Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: 37hiWxC3fCYG52+Q9F3HLVg0CFUIX8UNjMWddgB8Guo=
Subject key identifier: 14:EC:32:B9:2A:AB:72:22:27:79:24:DA:35:D3:C9:56:D6:E7:CC:B5
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 0196827E742CCCE1D3834B7EBA6775F12F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 108E
Signing time: Tue 29 Apr 2025 17:00:47 +0000
Manifest this update: Tue 29 Apr 2025 17:00:47 +0000
Manifest next update: Wed 30 Apr 2025 17:00:47 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: Uo0jqHuBjKQ9pf5mD/JQfzBqX+Q/MAJUGawL4pNjCOE=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:74:2c:cc:e1:d3:83:4b:7e:ba:67:75:f1:2f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Apr 29 17:00:47 2025 GMT
Not After : Apr 30 17:00:47 2025 GMT
Subject: CN=14ec32b92aab7222277924da35d3c956d6e7ccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:f5:2c:58:64:ad:54:6e:30:43:2d:51:26:
1a:64:95:35:45:96:e6:bb:47:41:1d:9b:1d:9e:76:
d7:35:5d:48:d7:93:1e:83:66:c2:16:7e:b5:15:d9:
d7:17:f6:20:63:ac:c6:bc:d9:f3:c9:62:66:12:14:
5a:b9:3e:0f:65:1f:b2:d3:d9:a4:d6:dd:db:8c:a7:
26:52:36:6a:32:88:c6:7d:66:9b:a3:d0:f8:1b:50:
df:9e:55:0b:15:b5:3d:38:91:57:b6:9b:d7:92:f1:
4b:17:ea:9c:27:bc:a0:49:96:c4:48:96:3b:e6:78:
e2:f0:be:f0:39:38:a3:17:8b:30:7a:31:80:89:13:
18:a3:fe:56:e9:fa:6a:a4:1f:a1:8a:ae:e7:01:80:
30:85:96:da:29:2e:7c:55:e4:b4:24:ad:a2:52:14:
ca:ab:c9:53:4f:6b:d1:9d:e5:fd:b0:54:6a:37:50:
83:f8:75:95:e9:57:61:45:29:e7:07:e6:b3:3e:a0:
a4:77:5e:2f:ef:d2:50:0b:34:48:0f:98:bd:80:1f:
fa:71:c6:b3:1f:f8:c1:39:1a:33:9e:3a:81:19:58:
38:54:ab:8e:e2:c6:a9:c4:34:e3:02:d6:79:2d:75:
62:76:56:fb:99:50:c2:39:f7:31:df:82:e1:83:c5:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EC:32:B9:2A:AB:72:22:27:79:24:DA:35:D3:C9:56:D6:E7:CC:B5
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:20:ba:7f:5a:4f:d8:2b:47:b9:23:48:af:37:c5:77:69:75:
4b:bc:d2:43:16:3a:cd:90:0f:3d:70:74:54:2d:0e:ba:1a:26:
b3:07:0a:8d:f6:76:65:50:34:db:f0:4d:4e:24:68:f7:8e:f9:
6a:11:9a:ac:24:96:8c:ce:48:6e:34:33:ea:72:1e:1f:3d:8f:
13:68:f3:ab:be:c2:13:53:96:a3:e9:91:ee:f4:40:50:4a:8f:
b5:a8:84:03:a7:0a:b8:55:c1:03:3a:70:d4:0f:54:13:7b:af:
c0:2b:f6:51:5e:da:d3:c7:d9:e2:82:2d:3f:ef:0b:08:3a:0b:
32:71:73:b5:2e:9d:5a:b1:23:69:ee:c1:98:81:cb:5d:1e:b8:
ff:98:44:fb:d9:5a:40:e3:53:4b:ce:17:0a:55:7a:11:48:83:
7b:11:63:39:4f:08:3a:b6:95:37:cf:59:7a:ab:6b:9b:9f:ff:
1b:c1:60:dc:8d:b3:bb:f6:d8:30:75:56:be:03:44:a9:a3:6c:
56:9d:f7:04:69:3d:94:16:8d:ca:fc:ce:1c:d6:bd:19:aa:90:
1b:9f:72:6a:25:04:03:55:ce:14:6c:3c:7c:71:89:76:5d:89:
32:67:fe:d6:0f:d5:81:4a:46:c4:7b:1a:ee:1c:16:a2:10:bb:
ce:6c:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:27:38 2025 by rpki-client