Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File: M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier: gdOAIQjdoDlHEhcg0WN8n6OUkvApZ3gGcAbs1EL2JhU=
Subject key identifier: 8F:B8:F5:EA:47:EB:68:5F:AD:DA:66:61:CE:E8:37:F4:4B:1F:55:70
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer: /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial: 019677FB2B973513BDAFD539DBF8A2A4253E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 16:01:11 +0000
Manifest this update: Sun 27 Apr 2025 16:01:11 +0000
Manifest next update: Mon 28 Apr 2025 16:01:11 +0000
Files and hashes: 1: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: TnSQMSxwbenrJPw6L2swvF+bQ3DfTUqpvPDOM23rzaU=)
2: ya6fLqZqW9YiSMq0_70IzMeFSTc.roa (hash: xJjaUPhHWHICcif0SwgfpErfhFmKOtPZjx5JM2GQnhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:2b:97:35:13:bd:af:d5:39:db:f8:a2:a4:25:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Validity
Not Before: Apr 27 16:01:11 2025 GMT
Not After : Apr 28 16:01:11 2025 GMT
Subject: CN=8fb8f5ea47eb685fadda6661cee837f44b1f5570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:d1:cd:b1:f9:3c:c2:27:00:a1:c6:99:9c:
8b:b7:ca:8a:25:59:52:66:75:a9:51:80:3d:d6:02:
6e:f4:b9:d0:6e:f9:dc:b7:f3:41:95:05:3b:5f:e8:
8c:cb:ae:73:ed:b9:68:a7:e1:af:a1:74:87:de:c8:
c3:f8:e6:3c:20:1c:52:ba:e4:7b:70:30:ba:36:31:
50:e1:c7:8c:82:aa:05:19:22:12:f9:86:83:a1:1e:
b3:20:22:92:88:4c:06:cc:a2:09:62:d5:34:34:3e:
18:64:ae:8a:20:e9:ee:f8:07:77:01:6b:f3:b3:e2:
aa:95:55:9e:b5:8d:5d:7b:b9:7f:a6:68:b2:bb:57:
dd:78:c3:e1:5d:c9:d7:d0:e2:e0:9c:7e:e5:b2:5f:
bf:a5:8c:2c:47:8b:8d:32:c0:b1:d7:93:51:45:cd:
54:0d:2e:b5:6e:63:91:d5:a7:f5:7d:75:42:11:c2:
ea:34:eb:40:50:35:a5:7f:33:df:99:fd:b6:49:79:
91:89:3a:99:8a:0c:72:52:19:a3:c8:af:34:69:db:
d5:5f:24:4c:10:3f:82:69:ad:78:bb:a0:f4:73:b9:
30:ac:56:bf:43:e1:b4:d5:9d:0a:50:27:2d:6f:58:
f4:bc:84:06:a5:18:7b:6b:59:d1:61:b6:e4:1b:87:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:F5:EA:47:EB:68:5F:AD:DA:66:61:CE:E8:37:F4:4B:1F:55:70
X509v3 Authority Key Identifier:
keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:59:3c:3c:d4:5b:48:0c:31:29:93:60:36:b9:90:3b:11:aa:
ed:e2:4b:fe:36:a8:19:3f:38:27:bb:43:92:12:a8:10:82:e8:
95:67:9a:a7:42:a5:29:64:fc:2e:97:72:46:58:e3:80:ef:0c:
47:dc:6f:00:50:8c:52:f2:84:e1:93:04:7e:29:f6:5f:94:80:
a7:f5:5a:1d:78:9f:d1:ec:29:13:f3:99:81:e1:7e:b3:6a:e1:
2a:71:e7:06:ad:f0:71:d3:f2:fa:86:74:5c:fd:94:04:2d:ee:
a7:0a:b7:1b:72:7a:0e:91:37:11:c9:fa:e7:f4:1f:ba:fe:7c:
56:60:8f:44:82:4d:22:97:52:05:56:d2:f4:51:bc:5b:b4:5e:
b6:e9:5a:7f:52:f3:ed:b1:d2:47:d2:f2:01:43:a5:df:1d:f9:
e5:ca:31:44:80:e4:69:15:ff:cb:d4:f4:51:fb:e3:20:b8:0b:
55:ba:35:2e:bf:be:5a:2d:77:89:4a:1a:0b:7c:df:de:81:61:
f1:7c:c4:ce:21:24:13:cc:22:b5:e4:55:02:f2:75:62:3a:ca:
43:59:44:b9:8f:04:d1:68:c5:39:35:b0:f1:46:0d:a8:3c:3f:
c8:1d:f0:a7:af:8f:60:bc:52:c6:ab:f6:08:98:84:18:a0:bf:
70:df:bb:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+yuXNRO9r9U52/iipCU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzEwY2Y4MWQyMTc3N2E5OGQzZDk5OWRjMWU2ZWFlMDU1
ZjdjM2MwHhcNMjUwNDI3MTYwMTExWhcNMjUwNDI4MTYwMTExWjAzMTEwLwYDVQQD
Eyg4ZmI4ZjVlYTQ3ZWI2ODVmYWRkYTY2NjFjZWU4MzdmNDRiMWY1NTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4bRzbH5PMInAKHGmZyLt8qKJVlS
ZnWpUYA91gJu9LnQbvnct/NBlQU7X+iMy65z7blop+GvoXSH3sjD+OY8IBxSuuR7
cDC6NjFQ4ceMgqoFGSIS+YaDoR6zICKSiEwGzKIJYtU0ND4YZK6KIOnu+Ad3AWvz
s+KqlVWetY1de7l/pmiyu1fdeMPhXcnX0OLgnH7lsl+/pYwsR4uNMsCx15NRRc1U
DS61bmOR1af1fXVCEcLqNOtAUDWlfzPfmf22SXmRiTqZigxyUhmjyK80advVXyRM
ED+Caa14u6D0c7kwrFa/Q+G01Z0KUCctb1j0vIQGpRh7a1nRYbbkG4fuCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+49epH62hfrdpmYc7oN/RLH1VwMB8GA1UdIwQY
MBaAFDNxDPgdIXd6mNPZmdwebq4FX3w8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2Ut
M2I1ZTgzZjYyNmUzLzEvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8zOTY3MDktMjBlMS00ZjdkLTk2M2UtM2I1ZTgzZjYyNmUz
LzEvTTNFTS1CMGhkM3FZMDltWjNCNXVyZ1ZmZkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlk8PNRb
SAwxKZNgNrmQOxGq7eJL/jaoGT84J7tDkhKoEILolWeap0KlKWT8LpdyRljjgO8M
R9xvAFCMUvKE4ZMEfin2X5SAp/VaHXif0ewpE/OZgeF+s2rhKnHnBq3wcdPy+oZ0
XP2UBC3upwq3G3J6DpE3Ecn65/Qfuv58VmCPRIJNIpdSBVbS9FG8W7Retulaf1Lz
7bHSR9LyAUOl3x355coxRIDkaRX/y9T0UfvjILgLVbo1Lr++Wi13iUoaC3zf3oFh
8XzEziEkE8witeRVAvJ1YjrKQ1lEuY8E0WjFOTWw8UYNqDw/yB3wp6+PYLxSxqv2
CJiEGKC/cN+7Gw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:28:18 2025 by rpki-client