Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: o4ma84lenGkFncJcl0txfh3GaQLv9Dz2kal/n2EKE2s=
Subject key identifier: 5D:FD:AF:3C:08:5C:96:F5:D8:2F:4C:73:E4:E2:F4:6F:E5:18:F2:C2
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019579EB6DEBF68934E1EC84C6AE9118E718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 1005
Signing time: Sun 09 Mar 2025 08:00:26 +0000
Manifest this update: Sun 09 Mar 2025 08:00:26 +0000
Manifest next update: Mon 10 Mar 2025 08:00:26 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: QJQHlJqKgqqHwTBukSvOpcW0TNv5RFxNUv2X/mG4nJg=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:eb:6d:eb:f6:89:34:e1:ec:84:c6:ae:91:18:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Mar 9 08:00:26 2025 GMT
Not After : Mar 10 08:00:26 2025 GMT
Subject: CN=5dfdaf3c085c96f5d82f4c73e4e2f46fe518f2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e6:3e:36:50:33:32:35:2a:f3:5f:ef:67:2a:
b5:18:8a:69:fd:4a:05:df:d7:b1:79:a6:07:6e:19:
e6:a0:26:9f:d7:04:c5:9a:89:e5:7d:fb:74:03:a6:
48:05:42:8d:68:40:97:19:74:1a:60:a1:4d:6d:0c:
e4:8f:39:9c:74:88:40:50:8c:16:dc:5b:06:3d:65:
f3:85:ec:64:b0:61:23:a1:bf:0f:07:00:6c:41:11:
21:8f:28:d9:e7:85:fa:60:ff:de:09:e6:2e:91:b9:
4c:c8:31:7f:51:eb:df:40:7a:03:e2:9c:bc:36:4a:
91:c8:d2:93:bb:5b:3d:66:c3:be:54:4d:7a:96:25:
b6:98:2d:4c:68:f0:c4:86:54:09:7f:b6:c3:50:c4:
a1:70:33:2b:c6:a7:13:d5:9c:2d:be:3d:ea:c7:37:
87:5f:95:2e:78:19:ab:9d:a8:df:08:21:7a:57:0f:
5a:88:6f:ea:57:22:e2:31:94:1a:ea:93:74:6e:e2:
a7:d4:94:d8:a2:a8:ba:2c:4f:62:24:53:9c:f2:1d:
ad:ef:cf:48:7b:b8:29:8f:3c:42:4f:cf:19:bf:d2:
86:dd:0d:97:82:2b:ae:bd:04:ff:c2:6c:87:0c:a9:
76:75:0c:18:75:8e:d7:19:7b:b8:dd:36:19:7e:87:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:AF:3C:08:5C:96:F5:D8:2F:4C:73:E4:E2:F4:6F:E5:18:F2:C2
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:41:84:60:4e:f9:df:84:68:b9:b0:31:50:11:d3:ef:05:3b:
d5:f8:4f:79:af:5c:1f:e2:eb:72:20:7f:87:2c:93:2e:95:81:
79:ea:21:cc:77:77:af:03:24:39:8c:ff:8d:8f:ae:31:61:ca:
15:9f:61:2d:84:40:ad:9a:e8:97:f6:95:52:b4:3e:27:53:23:
c6:13:39:dd:73:fa:a7:67:5c:ac:5d:b2:c7:c5:bd:c3:7c:e4:
fe:38:e1:c2:f1:a5:1f:42:f1:79:79:9c:29:24:44:fe:c3:f3:
5e:e1:1f:c9:d0:8d:88:e6:b1:2a:b4:fe:84:6f:f2:a1:b9:ea:
9e:46:12:de:71:00:ba:b4:3c:3f:4f:51:9a:f6:3b:17:a3:c8:
f2:46:59:fa:87:33:9a:0d:9d:5a:9f:c9:d1:81:1d:e6:e5:f3:
d2:5d:9a:c2:8b:3a:88:c2:0f:3e:93:17:14:54:24:bb:ea:8b:
7a:8e:9f:88:30:51:52:5f:12:f9:76:44:f2:cf:ec:d7:cc:74:
81:90:f2:5d:19:71:af:46:fe:bb:ce:27:04:4c:a9:c4:73:4e:
b9:ef:84:4f:01:85:de:b3:ee:04:ce:02:fd:f8:3c:f5:a5:9a:
42:e6:8d:fc:1a:59:1f:ef:03:a0:5e:0c:4c:8d:6a:79:78:11:
7a:c2:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:45:10 2025 by rpki-client