Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
File: M6Udf_AtIfrBk65K7R8MOVbORRU.mft (raw, json)
Hash identifier: jyEmgvABXyyqL2UEL7oGhU/cWdrg/o+VM1v6p6lFYfY=
Subject key identifier: 50:CE:24:BC:04:20:E7:05:7D:EA:D4:0D:BE:F6:98:AC:63:D3:80:1C
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Certificate issuer: /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial: 01967E6AB5E105E02A05ACD0C69C75138CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
Manifest number: 14A5
Signing time: Mon 28 Apr 2025 22:00:44 +0000
Manifest this update: Mon 28 Apr 2025 22:00:44 +0000
Manifest next update: Tue 29 Apr 2025 22:00:44 +0000
Files and hashes: 1: H2UoMEQTfVfxYbD6DFEWnWSxzqY.roa (hash: oJCJ/WCUnFQh0GodJuWi0NgjkG4tPt6myP/qxDdyB6E=)
2: M6Udf_AtIfrBk65K7R8MOVbORRU.crl (hash: JMKGXtGM7FmZmvxbt2N1mwa9U7gO3Bp5YjORJ0vZKSY=)
3: OcsKAT2NPT0ZOF4-_8aYdFedfrQ.roa (hash: hRZG/6yJi8ntHxlEybLhU4Ft+uUUaPLYRTeNmVj2zdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:b5:e1:05:e0:2a:05:ac:d0:c6:9c:75:13:8c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Validity
Not Before: Apr 28 22:00:44 2025 GMT
Not After : Apr 29 22:00:44 2025 GMT
Subject: CN=50ce24bc0420e7057dead40dbef698ac63d3801c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:be:2d:3c:92:32:54:d8:8a:1b:47:ba:2e:
f9:8f:27:df:15:31:7d:86:49:09:32:9d:6a:27:c9:
0c:c8:b2:ce:b6:42:96:d2:88:bf:df:60:de:0d:3b:
d9:3c:cb:fb:e8:e6:9d:2b:e1:e1:63:4f:c5:d4:5e:
4b:75:19:bb:bd:33:b0:a7:b1:1b:1c:bf:00:79:56:
e5:7b:dd:51:02:03:78:23:04:53:9e:cf:e0:05:a3:
98:9e:8d:c8:8d:e2:df:ad:c4:05:45:aa:3b:ed:1d:
1f:d1:88:55:8e:58:49:f4:6b:29:96:ad:cd:8d:39:
a4:ad:1a:4e:a9:b5:cc:0f:02:38:d7:dc:33:a2:34:
44:12:1d:41:3b:d6:a2:d7:ed:0c:68:d3:44:c6:10:
ac:e1:ae:06:75:8a:bc:e5:db:4d:d7:97:95:70:df:
f4:a4:54:f6:31:fd:dc:76:f8:82:18:8d:5a:66:94:
ca:8f:a3:8a:d7:a6:02:39:e0:00:0c:8e:78:c4:62:
f3:4e:b9:41:a2:2c:80:fc:1e:d9:96:18:0d:0a:ce:
ba:55:13:31:60:ce:ae:7f:6d:af:af:02:98:79:ab:
93:51:b7:04:d0:a3:83:6b:c3:eb:17:18:c5:7d:48:
64:81:a4:19:df:48:aa:51:42:c5:cd:7e:40:fa:b3:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CE:24:BC:04:20:E7:05:7D:EA:D4:0D:BE:F6:98:AC:63:D3:80:1C
X509v3 Authority Key Identifier:
keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:89:75:39:ca:31:92:78:69:2d:c6:8d:92:1d:ad:15:6d:10:
0f:23:82:38:d6:e5:77:49:c4:22:41:d6:da:47:8b:0f:f4:40:
50:a4:4f:a4:45:73:f0:fa:b2:16:de:bd:26:0b:39:a5:3b:85:
22:a6:79:1a:60:f3:a0:01:9f:ea:32:31:8f:8e:d6:90:92:12:
9a:f7:2f:e9:1b:67:db:d3:39:e0:ad:bc:f7:dd:c4:cd:87:d2:
7d:5c:5e:4d:88:d1:1c:69:75:a6:13:9b:3c:d1:24:ea:0a:29:
d1:4f:93:d0:81:27:e2:8a:a9:8f:ab:03:eb:42:56:04:d7:e7:
25:02:c5:52:3d:af:34:31:7c:91:9f:6f:20:98:77:ea:a9:67:
8c:6e:e4:23:59:06:cb:ba:be:25:3a:81:10:a6:78:c6:17:a1:
58:30:8d:97:3a:bf:c0:6c:85:5f:53:d4:b9:17:83:2d:6b:77:
52:5e:5a:96:34:11:87:61:9a:f6:36:4c:bc:eb:6c:22:fe:cd:
d6:05:20:6a:3c:91:f9:3c:e4:46:aa:1f:c8:71:aa:6d:4a:d4:
a2:1a:c3:51:5d:92:ff:c8:51:97:4a:94:d9:75:29:c9:0c:eb:
c5:49:7b:7c:a7:ad:67:a6:7e:df:16:45:1d:fe:3b:ac:c3:12:
79:54:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:11:45 2025 by rpki-client