Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier: LEu4IogRtMuhOlV1L12tRWP1w+w3g4sljO8outJAcBc=
Subject key identifier: 4B:E5:A9:34:9E:CB:83:3A:C4:97:DF:5E:63:FC:C8:7F:CD:89:2B:2C
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial: 0196AF8E00A06E02ABA30128303F7B0F4217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number: 13A1
Signing time: Thu 08 May 2025 11:00:41 +0000
Manifest this update: Thu 08 May 2025 11:00:41 +0000
Manifest next update: Fri 09 May 2025 11:00:41 +0000
Files and hashes: 1: 2B-FwUEQx6Nr4Ray6DAMUlw7Mv8.roa (hash: BBGC/ULum47ycUnwMz9z0fK4GgKW3TWVfbzBiHksvmc=)
2: GtTmoRT7XNVXBnXOsHZVf63eiDE.roa (hash: D+k5RJe28ejPSPya6Jjm6aV5eby1Bwyad8Nl2+QCWeE=)
3: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: QuvOdHQUoV8QtNrP/iPCuviSUO4ZWHyqW+T0h64/rPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8e:00:a0:6e:02:ab:a3:01:28:30:3f:7b:0f:42:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Validity
Not Before: May 8 11:00:41 2025 GMT
Not After : May 9 11:00:41 2025 GMT
Subject: CN=4be5a9349ecb833ac497df5e63fcc87fcd892b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:06:58:37:ec:d7:9f:00:a6:64:e0:76:54:
d8:4c:41:7b:dd:0f:59:f5:1d:0c:59:6b:f6:0f:f1:
9f:eb:25:ff:3e:a6:5b:36:ad:8f:92:e5:0d:55:35:
a9:ac:53:0b:cc:0c:b2:ac:92:0d:ae:fa:1a:fa:51:
b9:dc:af:66:2c:09:42:4e:1f:c0:a9:5b:b9:81:5f:
b5:ab:4a:2e:b3:62:41:58:63:a5:c1:c7:7c:9d:80:
15:94:83:d6:69:53:fc:7f:89:68:74:70:72:ca:db:
75:07:81:2b:95:6f:02:35:3d:95:70:04:0e:84:25:
be:1f:b4:7f:ad:d2:45:38:b9:d3:4c:ae:98:6b:91:
1f:81:bd:93:06:41:a2:f7:e2:95:17:e8:95:ab:d0:
b7:24:03:31:ea:4a:85:54:18:8c:8d:61:82:bd:1f:
24:73:67:14:b1:cf:17:3d:c0:02:ee:36:ab:fd:18:
af:46:d1:dc:fd:83:ae:7f:83:8f:0b:bb:ca:e5:f2:
07:43:6a:38:fa:30:e1:50:e4:aa:03:24:08:3d:8c:
7b:6d:ab:98:1b:05:c5:b7:d3:54:c5:48:29:1e:4a:
83:ff:84:4c:4e:87:7e:44:59:6c:e1:27:2a:05:ff:
2a:e8:84:ef:89:80:14:0f:2b:33:9a:23:b8:f2:a2:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E5:A9:34:9E:CB:83:3A:C4:97:DF:5E:63:FC:C8:7F:CD:89:2B:2C
X509v3 Authority Key Identifier:
keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5b:7e:ec:05:1c:00:4f:d7:16:d0:25:82:2d:f5:73:d5:00:
e7:87:39:ca:7c:21:73:cc:00:e9:a5:4f:42:e8:b7:19:83:de:
05:8e:bf:0b:74:2a:56:7b:f2:fb:c1:27:6c:18:4c:83:af:54:
64:e8:41:bf:da:4a:c9:90:89:c6:68:22:f0:4b:92:ae:65:5f:
da:e6:5e:5d:8f:81:76:46:a2:f3:bf:ce:98:ae:df:94:c1:d4:
6c:92:b3:cb:58:41:59:0c:eb:e4:5a:43:01:22:07:e6:f2:ee:
88:ea:cc:15:1e:ac:bf:e8:a9:d4:8b:d7:cc:9b:54:b0:aa:1c:
4b:22:55:ab:3d:05:c0:1a:ac:09:e2:b0:d0:35:e4:05:75:70:
cd:e0:96:8c:6a:39:4a:df:2f:14:79:a7:97:d1:70:2e:32:5b:
d1:66:45:a3:5b:27:7b:30:4f:de:ce:cd:7c:98:a4:d5:78:6a:
8a:a1:e4:77:5d:6b:6e:d2:cc:ff:c5:75:4e:36:14:31:18:b9:
d9:67:db:ee:d9:cb:8a:31:6e:a3:f0:e4:34:ff:9c:f0:f3:ca:
cc:c8:dc:01:e4:1a:e7:51:ff:da:ec:03:1e:ef:cb:de:fc:11:
d4:7c:a1:64:ed:84:a3:64:8a:30:81:bc:08:75:9c:05:99:ea:
0e:c5:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:32:08 2025 by rpki-client