Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: a33KHMeQhbe5N1c0VlHzE/oy4p3SRshDCCdVnU5qTns=
Subject key identifier: 5D:D4:75:7B:82:2E:D9:2F:57:EC:0D:D1:84:5A:A7:A8:7B:AF:CC:FB
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 019677FB00A5681E61D1BBA5315C4626E7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0BF1
Signing time: Sun 27 Apr 2025 16:01:00 +0000
Manifest this update: Sun 27 Apr 2025 16:01:00 +0000
Manifest next update: Mon 28 Apr 2025 16:01:00 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: XzpYTjls7Gfj0rjKmShkePvr3VBPZL+C0d3zvsEE5vs=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:00:a5:68:1e:61:d1:bb:a5:31:5c:46:26:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Apr 27 16:01:00 2025 GMT
Not After : Apr 28 16:01:00 2025 GMT
Subject: CN=5dd4757b822ed92f57ec0dd1845aa7a87bafccfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:d2:23:78:4e:fb:40:21:fa:d7:13:24:3b:
ab:7a:88:3b:d3:9a:a2:b7:fc:ce:d1:a8:55:e4:88:
73:7d:a0:ee:f1:27:c2:90:d9:b0:40:ef:2f:03:d9:
fa:38:bc:f1:90:c9:1b:56:d9:b9:f2:07:46:ff:5d:
06:c5:d5:be:d3:33:e0:94:51:aa:ff:45:12:75:8e:
a7:79:98:ac:df:1f:3b:35:a7:90:29:45:cb:1a:46:
bb:4f:6d:7b:76:27:31:02:46:9b:27:6f:ad:48:04:
54:d7:4d:d8:b6:9c:38:ae:25:74:76:0b:f6:aa:5d:
85:1f:30:de:c3:fc:2e:ef:67:86:55:2a:c9:45:4e:
3e:95:0d:e0:dc:be:34:ad:55:dc:4c:de:5c:29:45:
e5:92:0d:44:2d:20:cc:b2:f8:6f:91:f4:06:ba:e7:
65:80:72:43:9f:f4:6e:d3:0e:c8:62:63:78:e5:c2:
5a:74:5d:38:dd:b3:92:00:da:c8:0a:e7:ec:2b:53:
00:b1:76:2b:dd:58:cc:d1:1d:34:dd:bd:44:45:e0:
02:03:30:1a:82:47:2b:39:2e:9b:2c:1f:87:fe:39:
3a:ca:25:70:84:b9:e1:e7:00:ab:d9:89:bb:50:a3:
6a:83:95:0a:dc:13:ef:ef:62:cc:14:c9:9d:95:49:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D4:75:7B:82:2E:D9:2F:57:EC:0D:D1:84:5A:A7:A8:7B:AF:CC:FB
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:45:fc:e6:77:32:7c:2c:c4:07:96:c4:95:53:19:7d:c8:d3:
d5:50:c8:b5:90:59:b5:27:97:7d:76:65:35:fe:d5:b8:31:e0:
61:78:aa:b8:86:b0:03:1c:10:2e:0b:cd:10:64:cb:b2:ca:15:
a9:0e:69:f0:53:8c:a8:80:de:9f:31:d9:6e:0a:c5:15:ff:50:
b8:41:fc:dc:cf:01:89:18:0c:85:d0:5c:fc:e6:14:85:f2:59:
7a:5c:4f:ad:9a:42:a1:07:1a:87:aa:14:f3:b3:3b:19:0a:0d:
3f:d6:51:f5:ee:18:30:fe:21:d8:d6:29:9b:94:bd:51:0b:ea:
bf:14:5d:81:0b:1e:1b:96:84:1b:1f:45:91:52:a3:c0:bf:c2:
be:e4:0f:9a:38:c5:ed:8d:ef:bb:cf:c1:9b:75:1a:7d:0d:84:
ac:7c:d4:0f:a9:51:4d:46:c2:cf:78:20:e1:3c:44:48:73:5f:
7f:d1:8b:7a:d9:c4:34:1f:dc:a3:b8:06:e2:48:97:ff:9c:e4:
fc:92:36:6f:70:be:5e:17:b0:f5:b4:cd:51:55:08:bd:6e:2e:
45:d0:68:06:e1:51:c5:43:20:e0:76:15:bd:4f:09:f8:2f:96:
6c:4b:53:13:90:c9:8b:4e:75:d3:ad:0d:21:37:39:1d:60:f4:
34:c1:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:21 2025 by rpki-client