Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File: M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier: C2iibbJfuZimUFE1NiqO8kR1RYWbszjvJfrW6RFCu48=
Subject key identifier: FE:88:3C:0A:86:AF:BB:FA:7C:82:04:FC:E0:15:0F:43:EE:53:9D:C1
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer: /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial: 019658A6D519C49944363885CB1813880126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 14:00:50 +0000
Manifest this update: Mon 21 Apr 2025 14:00:50 +0000
Manifest next update: Tue 22 Apr 2025 14:00:50 +0000
Files and hashes: 1: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: 6zIOepk6tt0YjBUNYfS4TFXkxYXkdvcasAqTbpuYJy4=)
2: azxmi2se1IK95xXGAVKvEPH21_A.roa (hash: Ss+Ca/k8A0fp5KqEjbn4GKd8EzNY8mejKpcvQRG6Wdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:d5:19:c4:99:44:36:38:85:cb:18:13:88:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Validity
Not Before: Apr 21 14:00:50 2025 GMT
Not After : Apr 22 14:00:50 2025 GMT
Subject: CN=fe883c0a86afbbfa7c8204fce0150f43ee539dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:d2:ee:dc:c2:65:ba:1a:cc:3f:9c:b1:bb:
a0:b1:95:b2:d8:ea:8d:62:cb:1b:bb:89:cf:38:4b:
f5:36:b8:71:4d:81:be:d2:6a:5b:76:d9:61:6d:1f:
07:3f:6d:00:c1:36:a8:8d:bb:88:9c:3b:05:4f:e1:
b3:e2:94:23:3a:52:a7:80:d3:32:5f:de:d3:df:bf:
ec:f4:16:2a:6e:8c:de:0f:c4:b7:ff:0e:02:aa:a6:
6e:1c:3e:20:69:ea:2c:00:8a:ad:1f:6d:db:94:e5:
d5:5a:92:ae:d7:32:e7:7f:12:52:a7:bb:0e:7d:88:
26:3a:90:86:c5:a9:22:a4:7d:fb:22:14:32:f7:60:
88:25:df:42:05:16:b1:ba:17:c1:99:38:fb:30:03:
48:2a:4f:df:87:4f:8d:a0:29:44:d3:02:a3:a1:63:
fe:86:15:2a:27:81:6f:46:ff:20:10:26:d4:ae:33:
95:38:0c:a5:db:06:1c:e5:2e:b4:7e:7c:7b:e9:4e:
ae:5d:09:ff:30:cf:9f:7d:c9:c1:ed:c5:9b:50:a6:
fb:ff:b2:ac:91:c8:ca:0c:76:09:dd:fc:5f:dc:43:
0b:6d:9f:36:0b:e2:c4:40:58:8b:8c:71:f7:c3:a5:
66:1b:19:c6:50:df:b1:eb:b2:9d:50:16:33:1f:a3:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:3C:0A:86:AF:BB:FA:7C:82:04:FC:E0:15:0F:43:EE:53:9D:C1
X509v3 Authority Key Identifier:
keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3d:19:92:03:bd:61:fe:7c:95:0b:bb:ca:ad:60:45:04:be:
d0:5b:c9:07:db:67:95:47:97:d0:bf:00:9a:95:2b:ec:cb:b2:
54:00:f8:ed:c1:58:29:9e:d1:2d:d9:5e:b6:7e:8b:87:9d:1b:
bf:09:45:b5:17:10:3b:db:fe:02:1f:33:e3:fc:fd:5c:d7:db:
5b:cc:56:23:4e:eb:91:e0:f3:ae:99:53:4f:47:dd:b2:98:9e:
20:6d:b0:b6:9e:53:ca:01:7c:c4:e2:56:b7:49:1b:14:2f:f9:
8e:4f:58:a0:a9:04:1c:b6:c3:20:c1:32:bc:51:a7:3a:03:c5:
ff:6c:4a:27:af:89:aa:59:bb:65:97:47:e3:55:12:b9:10:3f:
6e:1e:df:5c:bd:d4:45:9f:ad:87:75:66:08:dc:b2:89:30:70:
5d:49:e0:b9:9f:44:ff:76:b8:9d:e4:98:cd:86:6b:d4:c0:07:
4c:d0:b0:02:65:68:c0:ce:ab:01:f7:99:29:32:e3:56:8f:0b:
b0:5e:4b:99:b4:82:16:59:4f:49:61:62:78:74:17:9c:3d:ab:
ec:74:a7:fb:b1:b9:f2:c5:88:0f:5a:01:54:be:3c:e4:2a:55:
81:91:e5:b5:5f:fc:e1:f1:9c:7c:aa:98:3c:f8:56:6b:ba:3b:
26:ba:82:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:12:23 2025 by rpki-client