Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier: qPfIYh6LuucEjUl3DjWiEV5g7zqI0Ay5bZQxVpZQX1Y=
Subject key identifier: 5D:18:5B:7B:E5:C8:5E:F5:EB:B3:73:3D:98:BD:F5:9A:4C:C2:FE:77
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial: 01969560C5265E9DFAE42AA9FFB277420462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number: 0656
Signing time: Sat 03 May 2025 09:01:09 +0000
Manifest this update: Sat 03 May 2025 09:01:09 +0000
Manifest next update: Sun 04 May 2025 09:01:09 +0000
Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: 2FPfei/h8jlwx/iRMEAxJHVW92gneNYts7Ovc/81W+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:60:c5:26:5e:9d:fa:e4:2a:a9:ff:b2:77:42:04:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
Validity
Not Before: May 3 09:01:09 2025 GMT
Not After : May 4 09:01:09 2025 GMT
Subject: CN=5d185b7be5c85ef5ebb3733d98bdf59a4cc2fe77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:fa:f8:94:93:6e:09:12:18:77:68:36:61:
d5:57:e8:4a:ed:63:48:c3:ff:fa:34:6a:35:ee:60:
c2:d0:88:0d:35:9d:cf:82:fa:42:07:d2:ff:9f:40:
61:13:58:0c:6d:ef:f1:c3:d1:04:f7:7e:21:25:b2:
d5:29:33:f6:33:10:3d:e2:24:e6:81:e1:6d:6d:57:
bc:26:e6:d2:65:48:85:9f:59:90:5d:54:5e:bc:80:
c4:84:8d:ba:37:5d:6c:6f:cd:8c:10:a0:c0:f4:ca:
2f:43:a4:62:0d:a7:aa:5e:48:bf:bb:ea:2e:25:68:
04:d0:0b:73:af:5c:91:30:a7:97:58:1d:c0:e1:0e:
a0:8a:0d:ba:62:4a:b3:53:72:50:17:f0:5f:7c:14:
2d:7f:0f:c1:68:e5:d2:c5:18:73:c7:59:63:6f:9d:
25:a1:61:6d:91:6f:61:67:9b:e2:62:4b:a7:4a:ca:
3f:98:cc:e6:8c:ba:9d:4c:fe:1a:f9:2a:2c:70:56:
9d:bb:43:31:da:dd:47:c3:dc:b6:fd:7c:3e:b9:1d:
61:ef:22:c0:44:2d:dc:92:2b:ea:7f:30:e5:bf:96:
c6:35:7f:c3:47:86:83:65:33:02:2e:66:50:f2:30:
10:24:98:da:10:c5:3c:bf:8b:1d:23:0d:04:3b:14:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:18:5B:7B:E5:C8:5E:F5:EB:B3:73:3D:98:BD:F5:9A:4C:C2:FE:77
X509v3 Authority Key Identifier:
keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ce:5d:98:c8:2a:70:4b:1b:ae:c5:aa:02:48:45:a6:37:5b:
3b:78:a8:05:51:16:6c:c0:e3:51:26:bd:96:2a:8e:bf:a6:ee:
5a:69:ac:d0:b8:af:c1:4d:24:37:a0:27:d6:f2:13:fa:12:6d:
86:ab:9a:59:33:db:a7:d9:f6:32:3e:6d:d8:d7:06:bc:39:23:
78:dd:a6:7a:e6:9f:43:a0:3c:f0:46:a2:fc:e7:af:9f:ac:54:
f4:9d:9b:59:2f:fc:fb:f7:ed:55:be:95:45:e2:67:ed:37:dd:
0d:42:6d:4d:23:9a:f2:6e:8f:88:eb:e1:94:48:6b:0a:0e:d9:
73:b7:aa:70:dd:1e:ba:d0:cc:6d:7a:57:d5:22:57:fc:e9:90:
d3:5e:d3:6d:46:49:59:6b:2b:cf:1a:17:81:77:42:4e:3b:57:
63:0d:89:4f:aa:3a:35:1b:90:e1:59:9f:92:4f:71:a3:01:66:
b0:d7:f8:00:68:6a:b7:72:fe:02:06:dc:d6:61:64:6c:c6:6b:
3b:71:c2:df:b6:81:e3:4c:b4:8b:e8:31:99:d1:8c:a9:4b:13:
71:99:2d:23:bf:ac:49:df:32:da:bc:33:24:ed:4f:6f:b5:4d:
f5:2b:ae:cb:2b:dc:6c:90:58:81:cc:3f:ec:1d:93:57:45:28:
5f:ba:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:05:48 2025 by rpki-client