Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
File: M2-XfcPVrGO9vW8PitXmuqfFTYY.mft (raw, json)
Hash identifier: O5F2BSdFTGxDW4kDaHJHbplLbkOVI5rRQnJ1aSLWTTs=
Subject key identifier: AB:64:0E:FF:AF:77:87:74:AE:67:0C:C5:15:BF:53:07:AB:DB:54:3B
Authority key identifier: 33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
Certificate issuer: /CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Certificate serial: 01964D7ECDA7E419982722E12C9B65866DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
Manifest number: 0BDB
Signing time: Sat 19 Apr 2025 10:01:17 +0000
Manifest this update: Sat 19 Apr 2025 10:01:17 +0000
Manifest next update: Sun 20 Apr 2025 10:01:17 +0000
Files and hashes: 1: M2-XfcPVrGO9vW8PitXmuqfFTYY.crl (hash: ONraz6wqEf5rLp3XjFM7vjNwu8rNEqgGLGDx8AE5cg0=)
2: YW5z1XddxHiKDqplTd3bignay84.roa (hash: qn2ju/zLtjJ+Jak14mHfdCKwtwLtsrjjRAgfYBCLoH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:cd:a7:e4:19:98:27:22:e1:2c:9b:65:86:6d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f977dc3d5ac63bdbd6f0f8ad5e6baa7c54d86
Validity
Not Before: Apr 19 10:01:17 2025 GMT
Not After : Apr 20 10:01:17 2025 GMT
Subject: CN=ab640effaf778774ae670cc515bf5307abdb543b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:53:25:68:49:13:cd:24:59:90:0f:44:7b:32:
0d:79:93:4d:b2:f8:e7:0e:0d:aa:a6:a3:59:b0:1d:
4c:45:3e:d4:d7:e5:9b:7c:7b:45:cc:08:b4:f5:ba:
95:2b:fe:98:73:ad:e4:77:a6:d2:2e:a2:f0:9c:8b:
50:da:a3:5c:9d:9c:dd:53:f5:48:fa:24:de:7d:a2:
f7:52:e9:91:45:47:74:00:c6:8c:c2:78:9c:77:f9:
6a:9b:36:b5:f7:ab:c5:44:54:bd:5b:4f:97:5b:0d:
cc:52:b6:99:ee:75:f4:82:ba:26:c1:fb:0c:33:53:
d2:a3:40:7f:c2:a3:fa:4f:d0:28:71:33:a4:97:c6:
5e:9d:e3:c4:49:76:2d:f6:f0:96:8d:65:d8:7c:98:
2a:70:6e:e2:18:af:05:5c:61:90:fe:86:8e:d0:e6:
77:ab:53:b4:bf:95:04:d0:13:98:47:ae:0a:2e:6d:
d5:74:d4:31:7a:20:0d:d8:9a:90:87:72:22:f3:a6:
42:d7:e8:54:c0:2d:6d:72:f4:e6:9e:71:33:1b:26:
ba:41:46:c6:42:39:44:a8:3a:17:d2:71:9f:6c:83:
57:39:a9:f1:42:9d:31:39:99:71:b7:ba:88:19:f4:
ed:ff:6d:01:4d:8d:27:d0:c2:ea:d0:ba:3e:bd:e4:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:64:0E:FF:AF:77:87:74:AE:67:0C:C5:15:BF:53:07:AB:DB:54:3B
X509v3 Authority Key Identifier:
keyid:33:6F:97:7D:C3:D5:AC:63:BD:BD:6F:0F:8A:D5:E6:BA:A7:C5:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2-XfcPVrGO9vW8PitXmuqfFTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2a4561-f2d3-46d2-a4f2-3f6868b2de98/1/M2-XfcPVrGO9vW8PitXmuqfFTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fc:06:df:ab:cb:cf:7d:95:de:8d:7a:3e:35:17:82:23:59:
88:d6:b1:9e:62:8c:69:1f:6b:13:b4:ab:75:77:ba:01:2f:af:
b6:7e:f9:0f:f4:ec:94:8c:77:2e:e2:e5:bb:23:a4:2b:cf:7c:
f3:80:40:6a:65:6f:ce:13:8c:d6:e0:52:1f:91:c6:c0:85:58:
a3:2d:ea:17:90:a6:68:a1:60:59:16:e5:14:9b:c6:78:4d:71:
e6:bf:09:94:bb:8d:a8:7d:97:fb:9f:af:b4:56:1e:2a:80:cd:
40:26:b7:b6:65:bb:e7:79:53:de:e3:92:5e:02:82:a7:7c:ff:
53:ed:77:96:ed:5f:f5:cc:9b:cd:9b:51:b5:10:63:ae:e6:fc:
e7:eb:c6:2a:7b:72:74:bc:60:5f:d2:ce:b3:ee:a6:38:f1:8b:
47:8d:b5:f3:5f:03:0c:b1:74:14:e1:7e:b4:06:d8:a3:71:45:
81:a0:72:1a:eb:12:3f:79:d0:4d:c2:d1:a2:86:7c:dd:db:51:
ac:c1:a1:1d:c5:01:1c:9f:e3:0e:d1:0e:08:45:61:62:fd:4c:
78:d5:38:99:11:6f:73:aa:b7:e1:98:07:54:91:f8:03:f2:ca:
c1:09:2c:8c:59:a2:f3:32:5d:2f:41:79:52:20:a0:f7:34:78:
9f:a6:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:15 2025 by rpki-client