Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: ZKKG0XgPwxVg19iMx0P9kZnEGPF1mYTtapGhHsWztIo=
Subject key identifier: 4C:CE:F5:C2:4A:6B:E5:56:E2:B8:12:0C:E8:C8:48:8F:F0:05:B4:C0
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 019644B1CF530CB106A7E1E5C033FD7ED61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 0EC9
Signing time: Thu 17 Apr 2025 17:00:25 +0000
Manifest this update: Thu 17 Apr 2025 17:00:25 +0000
Manifest next update: Fri 18 Apr 2025 17:00:25 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: h8n9kT88/qQ5zC28dQz6G016C6woqFGcaxkYQPbEQGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:cf:53:0c:b1:06:a7:e1:e5:c0:33:fd:7e:d6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Apr 17 17:00:25 2025 GMT
Not After : Apr 18 17:00:25 2025 GMT
Subject: CN=4ccef5c24a6be556e2b8120ce8c8488ff005b4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:3c:95:05:e2:aa:b3:32:d8:bb:58:61:62:
17:7a:f5:5c:1b:08:05:05:9b:8f:27:a2:48:dc:70:
bf:2d:b9:62:cc:a3:aa:a2:ed:69:a7:a0:ce:bb:4c:
64:90:7c:a8:90:00:ee:be:24:94:58:ba:e3:df:81:
48:f8:8a:9b:42:94:2a:d3:b1:d9:c2:46:2c:c1:ac:
25:e0:3a:68:aa:26:c2:7e:a7:2e:fe:f0:ec:ed:a0:
d3:83:b1:94:0a:93:36:dd:14:b2:3d:6d:b9:ed:7b:
19:1e:71:19:29:01:0b:70:fd:55:94:3e:33:09:ac:
92:1c:8e:8d:70:5e:af:04:85:fe:40:a2:9d:ff:b1:
f6:37:75:35:0b:69:1b:30:12:68:c7:c2:26:a2:8d:
b7:bd:76:77:c0:3d:0a:0a:6f:47:70:f5:28:01:8b:
b4:46:df:05:ce:ea:6c:87:07:2b:98:b2:32:5f:f9:
47:25:e3:a0:ff:66:d9:f9:27:40:44:ab:48:db:8e:
11:07:c7:ae:35:ad:3f:33:a2:ca:5b:9e:ac:88:9b:
a1:f6:40:2b:08:58:31:cf:d9:a2:c0:75:d7:6f:72:
4a:cc:f9:a1:89:80:67:5d:0c:45:ac:e9:23:b4:d7:
02:0f:f1:33:02:80:bd:ce:23:37:4c:c3:cb:49:22:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:F5:C2:4A:6B:E5:56:E2:B8:12:0C:E8:C8:48:8F:F0:05:B4:C0
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3c:bb:d8:66:56:8e:9e:d9:cc:cd:2c:52:b9:e0:da:24:29:
18:87:36:3b:8d:d7:28:77:3b:25:2f:5b:df:7d:26:c6:b6:31:
90:eb:63:68:30:95:e1:d9:d7:bf:5f:b1:18:88:a4:3d:44:e3:
cc:1c:1c:d7:5c:71:1e:37:2a:be:ef:dd:b4:03:fa:9c:d4:1d:
9a:08:1b:52:bd:3b:40:5a:c0:65:2f:45:e2:d6:41:d3:23:6a:
70:67:4c:a5:36:5d:3d:fd:62:29:d6:43:aa:29:41:5e:44:27:
0e:a7:dd:8d:ba:77:da:3e:ad:33:9f:e8:7e:e7:4b:1e:8f:8e:
d7:7b:09:4c:ac:46:c1:f7:7d:87:ea:7d:18:eb:ba:b7:b5:4e:
e1:da:9b:d4:f0:17:aa:7c:14:bb:6c:5c:00:a6:42:c4:d7:1f:
f5:53:67:44:aa:3c:6f:d2:b5:13:1d:dd:e0:f4:c9:22:92:ea:
01:6d:96:1b:94:9d:84:83:6b:de:9b:eb:bf:0e:3b:fb:88:6c:
1b:95:c4:6d:e5:5c:b9:0a:4a:f8:ae:05:7f:e9:00:68:77:ac:
f0:1c:3c:97:a8:d4:d7:96:12:46:f5:95:fe:df:ee:5a:56:64:
37:4f:65:b5:c6:51:37:d8:92:66:2c:36:b2:d0:6c:3b:4f:1b:
d5:88:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:45 2025 by rpki-client