Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: PWeP/ktiEGxfAlOIvVNCJwZW0MQFNvpeBQP8V9eqP/g=
Subject key identifier: 96:6A:6C:D1:5E:5F:B5:46:79:72:17:DC:D5:EE:4D:A9:68:3A:D6:CC
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 019689CA26B892115593E7CCD67C15D15C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 03:00:48 +0000
Manifest this update: Thu 01 May 2025 03:00:48 +0000
Manifest next update: Fri 02 May 2025 03:00:48 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: 4FVknIWMBZfg+jJT+ywFOKC8dJwm3PsquwOEc33PGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:26:b8:92:11:55:93:e7:cc:d6:7c:15:d1:5c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: May 1 03:00:48 2025 GMT
Not After : May 2 03:00:48 2025 GMT
Subject: CN=966a6cd15e5fb546797217dcd5ee4da9683ad6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:e3:55:c9:44:74:e4:b3:bd:2b:b9:78:1a:
e5:66:ed:53:2b:fa:65:2b:27:f3:58:97:23:7b:35:
f2:d7:52:0c:d6:b0:54:78:6c:ac:85:e5:e2:0c:24:
20:3c:ab:fe:91:7a:bf:49:81:92:05:46:8a:83:d5:
ae:95:e5:10:c6:a0:0e:dd:67:e5:6d:6d:27:77:ab:
d3:bf:4d:2d:35:ce:cb:2c:d0:1a:d2:5f:41:c8:cc:
64:76:3d:7c:87:96:4e:f1:8b:e5:18:99:0b:65:41:
28:e2:0c:6c:fd:71:56:5f:2b:48:29:e5:84:22:2a:
0d:f9:9c:22:6a:42:8f:1e:bb:96:04:c5:f8:96:5f:
0c:ba:8d:ea:b7:f5:8c:4f:c5:17:4d:b9:f5:11:67:
5c:c5:21:b8:26:23:0c:47:c1:8d:4b:be:09:89:56:
3a:65:86:9c:b7:81:44:58:ae:1b:d0:ed:ef:26:3c:
fa:55:ab:7a:d3:5a:1a:1f:f1:76:a5:8b:d4:ee:c6:
43:dc:81:e4:71:44:ee:59:f4:d9:73:f2:3c:60:5b:
50:a5:d4:d9:3b:c2:69:23:f3:a7:58:fb:38:b6:c4:
9e:8f:e5:20:31:87:04:39:9b:a4:d9:c9:e3:5f:ad:
ee:f2:20:69:2e:b8:b5:e7:65:08:6f:58:f5:ae:34:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:6C:D1:5E:5F:B5:46:79:72:17:DC:D5:EE:4D:A9:68:3A:D6:CC
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1f:ea:33:b4:6f:2a:fc:c3:f3:85:2b:9a:25:67:92:e3:c6:
bd:3d:6e:ff:8d:34:16:8d:b2:9c:0c:95:a0:8d:7c:3c:dc:7e:
45:1a:d4:9c:02:4f:86:24:e1:30:07:a1:3f:aa:c3:b0:41:51:
53:17:c0:c0:f3:b4:93:01:9d:fc:7b:76:5a:4e:6e:16:35:ff:
de:d3:3a:e8:27:ad:4e:3a:04:d6:aa:af:87:13:e4:8b:85:d6:
bc:4c:1d:9e:32:66:6a:3a:87:da:16:b3:96:8f:13:96:03:21:
c4:ef:7f:49:48:dc:7e:3e:f1:45:e4:44:b3:44:55:e7:38:e7:
a2:25:25:e0:34:3d:e0:03:33:d4:f1:06:42:07:64:54:d4:ed:
55:3e:5c:db:58:89:9a:fb:3f:d1:82:d9:b9:fd:42:b3:e9:5e:
6b:22:33:a7:89:68:a1:22:c4:d2:99:67:e5:14:a6:4f:1c:63:
89:a1:19:f1:75:92:41:64:3c:b1:9f:5a:aa:9f:00:43:1c:c6:
8f:7e:d3:a7:46:41:9e:5d:12:6c:29:15:dc:40:ed:97:b6:59:
92:04:2e:d2:3d:24:cd:ed:2d:0b:57:b5:9b:10:dd:4d:30:4d:
d8:c9:c8:08:b4:81:23:da:6b:29:7a:8c:7a:bc:42:21:5e:6e:
06:81:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:02:03 2025 by rpki-client