Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: QwvidMcE+vQ2Kg7LNUSmCFgbaWGq8WMPHOwt6vPOTY0=
Subject key identifier: F6:3C:30:C1:67:08:8C:FD:C4:EB:CE:67:EA:7C:06:F7:E6:DF:69:6C
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 01967ED8D34A59F8CD4F60E105D3D9C40183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 0536
Signing time: Tue 29 Apr 2025 00:01:01 +0000
Manifest this update: Tue 29 Apr 2025 00:01:01 +0000
Manifest next update: Wed 30 Apr 2025 00:01:01 +0000
Files and hashes: 1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: GZYalLgAn5DHm2Tx5iC+bCUcTYXTQ0+z0ms9VuwX+lg=)
2: XyjfJOj_ao5EyTb3E99N_HnlDMM.roa (hash: KGwUkqH7AqBxcL7k/BCVVIwTlBSdhX8/NAbdbiiMWC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:d3:4a:59:f8:cd:4f:60:e1:05:d3:d9:c4:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Apr 29 00:01:01 2025 GMT
Not After : Apr 30 00:01:01 2025 GMT
Subject: CN=f63c30c167088cfdc4ebce67ea7c06f7e6df696c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:38:d1:89:73:a2:e4:ee:20:c8:3f:8a:ef:
ab:89:36:22:14:ee:af:7f:28:0c:a4:68:a5:74:28:
69:40:2c:09:12:79:1f:b5:a5:58:fa:91:62:54:19:
8c:44:6d:1a:a4:26:ed:32:59:d0:a1:9d:65:38:cb:
f0:b1:0e:2a:be:03:82:cc:74:55:98:80:c3:91:18:
4b:40:fd:b0:61:ec:3b:5c:32:ef:0a:ee:51:21:41:
1d:67:5d:fb:18:6a:56:ee:a5:7b:f9:1b:a1:9e:b5:
63:7e:ef:da:c0:99:e9:4f:08:78:c8:50:c0:b5:fb:
ba:c5:42:4d:2b:a2:00:58:5f:ad:a0:68:e6:7f:f0:
be:79:7d:a3:fe:94:fe:19:4f:3d:69:be:01:02:74:
ab:52:87:8f:ae:83:55:0f:1f:10:1b:5f:8c:ab:82:
b5:a2:e8:f2:24:db:46:01:86:8a:7a:f6:8f:36:74:
67:2e:0b:05:c1:a1:06:fa:58:37:a6:92:c8:c0:da:
a6:38:85:27:28:74:8b:c4:59:96:c5:23:4d:ac:91:
d9:1c:a7:a5:61:f3:b1:fb:f0:3c:6a:f1:c2:08:dd:
05:eb:42:dd:67:3b:a5:1c:99:31:08:a0:80:d7:14:
d8:b1:86:f9:b1:ad:db:52:ec:ff:50:1d:57:65:e7:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:30:C1:67:08:8C:FD:C4:EB:CE:67:EA:7C:06:F7:E6:DF:69:6C
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a6:8d:9f:10:17:61:d6:47:cc:89:21:a9:7f:b0:07:77:22:
c0:c0:a6:aa:3a:76:51:1b:ac:87:d7:a0:96:87:0e:19:54:4a:
53:df:56:1c:17:54:b6:ed:37:3d:74:08:17:8f:75:d6:79:a7:
ba:de:23:f3:fd:77:4c:2f:ef:7a:5b:65:9b:0b:de:e1:6f:c7:
ea:6d:ef:36:a4:b4:28:7c:25:2a:6d:ed:af:e2:3e:42:95:d7:
58:e3:38:b7:14:3a:12:5b:0f:03:37:04:05:02:bc:d2:d4:7c:
6f:78:04:76:cd:de:b3:86:f4:51:5f:e1:01:70:f0:d2:85:cd:
30:d2:32:60:99:33:95:c4:35:44:2d:57:fa:87:1f:ed:44:dd:
48:22:df:32:8b:76:3b:6a:45:88:98:8f:09:86:12:e6:84:9a:
73:61:4b:95:66:8e:01:bb:72:3b:1c:80:b8:4c:26:99:b0:92:
06:15:29:ba:22:9b:a8:4b:df:9f:07:e1:e2:17:08:25:37:56:
a4:2a:61:32:98:d0:88:30:7f:2e:41:aa:41:76:35:a6:79:81:
fb:f0:81:41:62:8e:11:ce:a3:94:65:a2:5f:7a:12:1b:0f:28:
4a:b9:0b:60:f2:61:01:52:f9:86:e2:91:36:a9:d1:bc:22:f3:
21:2a:d9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:02 2025 by rpki-client