Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier: rzbqJksxsb7VZP8JAqG9i7pEnW4QVH8ShbJD3bY7tbI=
Subject key identifier: 41:91:34:63:12:78:A4:61:86:C4:14:6A:4B:02:F6:50:0C:49:BD:0C
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial: 0197B6D74E8FBB6565E1CD16946A672C6199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number: 12C3
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: MgOcNXOuDD9SKwpnE69px3gbnFvTwFqt0kkAT6sni28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4e:8f:bb:65:65:e1:cd:16:94:6a:67:2c:61:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=419134631278a46186c4146a4b02f6500c49bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:89:f1:d0:5c:8f:49:15:78:fd:dd:a9:90:
2d:68:ad:34:02:4c:a5:73:4d:0a:45:6b:cd:74:08:
fa:17:19:91:5a:36:ec:85:3b:31:f9:48:21:62:88:
67:7b:f1:40:e5:81:b5:cd:30:3f:fb:3c:3f:3b:01:
e3:f6:02:06:33:88:74:ee:ae:7e:f2:32:43:eb:7a:
e6:10:e1:56:48:63:79:30:fc:61:b3:1a:02:70:6c:
0e:d9:7a:2c:94:a5:72:48:47:98:76:44:d6:40:4f:
95:10:33:a6:da:41:c0:2e:50:e2:e5:f8:76:13:90:
42:d2:0d:2f:a5:f8:96:2b:c4:42:cc:85:c8:9a:99:
6f:9c:3f:eb:c8:ae:e2:38:53:cc:ae:2a:f7:88:de:
0e:f8:7c:19:fe:24:30:12:84:1b:d7:cc:bd:38:d1:
db:74:51:a2:05:ed:77:91:d0:5d:7e:b7:14:44:79:
48:f1:73:47:f6:db:dd:d0:43:44:9a:24:c4:fb:5f:
57:42:b3:47:47:6e:bc:24:20:c3:08:14:c8:3f:b3:
c7:fb:8b:6c:f8:8d:cd:45:4a:b8:a0:2f:a8:ad:a7:
46:d5:95:56:1f:d4:a7:e8:19:91:fb:db:96:af:aa:
0f:ac:d4:e3:75:3b:99:7d:90:a5:9b:4b:9b:27:2a:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:91:34:63:12:78:A4:61:86:C4:14:6A:4B:02:F6:50:0C:49:BD:0C
X509v3 Authority Key Identifier:
keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:9e:f0:59:0e:ca:80:19:f5:ec:42:9e:e4:ac:e5:6a:8d:
10:7e:4e:7b:a9:6a:4d:67:c6:8a:ef:88:5d:c1:e4:11:08:74:
32:7e:8d:54:12:ee:a7:bb:06:aa:13:36:81:2c:c3:61:69:60:
74:70:9d:8d:84:ac:c7:a8:45:37:29:8b:5b:c5:25:13:8a:78:
30:42:e5:9c:e8:9e:fc:e3:bb:c1:33:6b:f3:4d:94:23:de:87:
c7:fa:2a:2d:3d:cb:3b:3f:93:bc:19:46:57:32:57:82:d7:01:
ca:15:ed:14:e0:51:78:78:9c:72:a8:5e:28:3c:cf:09:ba:53:
e6:9d:15:7e:a4:c3:4d:d3:de:59:aa:87:85:65:00:5d:e9:96:
ed:29:a5:ca:d3:0e:6d:c6:3b:b6:db:67:74:3a:b4:e5:cc:94:
c5:82:f7:a9:59:53:db:8d:10:d4:bb:31:36:ab:50:05:bb:69:
f8:09:94:71:7d:56:4d:4a:aa:eb:63:db:ff:d6:88:10:79:9f:
2f:cb:b8:c4:46:05:6f:47:94:6b:f3:a6:23:aa:2a:cf:d9:a1:
36:74:8c:7e:8c:95:5b:98:ff:13:f1:e2:1c:16:0f:8a:48:24:
4c:f2:cf:9a:ab:f8:86:a6:2d:75:f5:57:72:1f:a5:d5:78:da:
b7:e9:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:29 2025 by rpki-client