Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: ehHPbcr1ZxF0nL6Guw2HVAC4y+fe5s5IEGbQjuDDZFM=
Subject key identifier: E3:3B:BB:A2:B9:C4:C3:F9:97:DC:1F:59:66:30:99:43:E7:0B:34:46
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 01965F4E0D4EB8B34E71F065ACF191884413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 0181
Signing time: Tue 22 Apr 2025 21:01:12 +0000
Manifest this update: Tue 22 Apr 2025 21:01:12 +0000
Manifest next update: Wed 23 Apr 2025 21:01:12 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: C0VEayXo4AgwgA9rhlPAk487F6cWoZEbYs7wSStyRyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4e:0d:4e:b8:b3:4e:71:f0:65:ac:f1:91:88:44:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Apr 22 21:01:12 2025 GMT
Not After : Apr 23 21:01:12 2025 GMT
Subject: CN=e33bbba2b9c4c3f997dc1f5966309943e70b3446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:b0:94:37:c6:de:a0:ce:be:01:7f:e7:c3:
9c:f5:dd:6f:6c:d2:8a:9c:33:5d:a3:fc:4b:4e:74:
c4:71:45:e4:07:97:2c:40:be:f8:62:0d:7f:b0:35:
51:86:0d:0b:18:81:0f:40:f7:5e:4a:b1:02:04:3c:
a3:bf:a3:9e:c6:69:b1:09:6c:49:bf:01:4b:21:cb:
33:61:3b:3c:16:8b:e0:cf:c3:d0:eb:83:30:ae:58:
13:8e:d8:c4:99:58:01:9a:98:bd:fa:46:a6:9f:64:
84:ca:19:c4:45:d6:36:81:86:5b:3a:71:79:46:7f:
47:f8:93:db:1b:3f:6d:fd:7c:9f:ec:9c:fc:38:55:
39:6d:dc:6e:87:66:da:17:7d:a9:60:b5:ea:5c:26:
2b:98:3c:e3:83:43:be:74:4a:95:e6:25:c3:4e:7a:
a0:56:d5:23:50:b8:61:2f:66:2f:39:e6:1a:b2:6b:
13:5f:51:7f:92:e8:4b:7c:1a:28:91:29:9f:ee:0f:
c2:38:6e:ac:c9:d8:c5:e8:06:2b:84:70:3d:4e:1b:
3b:73:8e:3c:81:55:72:c9:84:2c:3d:3e:b3:fb:2e:
1b:bc:9c:ab:b8:44:d3:aa:6a:d5:af:61:ae:cd:ec:
db:c0:c7:59:16:9b:61:df:c0:a6:85:e2:87:d7:fe:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3B:BB:A2:B9:C4:C3:F9:97:DC:1F:59:66:30:99:43:E7:0B:34:46
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:93:a0:99:01:cf:97:e2:d5:9e:a3:6d:32:04:e1:66:3e:ef:
5e:53:9a:77:96:53:a1:75:fa:3e:08:fb:a8:ea:7a:c4:18:de:
8d:80:45:29:88:6e:cf:ad:96:d2:51:b5:77:d0:cc:58:fe:d6:
77:1e:d1:8f:2f:f9:c1:14:1f:33:30:3e:0b:9b:f3:16:b4:12:
38:89:44:9f:87:f2:d3:c6:5e:3d:46:4e:bd:4a:65:bc:9b:3c:
11:13:11:4f:28:46:17:60:ca:ed:3a:75:be:e1:cd:69:48:4e:
f6:e8:d2:11:b0:eb:5a:82:c5:f5:86:96:fe:c9:b7:f9:14:76:
9e:c8:73:a2:e8:e5:25:3f:08:ad:2d:7c:5e:44:20:1c:83:83:
13:bc:7e:18:57:51:87:df:48:7c:c9:7b:ad:67:26:c3:e3:06:
88:f5:c4:f0:31:fc:4e:b2:ec:0a:e0:8d:3c:04:48:52:42:c1:
c1:48:e0:ea:d9:72:65:53:dd:ce:bf:94:49:6b:d2:48:3d:19:
8d:0a:48:9a:19:3f:b8:92:8f:3f:4d:b1:0c:3d:9e:ea:6b:12:
38:68:3f:e9:bd:30:5a:b4:7c:c7:c4:5e:31:07:78:86:7f:52:
e9:47:e7:5f:99:bd:db:28:9d:88:85:42:56:a7:42:c2:bd:66:
1a:9b:d0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:01:41 2025 by rpki-client