Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier: g13dqHZMJ+djeyehBl5Pv1HUkui99nmPycqb12IFIto=
Subject key identifier: 86:F4:E0:FD:5C:B6:27:D8:CB:0D:6C:56:1A:FC:21:4F:28:24:95:0C
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 01962C059AF15AD84402337819D25661971A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number: 14EB
Signing time: Sat 12 Apr 2025 22:01:26 +0000
Manifest this update: Sat 12 Apr 2025 22:01:26 +0000
Manifest next update: Sun 13 Apr 2025 22:01:26 +0000
Files and hashes: 1: F3E0kox0yNLNp6GPi3ZmqfgQKTs.roa (hash: UneyfmP6aoU2v1WkHtcA23llsK6rkwb/p+IXrda/FUg=)
2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: yHYuPFnOa6PvX07QJiiEiculGSH60XFAQSPkd19Rh0w=)
3: jukzQpP3Hs9hT3M_u2swPOcw5vQ.roa (hash: /+E7Xpgo8ugKY85NqX64gyU8Uakmwa+zSPYJruYsfmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:05:9a:f1:5a:d8:44:02:33:78:19:d2:56:61:97:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: Apr 12 22:01:26 2025 GMT
Not After : Apr 13 22:01:26 2025 GMT
Subject: CN=86f4e0fd5cb627d8cb0d6c561afc214f2824950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:a3:09:43:eb:3b:21:af:e1:66:4b:de:eb:77:
74:a5:ac:10:8c:ae:eb:3c:62:f2:85:09:95:63:47:
db:77:c3:bc:b6:a7:e7:90:74:37:f8:61:54:d3:ae:
0b:db:5e:d9:39:79:69:eb:61:99:f7:cc:1c:11:c3:
c1:74:4e:6a:4e:24:06:41:ee:3a:e6:3b:9b:b8:fc:
3d:c9:bb:86:d5:11:9a:3f:35:ae:17:84:90:b1:8a:
7e:99:7b:5f:1d:24:b7:a9:e9:0d:e8:f3:18:59:a0:
1d:1d:21:e7:0b:bd:d8:26:90:09:cc:5b:d9:51:a3:
a4:cf:ed:e0:4a:4f:d1:32:9f:23:f3:e7:08:5e:9d:
50:7a:4f:70:63:4b:16:33:77:dd:9a:f0:b2:90:d8:
62:c6:92:9b:6d:ef:bf:6b:e3:a5:9b:35:e2:fa:31:
dc:6a:79:dd:5a:34:39:5a:a6:b8:d8:1d:33:4d:ea:
f2:48:a3:1d:36:e8:0a:dc:b7:a4:e4:1d:2e:7d:62:
d7:40:a7:8d:be:4c:ea:26:be:f2:38:7b:02:c1:3c:
08:59:91:e3:dd:6a:33:b6:2b:74:9c:f8:28:b2:04:
cb:1d:6a:82:c5:31:99:7d:55:17:c2:87:aa:89:de:
9c:4e:6d:f6:05:62:35:22:44:9a:d7:f7:70:9e:e5:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F4:E0:FD:5C:B6:27:D8:CB:0D:6C:56:1A:FC:21:4F:28:24:95:0C
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c8:4e:fe:96:25:4e:14:ca:39:e6:48:ab:19:1a:13:97:b8:
94:a4:06:7c:77:50:f0:0e:e5:20:4c:ba:7c:11:b1:35:0d:c6:
6a:fe:92:55:1d:d1:1c:3e:25:52:8d:aa:dc:f9:d9:66:2e:45:
78:df:20:47:46:af:2e:31:3c:68:83:cd:6b:98:e9:23:60:a1:
af:3e:1d:f8:6d:1b:9c:83:b9:ab:89:77:27:a8:3f:64:d5:e2:
6c:96:08:f4:bd:da:04:e0:68:aa:0e:97:dd:95:35:bb:4b:04:
52:44:3e:16:f3:e7:83:30:af:7f:03:a7:06:07:df:d4:7b:97:
93:98:48:45:80:e4:49:a5:e3:85:bd:03:e6:3e:3d:9b:a9:ea:
6f:af:5e:e0:b3:45:67:26:e6:fd:0a:72:48:b9:0b:38:a2:93:
7e:52:a3:35:b9:83:8a:f3:cc:82:03:ee:1e:31:d7:d1:84:1f:
15:77:62:ec:ad:fd:7a:c5:9d:35:f8:c9:64:0d:3b:51:9a:84:
d9:44:a5:14:72:1a:b5:11:39:cd:6c:5c:92:34:fb:2d:ae:3a:
2e:f9:48:1e:3d:b6:d6:fe:69:49:68:4f:6c:51:4e:18:e6:8c:
8f:44:32:6c:49:9a:fd:f2:e3:37:78:1c:d3:a3:54:0c:5a:03:
f6:59:e0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:07:16 2025 by rpki-client