Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
File: m5MZAlcz2oftj8ogMuP4pmBJWnE.mft (raw, json)
Hash identifier: /TvXiu3TEBcygLBYFsoY8oWj5dNzKza3P9XxBgzCcog=
Subject key identifier: 91:AC:FC:74:90:B1:8C:C2:A3:64:8F:FF:08:86:2D:46:F5:6D:EC:5F
Authority key identifier: 9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71
Certificate issuer: /CN=9b9319025733da87ed8fca2032e3f8a660495a71
Certificate serial: 0196556E99FCBA3061E9ACC3BF7B5548AF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
Manifest number: 134A
Signing time: Sun 20 Apr 2025 23:00:33 +0000
Manifest this update: Sun 20 Apr 2025 23:00:33 +0000
Manifest next update: Mon 21 Apr 2025 23:00:33 +0000
Files and hashes: 1: m5MZAlcz2oftj8ogMuP4pmBJWnE.crl (hash: o7TvmB19P+OWYGAAxtnU4mh9vnAOLIoUkKXwFgVeyek=)
2: ngQh5dUp9npBOACQWIONz3R5Xk4.roa (hash: t653pV8nTjyLsaWC3Zk3Ik5pVuX0VX8PrLjKO3PU3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:99:fc:ba:30:61:e9:ac:c3:bf:7b:55:48:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b9319025733da87ed8fca2032e3f8a660495a71
Validity
Not Before: Apr 20 23:00:33 2025 GMT
Not After : Apr 21 23:00:33 2025 GMT
Subject: CN=91acfc7490b18cc2a3648fff08862d46f56dec5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:07:90:ad:39:14:7f:2b:ff:f2:61:57:d8:
50:f1:27:6c:f5:ad:53:51:12:d6:04:4f:e5:46:73:
cf:9f:55:34:bd:7a:6a:b2:bf:e6:93:5d:2c:42:66:
ec:66:ce:52:0e:e1:a5:95:c8:d8:5e:96:19:23:c3:
b6:f7:48:83:7a:e8:98:53:3c:d0:cf:f7:e0:19:ba:
73:2c:28:21:15:72:a2:d4:40:3e:0c:38:86:0e:d9:
94:90:ea:a3:8b:59:a8:8d:78:ee:58:15:2d:77:b2:
7c:33:52:cd:55:71:bf:93:43:57:4e:5e:6f:29:bc:
6c:6c:b4:9b:c3:ac:73:cb:8f:fe:18:43:6e:94:25:
09:fb:25:85:41:34:5e:94:d4:4b:a9:80:d5:73:01:
1b:42:65:23:31:28:04:f8:de:27:9c:44:82:2e:ce:
05:ad:e3:79:c6:64:9b:ba:d9:d4:26:5d:f8:cc:b8:
bf:06:4c:f3:3e:17:3e:2e:47:90:fd:1a:4e:bc:72:
23:6c:40:89:ab:3d:15:b4:dc:3a:a6:3f:bb:de:40:
85:38:63:59:bc:e9:6e:57:33:29:36:b3:72:a0:dc:
63:ac:90:b7:57:2b:a3:fc:38:80:14:60:8b:36:62:
47:8b:75:a3:ce:d2:10:34:fc:8d:ad:ba:7f:c4:3c:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AC:FC:74:90:B1:8C:C2:A3:64:8F:FF:08:86:2D:46:F5:6D:EC:5F
X509v3 Authority Key Identifier:
keyid:9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:51:59:20:bb:ba:19:b1:29:90:ce:a9:bc:94:35:5a:34:64:
7c:29:da:5a:4c:71:75:f9:79:56:15:e8:73:92:38:69:a7:6b:
b5:01:16:77:f5:19:97:4c:5f:9a:8c:b9:7d:82:ab:61:46:af:
e0:15:c3:a1:4a:6f:2d:d9:ff:8a:03:3c:24:e5:35:1e:1c:ca:
88:8b:30:61:94:a7:a0:13:f7:53:7d:0f:04:76:df:b4:83:33:
7d:54:a6:5e:f1:43:62:c9:84:18:0a:74:9a:51:1f:e9:21:24:
43:b5:c7:93:79:24:a2:60:67:55:13:e4:26:6a:e3:b9:b9:a0:
b5:ab:69:b9:d1:b1:70:37:63:1d:d4:79:1e:5a:33:8d:7a:ac:
ff:b4:c8:25:1a:e6:4b:95:19:d8:af:d1:d3:f3:c1:6e:da:f6:
eb:59:02:a7:21:a8:d0:cb:a5:6e:45:c2:0a:c4:35:d0:63:ca:
24:63:28:03:f4:07:66:37:63:4b:03:76:7c:f8:5b:c0:ef:18:
0a:d6:f0:04:98:6f:89:0b:0c:41:e8:7a:14:ff:0f:6e:a2:09:
3f:0b:87:20:be:1c:1b:0d:ce:7e:83:95:6b:8c:f0:5c:00:d1:
c0:71:f1:84:f9:32:8d:35:b3:21:19:0d:eb:51:3c:d4:6f:82:
22:c8:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:15 2025 by rpki-client