6:
d2:f4:5c:2c:e5:ba:cf:49:b2:ec:04:84:c8:7a:3a:
1b:d7:bc:5d:b1:f1:be:fc:4e:d0:c2:de:d9:02:47:
0e:f5:0a:85:c2:7b:53:c2:b9:7b:cd:75:31:ab:ff:
8f:1e:ff:2a:13:22:f1:2e:fb:d0:c9:03:fe:41:8a:
10:1e:4d:fc:04:7e:cb:69:3b:15:41:2e:95:db:c2:
ff:9b:17:dc:63:2c:c9:81:21:dd:a9:b8:a2:ad:0e:
c8:0f:e8:a8:f4:98:ae:3c:3d:af:eb:2f:64:33:d0:
29:b2:35:95:c5:e9:92:38:8c:28:7f:9f:62:b2:6d:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:88:6A:0A:85:72:16:C0:0A:30:67:F6:DB:45:EA:4B:DC:79:CE
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ee:be:0d:c4:a0:32:af:44:03:71:05:b6:ff:44:67:80:79:
e6:76:c5:1e:9b:26:47:44:cd:eb:2d:96:10:13:49:30:44:17:
03:b6:41:f7:8f:a6:5f:a4:99:73:9c:ef:d9:2a:aa:cb:cb:84:
da:97:3a:40:f3:94:ab:4c:55:91:8d:65:b3:aa:9f:b6:40:64:
02:1d:4a:bc:5d:2a:f5:1b:7b:8e:a5:32:28:f9:2a:e7:62:cd:
d4:0c:b2:70:86:82:e2:26:40:35:d1:50:4b:66:e0:ec:83:1d:
0f:25:58:a1:ae:4c:78:71:0a:43:77:c7:7c:5c:46:78:8b:be:
64:35:36:f2:e4:5d:1c:8b:b4:82:04:c4:1e:56:61:82:f2:78:
3e:7c:42:5b:00:e1:52:fe:42:7c:cb:16:db:d7:50:50:33:d8:
38:57:28:71:b2:4b:f6:6a:3e:28:a4:27:e4:a7:50:cf:48:7d:
1b:cb:86:e3:01:c9:a7:37:29:8c:11:e8:84:c0:cc:52:aa:6d:
e9:a2:1b:7c:fc:e3:7a:95:66:67:20:80:ea:75:0a:90:7a:2e:
2d:a6:e2:c1:a9:67:e2:8e:1e:d2:c1:48:17:32:68:cd:df:fa:
57:4c:8f:f0:0a:d2:a5:c9:16:82:04:b8:4e:fe:86:6e:64:ab:
0f:cf:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:29:48 2025 by rpki-client