Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: 369GFjchEhMPS7OdlP0nY+t2e+Ufz3V0NJPH+Y8yr30=
Subject key identifier: B9:BF:D1:88:D8:95:6D:4C:CE:51:4D:80:28:86:03:E7:E4:9C:CC:9B
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 0196A3533AA1C61EB08F4A38396DF912E929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 109F
Signing time: Tue 06 May 2025 02:01:02 +0000
Manifest this update: Tue 06 May 2025 02:01:02 +0000
Manifest next update: Wed 07 May 2025 02:01:02 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: u4eAAFB9F/CIgEOO0dCssdrOoi5fzvbSnOS66p5DCLQ=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:3a:a1:c6:1e:b0:8f:4a:38:39:6d:f9:12:e9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: May 6 02:01:02 2025 GMT
Not After : May 7 02:01:02 2025 GMT
Subject: CN=b9bfd188d8956d4cce514d80288603e7e49ccc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:d1:37:1d:9c:f8:fa:ec:2e:6a:0d:8f:a7:
5d:cc:d1:64:51:52:b1:a1:4d:f4:e1:73:ef:b9:5a:
86:8e:e1:18:c8:97:9f:f8:77:b2:fd:a0:21:44:59:
8c:c5:de:35:69:df:ed:82:c8:81:05:03:71:92:0c:
ae:45:c3:b9:87:d0:7d:26:11:e9:f1:8e:b7:fe:c0:
5d:b5:cf:47:92:03:7e:8a:1c:99:38:f8:bf:78:1f:
e7:de:a2:7c:04:b6:25:cf:d8:93:0d:25:35:e8:08:
26:09:ed:ac:8b:7c:71:27:a4:eb:37:73:c4:ec:fc:
57:ca:ff:c4:3c:73:d8:62:cb:05:68:cc:7c:36:25:
8d:0c:49:30:3e:10:78:68:3d:20:69:e7:8b:64:3c:
38:c6:c9:e0:8e:e5:18:c6:6b:b2:56:f9:01:36:f8:
64:90:0d:95:2a:08:18:12:d6:6a:c1:8d:05:71:b0:
21:8f:40:12:63:45:e7:7e:f3:ff:4c:a6:01:fd:6a:
b6:7b:27:c5:ad:a1:75:1c:e0:d5:83:16:75:33:38:
97:a0:58:9c:08:2b:44:6c:78:ba:0c:fd:8c:e2:65:
27:01:db:9a:5b:0e:71:5e:69:5c:8b:c9:3e:de:da:
d6:86:1e:46:00:03:8c:d1:5b:f4:58:bb:d0:3d:e5:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BF:D1:88:D8:95:6D:4C:CE:51:4D:80:28:86:03:E7:E4:9C:CC:9B
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:dc:d3:7a:22:33:18:0a:d8:f9:19:91:e3:d6:0c:76:72:ec:
0b:b4:d2:51:5a:62:ab:41:85:ab:b1:af:c9:db:e8:c9:e8:21:
df:28:20:0f:32:a1:df:d7:69:72:2b:ef:bb:11:dd:14:36:d1:
c7:ea:a5:f2:ea:f6:ef:87:58:84:ce:4e:c2:9a:9a:2d:0d:52:
e7:29:e8:b4:dc:7a:2d:e8:85:3e:2e:df:da:f0:cb:11:3e:21:
19:65:35:88:c6:ac:75:45:fa:7b:ff:70:1c:a3:d0:79:f7:b0:
e7:57:e9:6c:86:93:9e:79:c6:dc:de:5b:eb:e7:1a:02:1c:85:
2a:d2:7c:5a:4c:d8:42:40:ef:20:1a:a3:07:64:17:5c:40:58:
a5:6e:00:3b:a1:2f:da:54:14:56:d2:28:61:fa:5d:7e:36:e2:
6c:f1:13:bc:a2:fd:35:25:64:c7:9a:89:d2:70:2d:3d:a1:28:
61:fe:fd:2a:76:50:12:b8:62:6a:58:5d:1a:ca:f9:fe:d3:71:
1c:ec:e9:b7:c5:68:cf:ad:25:49:70:9d:8a:1b:0e:39:01:ab:
5b:ea:f8:ad:41:0e:60:54:7a:73:55:00:a7:61:5c:ed:f0:de:
20:55:34:1f:19:47:aa:5d:fb:98:d1:e3:02:66:a7:65:3d:f8:
32:f8:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:00:06 2025 by rpki-client