Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: 9t/qTbJXfWIDkQa7s9AGJzsIvql8bS9ObdT8ue8R1k4=
Subject key identifier: CE:85:B0:F5:28:F7:D1:31:56:13:C4:8C:37:59:B7:19:BC:0F:4D:6F
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 0197B6A20FB4D7FAF5647502D1518C7CF74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 0630
Signing time: Sat 28 Jun 2025 13:02:43 +0000
Manifest this update: Sat 28 Jun 2025 13:02:43 +0000
Manifest next update: Sun 29 Jun 2025 13:02:43 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: m0VtBBIF3ZLQswNdC4SmGc07Is7/vX4yCsKs8DG+c0k=)
2: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (hash: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0f:b4:d7:fa:f5:64:75:02:d1:51:8c:7c:f7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Jun 28 13:02:43 2025 GMT
Not After : Jun 29 13:02:43 2025 GMT
Subject: CN=ce85b0f528f7d1315613c48c3759b719bc0f4d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:39:6c:a1:4e:cd:0f:34:8e:f0:34:42:45:
d2:c3:16:40:0f:e1:2d:2f:64:29:e8:47:07:e6:38:
31:1a:17:ec:96:a5:17:ce:64:80:56:df:f4:e7:de:
db:8e:71:a8:32:6b:60:a0:c7:ab:da:8d:0e:8d:37:
b9:8e:da:d4:a8:24:20:86:f5:1b:21:3f:f6:6c:85:
61:19:4c:82:2e:77:5b:f2:b5:81:9f:4f:4b:56:32:
36:d1:3e:92:81:6c:32:81:d7:22:e8:71:9f:46:7f:
d7:be:4c:6d:11:b3:c2:27:26:fa:57:38:01:df:2a:
3b:40:e1:4a:71:82:aa:21:3e:89:1d:f5:03:e5:6b:
9b:89:8e:cc:60:10:a9:1e:9c:f1:2b:f9:7a:4c:70:
29:d7:5a:64:5e:d0:16:e7:5b:90:20:5c:11:11:9f:
ff:f4:33:ad:14:53:ee:9a:ea:a2:0d:9a:c9:6a:72:
53:9f:98:4e:51:c5:8d:4d:35:e4:2a:57:d2:e8:a5:
69:f1:48:5c:f3:93:cd:e5:b2:bf:da:b8:23:70:de:
74:40:a2:46:b6:69:7a:cc:d8:ad:54:38:5f:16:d1:
06:ca:39:16:9b:2b:6b:f9:54:27:8b:8e:01:08:15:
19:c7:7f:35:cd:ee:d7:14:83:e6:86:59:7a:b6:56:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:85:B0:F5:28:F7:D1:31:56:13:C4:8C:37:59:B7:19:BC:0F:4D:6F
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:66:8c:ae:92:3c:a1:26:40:3f:7c:89:7b:ef:04:fb:41:1d:
c5:6f:d5:37:e3:6b:6c:ea:2c:9d:47:ea:b5:5e:87:79:99:2e:
c3:a7:0d:71:e3:8a:b7:1e:3c:5b:44:43:e5:6f:0d:38:25:bb:
3d:2a:46:f0:02:87:e9:71:1c:0e:36:a6:bb:93:4d:9c:5c:2b:
81:b5:cb:9e:33:f2:00:1d:2f:4f:b0:b0:a7:da:36:db:49:6f:
ba:83:f8:ef:89:ea:73:fe:38:b0:92:1e:0e:b5:1d:d6:50:db:
ad:a0:8b:67:bd:f5:ff:96:8b:5b:ec:64:c8:73:d9:8a:2f:7f:
b1:bb:93:25:1a:27:46:f3:7d:a4:ce:22:ac:98:e3:f1:93:f5:
47:bd:e8:cc:04:27:63:3b:19:25:e3:9f:d6:26:f0:65:ff:d6:
46:a7:29:5a:c8:89:fa:7e:f3:2e:9f:78:79:12:c3:14:95:d1:
ea:82:d4:95:a2:1e:13:1b:79:40:7d:0b:8c:75:81:6a:14:98:
97:ce:5b:57:3a:15:64:b3:be:3d:ae:16:d3:cc:4f:65:b3:a0:
7e:7f:08:96:89:84:a9:41:02:aa:18:45:17:fc:4e:19:b2:0a:
e2:0b:d0:cc:b4:8c:1b:e6:6c:8e:4c:45:09:93:2e:02:d1:00:
21:9d:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:09 2025 by rpki-client