Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: xOEuerk3NzS8gaR2mKwMVvZ57EGlv3Z3P7br3cGgPak=
Subject key identifier: AF:2E:91:D8:9D:FF:19:D1:C8:A4:96:47:0E:9F:DE:6A:20:D1:55:F5
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 01968F957D15AE7F3459ADCD12528F5F8DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 06:01:00 +0000
Manifest this update: Fri 02 May 2025 06:01:00 +0000
Manifest next update: Sat 03 May 2025 06:01:00 +0000
Files and hashes: 1: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: wvZSv5rat2wQSGMlFXieiKQfxyfAyvorEHfVRvsE1ds=)
2: RYELhtEFcsCmVORqbpstU7Crut0.roa (hash: aIhBm/rb3wVRspojE1k+QXWmo713Q+h8iYk1yzSNDKA=)
3: wFOiJmPx91gFud4szSTNVGIfLik.roa (hash: KJL3tTISnToS4chRnmNiRq6jQUDoMI15K3mK8EPpyi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:7d:15:ae:7f:34:59:ad:cd:12:52:8f:5f:8d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: May 2 06:01:00 2025 GMT
Not After : May 3 06:01:00 2025 GMT
Subject: CN=af2e91d89dff19d1c8a496470e9fde6a20d155f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:0e:1f:d6:a2:86:b1:71:fc:a2:b6:93:ec:
6b:b1:37:83:bf:98:2a:b5:a9:0d:03:2e:83:38:bc:
68:2d:4b:ef:f1:7c:41:2f:3f:96:3d:e5:10:72:21:
38:53:79:cc:20:97:12:0b:1e:1c:75:c0:f1:a8:2e:
7b:9a:aa:ba:4a:c8:ec:e9:26:c6:0e:5c:3f:6b:35:
2f:72:76:81:ba:91:bf:51:42:45:b4:d3:f5:2e:a0:
09:04:80:bf:b7:8e:30:23:9e:37:3e:84:1d:a7:2a:
22:16:b9:66:56:93:48:63:ce:12:3b:f4:43:2e:29:
62:cf:1b:07:53:62:76:a2:4d:b5:38:fc:10:ec:82:
88:0b:0a:e0:d3:be:11:c6:ed:94:c1:5f:a7:81:47:
31:be:f9:09:fc:f5:7f:02:89:34:0b:72:3a:1e:c7:
0a:6f:6b:b8:bf:b5:99:b6:99:d1:d8:24:17:8b:42:
2c:19:94:c5:ff:e9:d8:bf:15:3e:f4:17:bd:2f:cb:
9e:bc:8d:c1:f6:7b:06:29:5d:d3:cc:d7:76:a7:8d:
79:59:05:17:bc:ac:04:48:78:ee:11:4b:a3:de:00:
b5:13:9f:f0:1c:20:b0:20:1d:bf:5f:da:b2:ba:06:
3e:4f:9d:5a:3c:d8:83:49:b9:10:2c:61:f5:6b:71:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:91:D8:9D:FF:19:D1:C8:A4:96:47:0E:9F:DE:6A:20:D1:55:F5
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:80:33:17:25:ea:f0:85:bd:d9:60:81:5a:10:5e:1b:1b:2b:
ea:ce:50:28:f4:3b:b6:72:fa:a8:7e:4f:a2:cd:90:38:2c:4e:
5a:99:9d:23:3a:3d:9b:8a:1b:00:3e:88:a0:9b:04:9e:9a:f7:
14:bf:f6:f7:6a:a2:21:30:99:52:2d:d7:ef:27:31:9b:47:9f:
ab:be:3e:55:7f:76:70:2f:4b:98:f2:42:e1:7d:cd:40:5f:f1:
e2:d1:f2:80:54:96:0f:e8:80:00:0a:a0:4c:0a:fb:42:de:fb:
24:b2:5e:8c:22:42:51:23:b5:cf:8e:ef:29:0a:4a:4a:b1:ee:
d5:de:07:cf:8c:73:a1:32:88:f3:6c:17:f1:4b:f1:4f:52:f3:
b2:8a:46:8e:41:2b:bc:3f:3f:65:92:00:0f:49:0c:fc:04:1d:
4f:76:7d:c7:b0:77:2e:bb:cd:1c:ea:ce:d8:f3:92:64:0e:14:
3a:83:22:1e:21:5f:78:f4:0d:d6:48:54:5e:79:b7:56:5e:53:
d6:2c:27:19:d8:96:27:03:d6:4c:d8:43:2e:2b:f1:6f:5d:ac:
e0:73:a7:de:f8:48:fc:d7:ef:7f:97:3e:f2:8c:de:b9:51:04:
4a:c9:40:cd:9a:86:25:f5:de:76:f2:f1:0c:a9:b1:7b:e0:fe:
56:78:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:59:18 2025 by rpki-client