Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
File: M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json)
Hash identifier: TLnFinI6Youw5vbQNtuAcR1okK3gG5nYl1mS+dkGYJk=
Subject key identifier: 24:A7:27:3F:C7:36:5E:35:F8:F5:3A:DE:CF:46:3D:B3:B2:BE:9C:4A
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial: 019676E7C9C211CF6D35CA2F51BE0EA7BEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
Manifest number: 1424
Signing time: Sun 27 Apr 2025 11:00:23 +0000
Manifest this update: Sun 27 Apr 2025 11:00:23 +0000
Manifest next update: Mon 28 Apr 2025 11:00:23 +0000
Files and hashes: 1: FVPUO_4e4I5-OcVJQIXU4CRRPVk.roa (hash: q0KHYdYKhmIsDVg/gFGOj9HyFrWEATNN4eGecvRkCEk=)
2: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: GDH8Pu48TDw+OYKJFrtLFlLV5O3+f+O7YltSbtd/PqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:c9:c2:11:cf:6d:35:ca:2f:51:be:0e:a7:be:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Validity
Not Before: Apr 27 11:00:23 2025 GMT
Not After : Apr 28 11:00:23 2025 GMT
Subject: CN=24a7273fc7365e35f8f53adecf463db3b2be9c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:e4:94:fd:b0:b5:52:b1:0e:1f:d6:c3:1b:
bc:a8:b5:b7:77:c6:31:1f:fb:09:8a:18:d4:92:00:
65:61:f0:d3:6f:55:34:4c:ba:08:e4:f9:1b:fc:b3:
5d:bf:80:84:e6:a3:b0:f4:bf:0f:10:3f:17:f7:5b:
19:07:35:b8:5e:bd:e7:66:e7:4d:a1:6d:c0:0c:2c:
df:7a:82:f5:12:e5:1b:c6:0e:bf:bd:72:0a:24:5a:
f2:90:db:94:ef:e1:1e:7e:8f:08:f6:13:da:56:6b:
19:f3:2c:0c:6e:62:95:56:f0:72:27:fa:d6:b9:b7:
62:95:f1:99:1d:74:ca:ef:b8:51:03:21:8c:b7:f9:
f5:7b:b0:87:e7:20:2f:f0:3e:0b:cc:1c:55:0e:38:
b8:c9:55:df:86:e1:9b:b4:9c:60:d3:ea:3d:df:b8:
16:a5:05:6b:a1:d4:bf:ff:32:e9:18:d9:1f:3f:09:
6b:15:1a:35:67:d3:b5:09:5f:56:9f:43:c8:e8:1f:
43:0f:1b:be:80:14:8e:4d:d5:35:a1:50:2a:db:92:
33:c9:b6:77:31:6f:83:8c:08:af:ef:9a:1e:67:84:
bf:e2:f2:7c:fc:ac:7a:3a:68:44:15:a6:11:e6:11:
1c:59:d9:75:59:9a:e7:ab:f4:a5:5d:fe:d5:d9:81:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:27:3F:C7:36:5E:35:F8:F5:3A:DE:CF:46:3D:B3:B2:BE:9C:4A
X509v3 Authority Key Identifier:
keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2c:b5:3b:03:38:52:78:95:a9:7e:a6:46:8f:46:e0:c2:82:
b2:8e:5b:d2:c2:61:12:2c:22:35:0c:80:52:01:e8:b0:27:12:
69:8e:0a:fa:be:ef:e3:b3:b7:dd:79:23:35:52:68:79:53:57:
ff:b1:6b:ff:3c:a4:82:f3:98:c4:fd:19:20:a1:4a:93:ed:fb:
7e:67:42:eb:50:d4:77:c9:bc:c8:f0:53:71:6a:2b:de:43:e8:
c2:a7:3f:d5:14:6e:0e:d0:32:c5:73:d0:1d:a7:bd:ed:4d:08:
6c:51:79:38:e7:09:15:f8:6f:e8:02:88:bf:18:b2:38:2a:45:
cf:e8:a6:0c:6b:e6:ba:99:ea:ea:62:0e:61:4e:37:e8:58:4d:
fc:31:99:39:51:6e:bd:0a:22:a6:9b:b0:27:ad:f6:40:3c:ad:
a7:10:0b:99:7a:ac:4c:42:a6:9a:b5:d0:eb:20:5f:8f:65:fe:
df:44:5a:e0:28:06:7a:3c:86:d1:74:06:fb:3f:8c:32:62:1a:
f0:c6:cd:a6:be:d6:0b:29:29:1c:3e:e2:5d:6a:9c:04:85:1d:
1a:4e:82:29:e9:9e:ec:c0:2f:3e:8d:6d:57:dc:c4:be:bc:dd:
06:0d:7a:d8:1c:91:f5:28:0f:18:c7:5d:79:2c:13:b0:8a:9c:
9b:29:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:52:15 2025 by rpki-client