Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier: +rV51KqJjwJMNbKX10cfRJNDMXYa+WtSfcqTYl7WShk=
Subject key identifier: 12:24:C8:67:DA:E0:58:AA:5F:A2:B5:23:9C:89:DA:0E:91:5A:58:A6
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 01968247918D861A6316F901B93BD6B5CFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number: 151D
Signing time: Tue 29 Apr 2025 16:00:50 +0000
Manifest this update: Tue 29 Apr 2025 16:00:50 +0000
Manifest next update: Wed 30 Apr 2025 16:00:50 +0000
Files and hashes: 1: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: KmvTV0G6rYATHNVhYMH1NCIA9z0ixeu+1/gbztrSOs0=)
2: dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa (hash: tReFkDEyNqbnnxeZucnGGCRzuWm3mLRotTGRZWTwBCk=)
3: lq6yBpxyj8mQu1pcN8Yet01eUsA.roa (hash: jOVFBLabQ2MHZZoWNADP7Z+CInLcq/pubwpgW9d7+lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:91:8d:86:1a:63:16:f9:01:b9:3b:d6:b5:cf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Apr 29 16:00:50 2025 GMT
Not After : Apr 30 16:00:50 2025 GMT
Subject: CN=1224c867dae058aa5fa2b5239c89da0e915a58a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:97:a8:a0:d7:ee:9a:38:aa:18:52:c7:15:
a7:91:68:21:8c:b9:64:bb:25:76:e7:b2:f5:db:b5:
22:2b:a6:67:bd:68:48:a3:f5:62:49:e6:3a:37:99:
07:2f:55:1e:18:79:2b:cd:78:66:95:c0:dd:e3:22:
15:41:68:77:63:91:c0:b2:ac:0a:56:73:57:00:49:
b1:ed:00:1d:5b:bd:80:20:0e:2e:70:c5:67:d2:c4:
f5:12:17:49:72:5a:67:ce:cd:82:99:b5:0f:83:e8:
52:d5:ba:04:a5:c7:2f:62:9b:1e:e5:ff:bb:fa:bf:
19:0d:cc:88:33:a3:41:1a:b8:b0:a0:9b:b7:52:a6:
61:1a:d5:3b:43:de:73:46:84:93:2c:a8:b8:dd:92:
19:c6:d8:ef:a8:d4:31:53:5e:2e:c5:31:7b:45:31:
57:84:ff:4b:b2:26:e4:dd:59:4c:c4:3b:ff:26:73:
f2:86:e9:34:d5:73:82:b9:3f:45:34:3b:b8:7d:ce:
49:d9:80:f2:60:19:f0:e8:91:91:3b:17:50:a6:d6:
43:fc:68:fb:ee:96:bf:b3:f7:c6:77:d9:0f:a0:81:
35:71:65:af:9f:1d:67:d2:75:a1:0b:11:db:26:17:
93:a9:6d:82:49:6f:0e:52:1f:6a:4c:5e:b5:df:ba:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:24:C8:67:DA:E0:58:AA:5F:A2:B5:23:9C:89:DA:0E:91:5A:58:A6
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4b:29:d0:be:aa:25:08:0b:d1:c8:df:a2:3a:b7:6a:2d:64:
e0:5d:dd:c7:0f:ff:a2:16:7f:3c:27:21:d4:5b:0d:54:89:fc:
3c:f1:01:2e:4e:b7:36:51:ba:cd:e2:85:4c:c0:9b:04:a2:1f:
df:a7:4d:20:3c:0d:2b:12:5e:18:dd:79:68:54:14:5e:2d:96:
46:8f:6e:b8:b8:e7:55:8f:4c:b0:e6:d5:87:4a:0b:50:bc:16:
1c:96:ca:bb:f8:e9:d8:de:5c:f8:e1:6f:8c:e2:7f:8c:dd:24:
ec:ca:13:e8:1f:0a:36:1b:73:d5:1e:ac:89:f6:d6:01:2f:a3:
d0:74:14:ef:cb:68:3f:d1:f5:dc:f9:d1:2c:9a:6b:01:7c:3e:
b8:90:91:1d:bb:51:76:75:e5:04:40:73:02:c3:0e:02:5d:89:
28:38:4d:a7:a6:73:25:89:83:39:e0:41:4c:ab:af:d9:27:aa:
50:61:92:e6:4c:d8:87:94:55:7c:23:80:bf:62:cb:a6:bf:e1:
7c:cc:56:78:fc:47:10:66:2c:29:6e:12:2a:89:22:51:95:89:
c1:aa:0e:73:42:ab:96:19:f7:40:9b:d1:f6:bf:f1:f7:b0:03:
e8:5f:60:8a:2f:ef:6a:64:6d:df:dd:47:29:b3:d1:18:29:8b:
0f:7d:5d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:50:18 2025 by rpki-client