Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier: sj3wi2yVfDH07OlwYS2RYmY+73XOZtIwegeSAPYszjw=
Subject key identifier: C1:A8:45:9D:66:34:A2:CB:AB:CD:65:25:17:03:EB:ED:4D:5B:86:46
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial: 0197B70EBB8C0561BB5BEC7FD17520FC852B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number: 05AA
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: LoFEu1aGbGNJm/MoBLD/+g0q9PcabGxVEO2ev93cvUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bb:8c:05:61:bb:5b:ec:7f:d1:75:20:fc:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=c1a8459d6634a2cbabcd65251703ebed4d5b8646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:df:c4:89:f6:8b:80:80:fc:72:8c:46:69:
cd:c6:d5:2b:8f:41:5b:6b:05:a8:a5:9d:79:27:e8:
78:1b:48:31:ee:95:6f:56:93:e1:4d:09:5b:35:12:
ac:41:f3:fb:8e:67:a4:04:3f:5f:ca:fe:f6:82:cb:
fb:5b:9a:10:81:cc:b5:6e:01:36:85:c6:1d:05:78:
fc:00:8c:03:18:7e:51:5d:6f:d2:be:6f:a9:76:08:
45:29:27:6f:20:c6:2f:dd:37:52:42:38:18:46:de:
5d:8d:20:cd:ad:f7:53:b5:40:fc:d2:27:5e:7a:8b:
c9:2a:8b:42:50:ff:7f:f6:43:cf:91:4b:47:1d:ca:
73:69:5c:21:7a:f7:f5:d6:21:ba:ba:5b:30:95:7e:
da:c9:96:7c:06:3c:da:8e:b3:c7:2c:e9:fa:1f:0b:
f6:d7:c2:98:73:6b:71:84:9d:8a:9f:87:bf:b4:3d:
72:e8:30:fe:8d:7f:78:34:d2:d9:d9:eb:9f:0e:28:
7a:2c:f2:c4:e8:12:dd:a8:d9:fe:e7:8f:53:a3:6b:
2d:84:50:27:6f:af:8c:d3:8a:33:f0:58:ea:ab:14:
24:0a:b1:29:b1:05:e4:bb:08:bb:df:ea:99:d0:1c:
64:8a:a4:0d:bd:52:da:c0:c6:7e:3b:a0:73:f0:ab:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A8:45:9D:66:34:A2:CB:AB:CD:65:25:17:03:EB:ED:4D:5B:86:46
X509v3 Authority Key Identifier:
keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:67:1f:b5:a2:41:ca:60:a4:75:66:8c:22:ab:c8:dd:0e:60:
65:5d:9a:3a:d2:4a:9b:99:58:0c:85:d8:25:33:0c:b7:b2:9f:
11:20:49:db:7c:b1:41:31:77:a0:6f:9b:07:fe:c1:70:b3:f5:
48:74:42:ae:c3:21:fa:95:d1:d1:88:75:2e:3d:db:5b:c3:ef:
65:1e:af:f5:6b:10:4a:99:e5:52:33:c7:f3:70:50:ed:50:8e:
65:27:4a:f6:7f:08:6d:e1:2d:99:bf:a4:85:d9:f4:c1:d3:dd:
bd:9b:f3:fb:11:aa:9d:e8:03:4b:55:a0:85:e7:41:b7:68:0d:
6e:f6:b6:19:ef:c3:07:e5:01:8e:76:90:8f:1f:6d:bd:65:12:
8a:a0:94:f4:60:65:6b:00:2a:c0:21:fa:2b:64:58:a1:fb:15:
42:62:06:6b:77:c5:d8:5d:a5:8f:bc:50:bf:82:aa:f1:b5:a0:
9f:d6:13:b4:f2:47:9c:23:40:2d:d8:bf:8f:9e:95:ad:d1:64:
a3:19:e2:7a:c6:a6:ab:8d:0b:aa:49:d3:ff:07:b2:c8:4b:84:
bb:1f:63:06:dc:6b:34:44:e1:ea:b8:13:8e:1d:44:e9:20:88:
b2:a9:e5:ec:d4:6c:48:19:8c:e9:c4:b7:90:1e:20:7b:24:15:
a3:03:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:02 2025 by rpki-client