Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: vw+AMUB67JLB3RCF8MIcdzcWwyXHRww55vPHHqJ2aHA=
Subject key identifier: 7F:82:53:0A:83:3A:DA:8D:48:81:39:7B:F0:41:FA:4E:E7:A4:9B:23
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 0196CDCFE1001FFAE000E5C09C8547AB2DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 1540
Signing time: Wed 14 May 2025 08:01:14 +0000
Manifest this update: Wed 14 May 2025 08:01:14 +0000
Manifest next update: Thu 15 May 2025 08:01:14 +0000
Files and hashes: 1: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: oqrVEyQMHT4z07VTzsjaEHYZ7+T7mUQGfP+B9nDCAUQ=)
2: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (hash: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:e1:00:1f:fa:e0:00:e5:c0:9c:85:47:ab:2d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: May 14 08:01:14 2025 GMT
Not After : May 15 08:01:14 2025 GMT
Subject: CN=7f82530a833ada8d4881397bf041fa4ee7a49b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:f9:fc:8d:a9:e2:db:73:30:cd:da:9a:ab:
8e:6c:58:23:ea:c5:d1:90:55:40:5b:da:03:93:ea:
df:a2:94:bd:44:9a:d2:54:20:3f:6f:05:5d:4b:2d:
b2:b6:ce:2e:6f:7e:25:c6:2d:8c:d7:7f:1e:dc:0b:
32:b0:fa:0e:1d:a5:3d:6f:90:8c:56:db:b5:6b:2f:
b2:2c:c1:7a:c3:40:64:8b:ba:10:b9:b4:84:50:7d:
74:f7:58:4f:de:c6:b1:17:3d:63:0d:cc:77:f6:00:
92:5a:63:b3:28:24:14:21:55:d0:78:fd:7d:29:70:
c0:e4:e6:29:37:94:2c:14:19:c5:4b:fb:c6:6e:bd:
7f:2b:fa:c1:0c:44:3c:00:81:5a:5c:e5:15:e1:5b:
9b:ab:23:f0:d5:33:db:58:1b:f9:31:b5:19:a2:1d:
6e:d7:e7:8d:ec:67:cc:63:e9:3e:ab:e0:c5:f2:e1:
54:e1:92:a4:9f:24:83:51:fc:dd:c0:96:0b:52:21:
5a:29:5c:0e:97:dc:55:10:cb:da:30:d4:1b:48:cb:
88:21:7b:77:a5:1f:61:81:75:64:52:7f:79:93:74:
4e:ab:5e:85:94:0b:7d:3b:61:b4:50:f0:ae:2d:73:
c8:44:82:d8:3b:ef:85:eb:95:db:05:3d:c7:32:a4:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:82:53:0A:83:3A:DA:8D:48:81:39:7B:F0:41:FA:4E:E7:A4:9B:23
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:db:d6:8a:7e:50:aa:ed:a4:3b:d1:5f:32:88:33:53:25:a9:
1f:df:b9:1b:c6:44:dd:4d:56:0a:9e:9b:0c:8e:0f:f0:28:11:
13:2d:1f:8b:96:7d:bc:d9:af:7a:5c:4c:3b:db:a2:66:fb:69:
95:ab:85:a4:b2:7d:10:00:c5:cc:50:e8:42:98:dc:b8:8c:90:
32:53:d7:87:3e:e5:f7:1a:6d:2d:ea:c4:46:25:7d:dd:8e:8f:
82:d8:10:a7:01:54:ed:d0:03:a2:fc:a2:0f:94:4c:99:c9:12:
9f:68:87:dd:ec:86:01:0b:cb:f6:fb:15:a2:89:cc:10:dc:6b:
c4:11:49:0f:2e:45:57:5c:b5:64:f2:71:73:59:9f:c5:86:c8:
a1:20:d6:86:c8:d8:98:da:d2:3d:3c:92:c1:5b:b5:46:7c:84:
47:73:38:a1:bf:80:09:de:5d:ea:32:b8:6f:85:58:7e:47:bb:
75:1f:d2:74:a7:34:5c:60:03:89:bd:31:03:c8:52:5d:ac:dd:
df:33:2f:92:4a:14:52:c7:1a:a2:df:e2:f1:aa:b4:45:fd:ec:
c1:b3:83:6b:7c:28:52:73:43:da:83:71:52:82:b6:5b:80:07:
6a:be:14:6f:39:41:7b:da:8e:67:ab:07:ea:bb:cc:87:96:ad:
b9:e7:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:04:56 2025 by rpki-client