Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: fcXlYznu1d0F8rne0gyGcFaerM/gG+9PhVeBZEzLjTU=
Subject key identifier: 67:1B:2F:4B:6F:27:CF:6C:DA:9B:3A:37:DF:79:15:18:D0:6B:EA:C1
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 01974D450F984991AB5AD00E1B1D590076C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 0F52
Signing time: Sun 08 Jun 2025 02:01:00 +0000
Manifest this update: Sun 08 Jun 2025 02:01:00 +0000
Manifest next update: Mon 09 Jun 2025 02:01:00 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: t0JHYQ1beCE9oJKeRGFO44/essYs5DRzXA1oN9QU6eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:0f:98:49:91:ab:5a:d0:0e:1b:1d:59:00:76:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Jun 8 02:01:00 2025 GMT
Not After : Jun 9 02:01:00 2025 GMT
Subject: CN=671b2f4b6f27cf6cda9b3a37df791518d06beac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:8f:bb:64:f0:36:a7:01:cf:d5:11:29:46:
75:4c:a0:d8:24:f3:bf:8e:8f:b4:9b:4a:a6:cd:04:
74:2c:56:8e:43:32:f0:c3:d2:c8:c9:f3:99:3e:51:
45:08:cd:5f:61:59:b9:ef:2a:b9:91:d9:f5:34:8d:
88:fa:0c:e7:98:08:d3:dd:96:12:fe:6d:c3:59:ef:
d2:31:35:ca:5b:c7:eb:8c:aa:2c:0c:71:2d:7b:f1:
71:f4:7c:c5:9c:2c:f5:50:85:72:90:b3:25:86:2b:
e7:10:08:fd:0c:92:dc:47:ea:24:8d:35:d1:4a:93:
dd:17:74:6a:d0:76:8c:b4:ae:51:a8:ce:76:7a:23:
dd:74:15:2e:fb:7a:4b:d0:51:01:81:41:73:0f:49:
88:b1:0f:d5:95:07:53:76:53:a6:e8:0c:fb:7b:d9:
fd:d5:d1:1c:b0:46:7c:9e:82:c7:fc:a3:e9:66:3f:
55:5e:0b:9a:bd:c9:35:30:21:a4:3c:fb:e4:4e:cc:
15:bc:ad:06:74:10:e7:01:43:c5:a8:e3:9b:c4:93:
a3:c1:38:93:30:1c:14:6e:85:7d:60:4c:ff:be:21:
b2:39:20:06:1a:66:a4:58:75:db:b8:79:35:0f:0b:
e3:40:d8:08:17:b6:4c:26:a2:e5:2a:ef:af:ae:2a:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:2F:4B:6F:27:CF:6C:DA:9B:3A:37:DF:79:15:18:D0:6B:EA:C1
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:86:b2:81:ca:ad:8a:09:ee:9c:7c:5a:7d:2b:e1:d3:98:f1:
a8:b4:8b:d7:b3:c1:2d:7f:c7:64:3c:4f:51:5c:6f:09:4c:06:
b3:7f:75:fa:85:57:9e:e2:19:44:18:37:12:2b:3e:e2:04:f7:
a6:46:55:bf:80:dc:6c:be:29:4f:00:9d:e7:bf:c3:39:7c:34:
1f:5f:72:98:0b:e8:bb:42:de:42:45:d9:82:32:44:0f:bc:30:
77:6e:1b:ab:1c:bd:02:6f:b6:7b:10:a9:d4:80:4c:75:da:cd:
b2:58:e8:f7:f0:33:7a:93:66:b3:18:e6:27:05:95:a7:dc:ca:
9d:58:2d:e1:75:91:dc:5e:7a:6e:e5:cf:f7:15:b2:ad:a9:67:
e8:94:fc:61:4c:3d:09:9f:4b:6c:fa:72:0b:d8:9e:ed:54:3e:
26:b0:9f:4c:d5:33:36:37:84:98:a8:7d:c7:a4:99:16:c1:af:
4b:cd:f6:25:31:8d:d1:9d:ae:ad:2d:2b:e4:95:d5:c8:c2:58:
bc:e9:25:e7:05:e6:a7:80:6d:d0:2b:6b:ca:25:2c:61:87:1e:
4e:11:11:94:55:57:2c:fa:9e:3e:c6:cf:1b:8b:a4:d4:c5:5a:
bf:3d:e9:6e:c1:54:81:cb:84:cc:c8:c8:8e:fe:79:b6:b4:ed:
90:9e:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:06 2025 by rpki-client