Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: w0Bm5XM83u0h505te/+ZShvKHNLOCCyh0t7gn2Lcdjg=
Subject key identifier: 06:72:26:8A:77:B2:41:02:D1:95:01:C2:BC:42:38:90:30:A2:1A:B6
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 0196BF012E304F05A3653CC4F5693D6A5D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 1423
Signing time: Sun 11 May 2025 11:00:47 +0000
Manifest this update: Sun 11 May 2025 11:00:47 +0000
Manifest next update: Mon 12 May 2025 11:00:47 +0000
Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=)
2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: CJCjjEE1jivqLePZ+JWrdurMCjWBgt5lloTvg3pM7DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:2e:30:4f:05:a3:65:3c:c4:f5:69:3d:6a:5d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: May 11 11:00:47 2025 GMT
Not After : May 12 11:00:47 2025 GMT
Subject: CN=0672268a77b24102d19501c2bc42389030a21ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:ee:b5:92:e0:49:8a:42:2d:3f:a0:d9:af:
1b:eb:6f:e0:cf:84:28:d0:11:b9:01:01:01:71:11:
b6:64:a2:69:7b:65:b5:5a:f2:ab:ab:90:35:7b:81:
08:6f:5e:12:52:c8:4b:7b:e9:ce:92:ae:a2:b3:ff:
23:7c:d9:68:ec:df:b6:9d:7e:5d:2a:45:b0:7c:6c:
b5:84:df:6d:1d:fc:1a:11:10:00:46:fb:fb:63:39:
99:5d:f2:b5:25:ab:ac:bd:c7:c5:71:22:ba:3e:c5:
55:e6:56:17:59:92:61:5b:f5:ba:83:36:8c:94:f3:
dc:0a:85:27:c4:31:2a:68:f5:70:5e:85:a2:60:26:
2b:4d:4b:a0:17:98:fe:6c:d4:e6:48:55:ef:eb:ef:
83:7a:fb:ac:23:67:b7:ba:a3:0b:ea:ad:f9:05:89:
6f:ee:e6:e3:13:2f:85:fc:5a:74:1b:48:8f:33:48:
f4:25:ff:db:dc:ec:3e:fa:d0:99:da:0d:3a:4b:71:
e1:de:7e:e8:1b:ef:3c:8c:8a:44:6f:ed:b4:15:5b:
dd:a6:1b:76:79:d2:8f:0a:38:89:fb:58:a7:3a:4c:
bf:81:25:b6:88:7c:c5:73:df:d5:b9:bd:2b:1c:17:
f6:f5:a1:eb:c0:d2:59:6c:77:3b:e4:96:fc:b2:df:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:26:8A:77:B2:41:02:D1:95:01:C2:BC:42:38:90:30:A2:1A:B6
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:78:ae:76:c0:e5:a0:f9:84:ef:f0:9d:cd:e5:6c:27:fa:fc:
33:e0:26:a0:69:3a:b5:c2:f1:ea:e2:72:a5:f2:b4:a7:68:90:
b3:25:e6:4d:3b:3b:6e:a8:60:7b:87:84:cb:3a:58:af:93:d9:
cd:b3:ae:c6:3c:16:db:f1:c0:91:75:8a:08:6d:0d:49:13:3c:
54:03:c0:41:5a:e5:3a:cc:a9:6c:fb:2b:63:aa:78:37:a9:99:
23:da:19:0d:bc:8a:74:82:bd:30:57:df:e4:97:32:30:91:14:
7e:e9:79:04:e7:de:3f:6d:de:2e:fe:19:84:42:4c:67:f9:de:
d1:70:e7:90:90:44:38:34:12:66:e3:af:fe:66:b9:ef:c8:51:
ca:6f:d6:03:d2:2d:93:cc:18:d4:35:02:d5:07:4d:05:a7:65:
d1:74:99:66:ad:2f:c4:13:2c:17:65:14:c7:95:9c:4c:2e:e3:
d5:cd:9e:23:3f:de:37:4d:83:02:56:07:20:be:e3:cc:e7:b2:
71:90:5d:bb:db:27:cd:c9:61:28:d8:a3:65:91:cc:48:94:69:
f0:e0:7e:d5:ab:f5:d4:a2:57:ab:16:66:82:4c:a4:b7:33:9a:
b8:da:f4:01:3d:74:38:a6:78:97:9f:31:da:fb:16:ee:38:62:
f4:54:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:07:54 2025 by rpki-client