Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: tfCQ0MrRoHWvXLln9pzWI7+IP3bKjXfT5a3BGiy5muI=
Subject key identifier: C9:D5:AD:DE:1F:9F:82:D1:A0:06:FC:3E:AD:EE:0A:0B:AE:EE:4A:56
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 0196482187613D565CC34FB43E015E8DEDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 09:01:19 +0000
Manifest this update: Fri 18 Apr 2025 09:01:19 +0000
Manifest next update: Sat 19 Apr 2025 09:01:19 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: QHnJc9xMrbtYgkvWm6zC8VBQlXAHkOLqrruIQ7b53Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:21:87:61:3d:56:5c:c3:4f:b4:3e:01:5e:8d:ed:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Apr 18 09:01:19 2025 GMT
Not After : Apr 19 09:01:19 2025 GMT
Subject: CN=c9d5adde1f9f82d1a006fc3eadee0a0baeee4a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:65:5f:34:2c:09:29:a8:c1:9f:67:e2:f4:
2f:3c:47:dc:f6:d0:9c:60:54:4e:a3:0c:14:39:44:
be:01:61:18:0a:56:13:af:c6:88:6c:cc:61:57:5a:
15:f5:e5:b8:c4:22:ef:bd:95:e4:c7:9b:88:bc:19:
4c:5e:8e:62:b7:23:86:63:63:6d:50:00:cd:a7:96:
3f:e7:b3:76:66:b0:d5:f1:f7:aa:98:c1:ef:fb:11:
22:7b:7d:af:01:60:e3:c2:10:71:63:7d:67:6b:9b:
5f:61:bb:73:49:e2:0e:0a:67:90:6a:41:6b:f0:ed:
ad:38:8c:59:3c:8b:e7:11:21:6b:18:34:7b:b6:95:
33:93:76:44:ce:fc:89:0a:e1:25:f7:e3:e8:6a:ab:
ee:2b:73:b2:8a:ac:95:20:73:52:de:9f:f0:6f:b0:
db:e1:98:97:32:fb:6d:b1:e0:37:23:8a:5e:7e:4b:
1f:25:07:95:7e:46:4c:31:e9:16:30:c0:3e:2b:15:
1a:cc:5d:70:d4:a0:7f:2c:f4:d4:b2:d2:80:a4:20:
74:44:d3:77:21:67:1b:b3:a0:4d:cb:96:96:c8:56:
33:72:cd:16:dc:b9:1d:c9:9c:0a:4e:22:14:3c:c5:
85:8f:66:2f:9b:11:b3:9c:4f:ef:7e:e6:67:92:d3:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D5:AD:DE:1F:9F:82:D1:A0:06:FC:3E:AD:EE:0A:0B:AE:EE:4A:56
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:78:da:92:74:74:2b:08:49:a4:f7:97:60:36:4b:0d:cc:8d:
b5:ab:4a:80:fb:52:77:96:10:1d:f6:ca:1a:3a:be:50:b7:91:
ec:5c:4b:45:ec:b6:36:68:61:79:78:ed:03:40:62:3d:b2:a0:
d2:ca:1a:4a:f5:78:c7:eb:50:22:a3:50:2f:7a:6c:10:24:62:
81:02:e1:5f:60:5c:46:b2:48:c6:13:f8:5b:99:95:02:ad:24:
82:d9:02:e7:dc:42:3c:46:a4:48:ce:c3:24:1d:ca:bd:70:82:
d8:c8:75:78:94:44:08:25:72:f6:cb:77:56:e7:cc:c4:97:03:
83:a9:78:91:19:bd:b1:92:60:59:63:0e:c9:51:14:e6:ff:43:
ef:af:0b:24:1c:2b:e3:e8:97:0b:b8:5d:92:1c:8d:db:44:b4:
d9:43:99:62:fb:85:05:7c:25:bc:75:9e:10:64:ec:11:df:85:
08:7d:91:ee:29:c3:58:71:75:40:a9:3d:8b:de:c5:97:f4:1d:
0a:63:98:1c:1b:72:c0:cf:fb:02:ef:78:22:9d:ba:e2:27:00:
05:af:fb:6e:ec:27:b8:f1:3a:a7:1c:b5:e1:2b:4a:01:a0:99:
07:a1:af:f0:79:ca:c2:72:0e:fd:5b:7d:5d:86:5e:0f:7a:b6:
e3:02:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:11:12 2025 by rpki-client