Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: Bg4NjscM9iC6BDKvZRhlfPDreuUj7ROGjiSGHo0lNuI=
Subject key identifier: E6:A0:2B:97:C7:F9:B6:7F:CD:9D:0B:D4:A2:C0:C9:80:FF:CA:FD:5B
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 01967CB3733FBCEFA47D497D681B9C425138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 0EE6
Signing time: Mon 28 Apr 2025 14:00:57 +0000
Manifest this update: Mon 28 Apr 2025 14:00:57 +0000
Manifest next update: Tue 29 Apr 2025 14:00:57 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: cuv0flhmLI3tiM+0HwaDduOYKPMUe4K5DHdXY1dj4HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:73:3f:bc:ef:a4:7d:49:7d:68:1b:9c:42:51:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Apr 28 14:00:57 2025 GMT
Not After : Apr 29 14:00:57 2025 GMT
Subject: CN=e6a02b97c7f9b67fcd9d0bd4a2c0c980ffcafd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:c7:be:7a:fb:ea:d3:c7:3c:6d:bb:cf:7b:
a3:34:c7:51:1a:e4:c2:eb:66:3f:d9:28:e6:7f:94:
88:6d:30:b4:24:5a:be:6a:b1:65:58:52:74:10:5b:
c5:3d:be:19:b1:c8:ef:8d:86:4f:c1:df:c0:1c:07:
24:b1:68:82:18:aa:4e:a2:44:ec:40:05:91:34:0c:
f8:80:54:9c:7a:15:fb:d5:99:20:3b:7c:8e:e5:86:
97:40:be:f7:6c:57:47:e3:d0:1c:14:08:15:9e:23:
27:b1:62:79:5d:ef:b9:4c:22:72:38:4f:65:dc:b9:
48:5d:96:fe:f6:cb:9e:52:96:b7:88:11:82:8d:ae:
a4:4c:e0:17:6c:2c:fd:6c:d7:cf:20:18:6d:42:b4:
be:78:e1:a0:6e:cc:d0:0a:a1:f2:de:e0:72:36:65:
19:2c:84:96:2b:7c:7c:58:b9:dd:15:12:c2:f0:0d:
10:d3:d8:34:e5:fe:81:d1:9f:d1:27:a5:0d:30:9c:
31:66:7e:17:e8:17:07:0e:d8:51:5a:8b:07:1b:1d:
9d:c6:27:a1:cb:4e:fb:69:83:e2:92:11:f2:64:bd:
5c:d7:1c:e1:0d:8c:0d:78:82:a3:07:a0:ab:1c:70:
22:05:34:98:6b:62:ba:2e:19:3a:07:0f:80:bc:fe:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A0:2B:97:C7:F9:B6:7F:CD:9D:0B:D4:A2:C0:C9:80:FF:CA:FD:5B
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:65:5b:3b:f7:b0:57:9f:66:c2:53:7e:ae:ea:b9:51:5a:ee:
f9:c4:92:1d:d0:3d:34:8b:43:50:98:f4:80:2d:12:ee:6b:ed:
23:45:bb:aa:97:5e:c6:4e:be:82:6b:f2:4e:d8:94:9d:e4:b6:
fa:f6:75:15:54:a7:6e:da:ec:2d:e0:4c:5b:df:9a:4a:ad:82:
eb:98:f6:f6:c8:cd:ac:98:db:61:fe:06:16:d9:35:fd:09:26:
99:d0:6c:b4:43:2e:f5:fe:8f:04:9a:75:93:d2:ae:4d:16:cd:
cc:30:cd:43:ee:30:12:42:f9:ab:ad:5a:73:32:4a:d5:9d:b7:
f1:f3:f1:16:c0:f0:26:86:cb:17:b5:55:ce:fe:79:84:f7:4e:
c1:12:3b:7e:8e:33:91:4e:f0:5c:f0:76:ef:10:1e:0a:d1:cd:
dd:00:c2:52:ef:79:09:dd:f7:fe:a5:ba:79:11:26:ff:88:e4:
e6:97:de:a5:dd:82:b4:f7:f2:8e:61:7f:7f:ac:63:81:90:0e:
0d:e1:a4:11:0f:dc:86:3c:ba:96:b6:d2:cb:36:21:cb:31:6d:
9a:b2:2b:6a:7d:b2:d0:c2:7c:02:f0:04:2f:25:2c:c6:58:27:
82:48:7a:ab:2a:8d:99:5b:a1:50:98:af:3b:2b:8b:a7:98:85:
17:ea:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:06 2025 by rpki-client