Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: +Lt1Kv5tVeokmqlO2qs2s2BhN8EvLI02Urtx/f2jS4U=
Subject key identifier: 9E:81:EE:0F:74:2D:2A:77:D4:F2:92:E4:CB:31:49:F8:AE:2C:AF:1F
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 01967F0F83545FBA04E5F69619CA1E6DFBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 01:00:45 +0000
Manifest this update: Tue 29 Apr 2025 01:00:45 +0000
Manifest next update: Wed 30 Apr 2025 01:00:45 +0000
Files and hashes: 1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: UX3ZyhudfTVIsCtTQqctfArdqzI5zmTw1HQBrm37jU4=)
2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:83:54:5f:ba:04:e5:f6:96:19:ca:1e:6d:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Apr 29 01:00:45 2025 GMT
Not After : Apr 30 01:00:45 2025 GMT
Subject: CN=9e81ee0f742d2a77d4f292e4cb3149f8ae2caf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:5e:40:ce:4e:6f:4c:14:fd:52:85:d5:8a:
2f:4a:d6:52:48:06:20:df:d2:e1:57:bd:4a:4b:8c:
16:19:d5:c9:11:f7:df:79:0b:87:56:86:40:b0:0b:
b0:b1:ce:a9:95:5c:8c:a0:d0:50:b9:3d:d7:e3:3d:
69:51:5a:e6:1c:23:66:31:06:b7:31:17:2c:a9:97:
56:89:72:13:c8:b8:1f:a7:55:8d:41:32:f5:ff:30:
61:ff:14:87:0f:c4:25:27:dd:25:7b:6a:ec:fd:35:
46:c4:40:c5:06:47:98:60:25:f9:73:f1:3c:3c:d2:
ed:9f:91:f8:48:ea:48:bd:50:3c:c5:46:7a:9d:ef:
f6:1f:59:63:df:cd:21:e3:5a:28:0f:bf:51:99:08:
e2:f3:fa:f8:fa:c3:c3:62:07:be:42:2c:c2:8f:51:
c0:93:52:b6:b2:89:80:28:29:cb:b2:69:29:b9:d0:
1a:bb:9a:9e:5d:14:a5:e0:96:35:34:20:22:5c:b9:
a7:35:0d:a0:b9:e2:bf:7b:64:03:11:e5:7f:c5:43:
d7:77:8c:f9:60:01:02:a6:50:30:ef:77:3d:80:3a:
c6:b3:e1:23:d1:79:3b:47:f2:3b:06:07:a5:45:dc:
8c:6c:4c:0a:cc:f2:b1:44:99:20:11:3b:4a:d6:f3:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:81:EE:0F:74:2D:2A:77:D4:F2:92:E4:CB:31:49:F8:AE:2C:AF:1F
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1a:c0:a9:c3:78:6c:36:6d:57:f3:f2:5b:5b:c3:eb:2d:66:
f3:83:4f:23:e4:16:e2:07:96:f2:5e:58:44:d9:c3:b1:8d:fc:
7b:b7:ac:c8:90:7a:0a:53:29:1b:8a:74:68:ab:71:ea:9c:9f:
f0:c8:d9:72:a2:d8:d9:83:09:8b:1f:50:95:18:6c:18:5c:9a:
25:38:dc:ec:e6:c2:f1:0b:11:41:63:08:6f:eb:41:8f:d7:8c:
97:58:81:e1:34:2c:62:c7:3b:9c:2b:81:d8:de:bd:46:6a:b0:
01:83:d0:08:4d:4e:65:33:d3:2a:62:95:c2:81:f4:8b:f0:c6:
56:14:b6:42:06:04:2e:f4:61:8d:95:76:29:a2:6f:bf:ee:1d:
02:04:e4:91:14:14:04:47:27:04:b7:d9:2c:8d:ae:bb:b2:c1:
af:8a:91:0b:8d:4e:6d:3d:6e:ca:9b:9f:4c:e0:ac:1a:2c:88:
5e:91:a7:a6:26:78:73:04:5e:53:57:f1:e1:f4:46:4a:96:6c:
da:12:49:35:9c:b9:94:91:90:9f:92:c7:d6:e9:58:b2:f0:51:
35:46:e4:e4:70:0b:52:31:14:d9:43:c0:23:81:82:31:32:e1:
1e:11:4d:d0:27:75:8b:ff:62:e3:58:e8:68:72:54:04:12:9f:
bf:4b:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:51 2025 by rpki-client