Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier: AichsvUvUdyxarmKmnmcb7esO9QTIr4KVFyyHANnPDo=
Subject key identifier: C7:C0:AC:56:7F:32:28:5F:73:5D:8A:64:1B:1B:ED:C5:49:88:62:15
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 019659829A33373E11EF92E53037974ADCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number: 0117
Signing time: Mon 21 Apr 2025 18:00:53 +0000
Manifest this update: Mon 21 Apr 2025 18:00:53 +0000
Manifest next update: Tue 22 Apr 2025 18:00:53 +0000
Files and hashes: 1: KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa (hash: CehIyyDTNH2XPwU/dxmXRsBi9Cc/OKe00kUQqRs/maU=)
2: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: AlWLDTiahN07oszZvWC57IwsxROyt6UkCno7EQfE/N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:9a:33:37:3e:11:ef:92:e5:30:37:97:4a:dc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Apr 21 18:00:53 2025 GMT
Not After : Apr 22 18:00:53 2025 GMT
Subject: CN=c7c0ac567f32285f735d8a641b1bedc549886215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:d4:89:1b:0e:c8:37:7b:ad:0c:d4:13:09:
7f:e0:ea:e8:77:b1:ea:96:30:09:75:8f:6b:a3:b2:
a1:f1:21:b2:a8:48:cb:2c:3c:5e:49:0e:dd:b3:b2:
ed:b3:70:d5:e2:22:bc:ef:e0:71:f2:77:c4:47:68:
a7:aa:40:66:87:99:d7:76:01:e5:df:ad:2d:0d:c4:
3f:1d:87:af:0d:46:b8:ee:00:ab:47:b2:ef:57:01:
4c:6b:4c:d6:5a:c0:11:7e:21:ca:ab:80:49:71:e8:
19:8c:0b:e3:91:f2:d4:e9:a8:bc:8e:a6:55:03:e0:
08:d1:b8:88:e5:1c:08:30:92:a8:d9:1f:7b:4f:c3:
ae:f7:48:49:46:3c:c9:59:4c:02:f1:c8:7a:11:6b:
2b:d7:1c:13:9f:c7:e2:e7:c6:ff:33:35:c0:34:79:
fd:9e:23:78:47:76:7f:b9:5e:d4:72:9e:db:e4:15:
59:5e:6b:4a:56:16:c2:a7:35:25:b8:3f:34:30:06:
7a:1d:d5:59:14:72:54:fe:2c:df:d4:57:90:ab:d6:
f4:72:b7:e6:e5:86:95:e5:af:09:e8:71:14:89:b0:
70:43:89:2d:6e:c9:d3:b0:8f:c8:7e:d7:7f:dc:42:
6c:8e:69:1f:53:2f:17:0b:9d:b3:9d:55:0d:88:9e:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:AC:56:7F:32:28:5F:73:5D:8A:64:1B:1B:ED:C5:49:88:62:15
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:50:58:a9:10:65:06:59:6f:9e:2f:35:34:dd:57:4c:d6:8f:
01:dd:05:22:48:31:f7:17:f1:bf:00:1f:b7:87:03:69:c8:b0:
3f:d3:e7:8f:cf:3e:bb:04:7f:25:45:99:10:89:aa:13:80:10:
6e:b6:8a:12:4e:00:55:38:90:a8:ef:e3:c2:e0:12:0e:aa:8e:
ab:3b:86:ab:48:11:ca:e5:e8:f0:17:e5:0e:7c:19:35:3b:0b:
ca:88:03:c3:42:20:d9:32:0f:65:e0:2e:48:53:38:d8:50:5e:
8e:2e:2f:8b:1d:dd:51:56:10:9d:33:a8:b0:6f:95:2f:77:d3:
af:7d:7a:9d:da:51:6e:8f:88:4a:dd:c0:2c:62:f1:84:89:04:
24:39:eb:64:3a:84:d9:7d:7f:b0:8d:ff:28:b9:e8:57:ad:31:
2d:75:23:93:c3:3f:ae:bd:00:5e:49:38:9e:83:f2:97:7d:d5:
f4:b2:8e:4f:5c:e8:4e:91:1d:22:61:f2:8c:d4:67:2e:c0:4a:
b5:45:a5:44:e5:17:7f:3c:8a:a6:db:ac:43:14:40:17:3e:dd:
d6:8c:87:78:4f:bb:0b:04:78:13:9d:23:4e:91:8a:7f:fc:e3:
98:48:2d:97:bd:50:3e:6b:48:56:8e:95:58:d9:cc:db:bd:4c:
f1:3d:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:25:01 2025 by rpki-client