Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: dRtAAuMI23tHRgAnAcnwMJaYgju/Uks/vaEG5SFqRBs=
Subject key identifier: 22:85:4B:82:BC:F5:E6:E1:FA:B5:C0:E9:02:FE:98:33:EF:D2:AD:8C
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 01964D7E5EC912AC609B802CCE0A789CA700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 10:00:49 +0000
Manifest this update: Sat 19 Apr 2025 10:00:49 +0000
Manifest next update: Sun 20 Apr 2025 10:00:49 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: c0d1t/iZ8hmgsJv6jjmh8iY3qofWaHwz+BEXMAgwlrQ=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:5e:c9:12:ac:60:9b:80:2c:ce:0a:78:9c:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Apr 19 10:00:49 2025 GMT
Not After : Apr 20 10:00:49 2025 GMT
Subject: CN=22854b82bcf5e6e1fab5c0e902fe9833efd2ad8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:50:53:24:8c:13:5b:ab:a4:93:5f:3a:2f:
96:9f:3f:ac:01:16:a5:34:f1:75:a3:6b:7a:c9:d1:
7f:19:94:d9:3c:1e:a2:9d:aa:85:07:09:65:02:4d:
f8:33:ee:c9:93:80:d9:b5:21:53:27:98:eb:81:66:
93:12:17:99:a2:74:da:ad:67:24:71:9e:e5:85:6b:
2e:80:02:5a:7d:7c:37:0c:c6:3a:45:59:c3:9b:f1:
a5:bb:9d:a8:8d:ae:4b:7f:8d:55:c8:10:02:91:03:
67:bf:bd:b5:79:95:09:35:df:20:58:d3:39:68:3c:
d1:36:6e:7c:64:d0:a3:69:6d:79:79:19:33:7e:ff:
14:f3:70:8b:00:61:5f:0c:42:58:cc:21:18:67:90:
86:55:c3:b5:31:e4:7a:88:89:26:86:71:fd:78:e1:
0c:01:78:b8:2d:87:49:47:57:d0:dd:64:cb:82:4e:
9c:c2:47:21:28:1b:5e:68:dd:83:45:d9:ef:bc:41:
63:65:ed:90:f3:6b:31:c6:7f:f3:5e:78:d3:ce:3a:
5e:63:09:8f:21:11:7c:94:b4:0e:24:cb:c6:2a:14:
6b:e5:d3:90:ed:e5:25:68:f1:34:df:8b:c5:d3:9d:
00:8d:3f:8d:04:51:c7:88:83:42:05:84:e0:95:58:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:4B:82:BC:F5:E6:E1:FA:B5:C0:E9:02:FE:98:33:EF:D2:AD:8C
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d0:3e:06:38:43:4d:e1:3c:16:a1:0c:ce:63:ea:27:32:c7:
c6:fc:8d:67:68:34:66:00:0f:90:12:b8:c8:a7:4f:57:80:1b:
da:81:ee:40:59:ff:99:3c:0c:ac:2a:ed:ae:e3:02:00:ac:58:
12:88:3d:5f:f4:59:ae:83:13:08:f2:7d:26:c5:38:d1:32:06:
6a:c3:38:30:7c:10:3c:1d:5b:8c:8d:1b:69:2a:9c:df:83:68:
4f:d2:6d:35:76:f1:f0:6c:ad:6d:33:35:2a:9e:93:7d:a8:0c:
be:de:e6:85:9c:5d:5b:b3:06:09:df:e8:b6:9a:a1:6c:fc:42:
de:b4:e5:f5:89:0d:b9:64:96:72:8b:d1:f6:87:c2:56:c1:09:
a6:a3:a7:3e:45:c9:74:41:e8:e6:c3:d3:21:a6:7c:81:a2:fa:
b4:79:4e:8c:83:b3:64:d2:11:0a:67:2d:a3:f8:a2:65:e4:40:
71:27:69:03:be:75:99:d1:75:1e:e4:23:81:d8:03:69:38:ef:
0f:06:e1:8e:b1:58:a7:7a:e8:1f:65:e9:36:9e:5c:06:5f:15:
4d:d3:43:3f:e8:4f:86:04:83:9d:f2:68:46:a8:da:5a:3a:9e:
7b:dd:b0:79:43:bf:d4:a6:da:a7:16:8d:47:35:b1:64:d3:a4:
f1:65:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:12:13 2025 by rpki-client