Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: 9QedKnvCbY9cyYQilxDgu3FpsUrjR0GYVvFmSWfckTY=
Subject key identifier: 10:C3:4E:C8:23:BA:51:62:5B:AA:B2:F9:E7:4B:BB:31:99:A0:57:97
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 019674FA213B7DF20926EA017EBDA1B46B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 02:01:11 +0000
Manifest this update: Sun 27 Apr 2025 02:01:11 +0000
Manifest next update: Mon 28 Apr 2025 02:01:11 +0000
Files and hashes: 1: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: r/cEFE/PgbZWZh5jtmXuVslq9+43VisY9+mqXGHHk74=)
2: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (hash: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:21:3b:7d:f2:09:26:ea:01:7e:bd:a1:b4:6b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Apr 27 02:01:11 2025 GMT
Not After : Apr 28 02:01:11 2025 GMT
Subject: CN=10c34ec823ba51625baab2f9e74bbb3199a05797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:71:ec:5b:88:fe:75:c7:bf:d9:1d:f6:06:
d6:ed:db:06:3f:9b:62:b0:00:1e:f3:27:af:b3:1d:
21:dc:cb:c6:88:b8:92:3c:f1:6e:eb:84:9b:e2:16:
53:4e:be:f8:5f:49:8b:f4:82:a0:dd:5d:28:ff:2c:
50:78:6a:cb:2d:3d:3f:1f:54:0f:6f:2b:1f:5c:bc:
d6:60:f2:cc:99:e6:7d:83:51:78:1a:aa:c9:d7:ca:
97:30:90:a2:45:77:ea:c2:ae:7e:f4:8c:2f:d1:44:
70:f5:6a:9e:72:e1:f5:9a:fa:cd:23:f9:b0:91:a9:
f4:6c:af:97:63:b1:af:ac:d2:f9:e8:c7:f6:42:70:
d6:ac:0e:24:02:0d:da:05:79:ae:80:67:3a:6f:44:
21:33:eb:d7:49:a2:bc:35:e9:f3:22:e1:a2:82:aa:
e7:9c:9d:0c:55:0d:13:73:c0:3e:30:c5:ab:38:6b:
5a:db:0e:c7:89:9f:de:cd:7e:7c:5a:5b:85:8c:d1:
95:c9:d2:cd:a6:3d:e2:e0:5a:28:7d:64:44:b4:dc:
c5:62:b4:67:85:15:fe:04:fd:1e:ef:94:06:0e:17:
10:1d:e7:83:04:73:f0:6f:1a:38:38:59:02:77:c8:
20:a6:44:b8:72:e6:fe:0d:b2:57:b2:86:d9:9e:c5:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C3:4E:C8:23:BA:51:62:5B:AA:B2:F9:E7:4B:BB:31:99:A0:57:97
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c6:6f:20:9b:9b:57:65:20:2c:58:6f:3a:b7:b5:25:c1:d1:
84:f9:26:72:a1:74:4f:65:a4:e4:6a:0e:99:92:45:08:a7:fa:
6d:9e:9d:9b:fa:55:a6:82:b8:5f:70:67:6b:57:12:e4:24:74:
80:99:4e:06:cd:1e:d2:42:7b:02:c0:f8:21:50:4b:68:8a:22:
8e:74:6d:99:64:31:dc:3d:17:9c:5a:a2:04:fe:e3:43:d8:42:
7a:da:00:52:f9:92:ca:60:fa:5d:0c:75:f8:60:bc:12:ef:2a:
8e:f6:91:d0:03:97:e7:24:0c:d6:82:7d:86:39:bd:6d:3f:b2:
73:0f:41:0f:3a:3c:9b:79:17:a8:96:bc:4d:1e:77:75:7e:45:
b5:27:18:99:12:ca:9d:c6:31:9f:c8:5d:ee:61:67:81:5a:9a:
66:ee:b5:fe:f0:67:6a:35:a6:42:d0:ee:f7:a0:f5:64:08:69:
be:eb:1b:52:6a:3f:db:f6:8d:71:6a:cd:ed:4c:00:fd:db:b4:
15:03:a0:66:77:a0:72:d7:ec:34:00:49:46:7c:41:2d:9a:fa:
c3:bf:0c:e8:5d:bb:23:6e:12:80:ca:14:f7:ca:70:37:09:02:
25:56:14:66:59:36:9e:86:7d:95:7a:f1:eb:04:3a:1a:68:29:
d6:cf:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:20 2025 by rpki-client