Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File: M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier: ejlC2XjlGn8fxbz6VDIfJvoAujiUXcMpQxAkKLNzicg=
Subject key identifier: 88:E1:A7:00:4F:0F:7C:E4:22:7A:A4:B6:49:AB:EA:9E:09:1C:0E:11
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 01964E2369071FDB3A5ED26E92EDC1A45860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 13:01:05 +0000
Manifest this update: Sat 19 Apr 2025 13:01:05 +0000
Manifest next update: Sun 20 Apr 2025 13:01:05 +0000
Files and hashes: 1: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: vUwCzhUXmPXoFkCbdAjjYMFMPW2kCFp4ZDIE701vGlw=)
2: eLxT2po5eGPChIMxVAix9dVpqpQ.roa (hash: 14Qj0x8EmPtQ0Mh4TujmQH1/xIMT4aZ2EIL73Ur98dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:69:07:1f:db:3a:5e:d2:6e:92:ed:c1:a4:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Apr 19 13:01:05 2025 GMT
Not After : Apr 20 13:01:05 2025 GMT
Subject: CN=88e1a7004f0f7ce4227aa4b649abea9e091c0e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:8a:4f:07:04:88:0f:31:f5:9b:5b:bc:2e:
4c:de:bd:19:74:94:bf:80:56:85:33:fa:7e:76:7d:
b6:e3:eb:7c:aa:b5:6c:5f:e6:fa:7d:72:82:da:9c:
5e:0e:ba:7e:5a:94:b6:a1:5b:95:dd:5e:0a:5a:9b:
e0:e8:2d:62:39:a3:fa:3b:65:36:9c:a2:ba:9e:b8:
2e:cc:95:10:03:b0:3a:16:67:11:6c:8f:e9:ac:a7:
02:8e:fb:b6:54:6e:f9:42:06:54:7d:28:64:db:98:
33:84:6c:5b:fe:79:5b:a0:b9:cc:a6:06:fc:79:17:
b3:6d:55:61:4e:89:76:de:2f:a8:8e:e7:16:b5:f7:
5e:7a:4e:aa:47:b3:f5:0f:40:1a:b3:6a:77:b2:e8:
5e:3f:9b:09:b8:c0:72:3f:93:8c:8a:7e:9a:84:f7:
31:a3:66:eb:6e:f8:f2:3a:36:a1:71:f7:5f:c3:e5:
39:d6:a8:53:c6:fb:af:f3:72:a6:42:76:ef:21:45:
bf:9e:48:04:1e:1e:2a:1b:94:3b:fc:8a:1a:88:48:
7e:2f:71:36:81:f7:08:92:c7:b1:0c:cb:10:0f:48:
08:49:90:1f:33:e0:26:2f:b5:fc:b9:21:03:51:7d:
f7:39:eb:46:62:57:85:30:d7:f0:8b:c1:e0:f4:4e:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:A7:00:4F:0F:7C:E4:22:7A:A4:B6:49:AB:EA:9E:09:1C:0E:11
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5b:46:2e:4a:35:55:82:28:f8:b1:24:48:71:7f:ac:c7:9f:
6b:74:90:d6:af:17:b6:89:76:85:68:84:71:75:c4:92:59:6f:
89:d4:10:af:80:08:20:6e:5d:98:7a:9d:b9:40:c9:a7:27:28:
d0:6d:c6:90:2d:b0:04:6e:89:6c:2d:6b:f2:c1:5f:cb:ef:ca:
7b:10:af:75:3b:1d:d5:71:37:fb:35:18:32:3a:54:81:e5:6a:
e8:e3:23:c2:21:68:37:87:03:2d:1d:f0:d9:1e:1d:88:9b:41:
10:26:4b:d2:b4:1d:78:ed:8f:e8:63:6d:a8:f2:19:d7:e0:57:
37:a3:9e:9d:89:d3:54:67:bc:cf:98:2c:f6:ff:73:ac:2b:4e:
99:d5:4e:7f:d0:b6:40:fe:4d:09:5f:34:99:b4:f7:34:4f:fc:
cb:3e:e8:9e:e6:94:a9:7d:14:16:db:82:a8:b0:8c:0f:79:a1:
00:fa:1e:dc:76:33:7d:40:5f:65:be:bb:dc:ea:77:9b:11:18:
af:85:c9:24:53:fd:ef:44:5d:b7:2e:f8:58:9e:0e:5c:b1:52:
ed:60:6f:67:6a:ab:08:94:17:e4:ed:b8:9c:3d:9f:8b:1b:f9:
4c:92:45:8b:a2:4a:ca:6b:63:cb:31:b9:09:ca:e6:f8:9c:6c:
49:df:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:36:34 2025 by rpki-client