Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier: x8G0H8i/4IShmFM3O7Np6V0K0rtqgyNeDynGoHyqhw8=
Subject key identifier: 5F:F7:4E:70:53:69:AC:7E:C9:DA:4E:0E:8B:6A:A9:34:77:31:98:72
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial: 0196A2E4E17CC3EA96BB3E352E52FD795C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number: 051B
Signing time: Tue 06 May 2025 00:00:31 +0000
Manifest this update: Tue 06 May 2025 00:00:31 +0000
Manifest next update: Wed 07 May 2025 00:00:31 +0000
Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: k2H62FN55fa3AMuZVJCYmXok1WzfiA3D6umtqsxGLm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:e1:7c:c3:ea:96:bb:3e:35:2e:52:fd:79:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Validity
Not Before: May 6 00:00:31 2025 GMT
Not After : May 7 00:00:31 2025 GMT
Subject: CN=5ff74e705369ac7ec9da4e0e8b6aa93477319872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:d4:e3:4c:d7:dc:14:56:ae:9c:54:33:8b:
fa:7c:9d:29:30:5e:8a:61:76:f2:2b:f5:21:a5:3e:
02:9c:44:16:2a:d9:f0:ca:af:75:71:23:c7:88:58:
8c:0f:09:5e:d2:e6:5d:a0:5a:7b:a5:54:19:96:4f:
61:7b:2b:9f:22:6a:02:39:23:c6:98:e9:07:8f:e7:
92:99:d9:12:cb:4c:26:38:94:43:f9:8c:6f:39:8f:
83:04:bc:10:5d:7e:82:cb:90:d5:e5:c6:f2:0c:c9:
02:3c:90:98:62:b5:a1:04:f1:cb:05:e2:93:45:a7:
5f:0a:cb:ca:31:fe:90:74:8f:fd:ff:55:b6:08:03:
34:6e:d9:06:6a:94:cf:49:c2:30:3e:d9:1e:57:aa:
d5:62:29:e1:9a:33:90:2b:8c:18:f0:73:08:19:15:
8e:6c:42:9d:b0:34:e0:1d:eb:04:f3:32:82:3a:45:
1c:a1:3a:72:6a:ec:65:ed:78:05:7d:aa:65:90:3b:
35:5f:02:c2:6b:4d:3f:6e:53:46:00:e3:4a:b4:db:
eb:99:03:ee:73:52:0f:83:74:38:79:8b:74:5f:14:
9f:5b:30:7e:d8:3d:82:b3:22:3e:19:39:05:3f:c7:
a0:d9:f1:64:b4:ec:33:ce:67:1b:c2:68:65:f9:ac:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:4E:70:53:69:AC:7E:C9:DA:4E:0E:8B:6A:A9:34:77:31:98:72
X509v3 Authority Key Identifier:
keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:29:80:26:c8:79:3d:9b:a2:62:41:83:f4:89:bf:0d:b4:f4:
4d:c8:92:2d:17:a6:86:ff:73:80:a0:87:37:f4:40:bd:fb:f5:
26:b8:90:48:ce:c7:e6:03:1e:ec:ce:03:63:66:74:33:06:cb:
a0:b5:c1:0d:45:b3:f9:c5:da:c7:65:78:aa:dd:a7:ab:cc:65:
71:3e:1c:4f:f2:b4:db:8b:a1:49:34:97:65:24:2d:38:d9:1b:
a6:10:d3:2a:7f:62:06:f4:94:a1:fa:97:1e:ed:6e:35:23:b4:
e1:2a:3c:a2:a3:76:17:50:c8:e6:90:b6:e8:8f:9e:58:d4:a4:
63:86:4a:5d:a9:ab:f1:02:7c:f1:b6:a8:17:45:46:5e:af:0d:
9a:82:a9:ff:56:a5:e1:aa:14:79:76:d4:8f:cc:84:77:4d:5f:
bd:9c:76:3f:f4:83:9c:10:45:be:98:d3:0f:0a:fc:1a:66:45:
60:bf:cd:1e:47:8f:34:78:fb:0a:17:ed:09:17:b1:ea:1a:ac:
9b:48:39:c9:19:b2:47:23:cf:fa:32:95:c8:67:e1:5c:23:2e:
a5:d9:c7:5a:b9:36:2e:3e:5a:be:3a:fb:5a:35:ba:1d:d9:f7:
ba:e3:d0:20:22:79:89:fb:98:4d:b3:3e:50:ea:d1:20:96:47:
a6:ac:e3:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZai5OF8w+qWuz41LlL9eVyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTYxYTEyMWM1MjAwNTRkZjRjZTU5ZTU1OTJhYzY4YjA1
MDZiZWYwHhcNMjUwNTA2MDAwMDMxWhcNMjUwNTA3MDAwMDMxWjAzMTEwLwYDVQQD
Eyg1ZmY3NGU3MDUzNjlhYzdlYzlkYTRlMGU4YjZhYTkzNDc3MzE5ODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/DU40zX3BRWrpxUM4v6fJ0pMF6K
YXbyK/UhpT4CnEQWKtnwyq91cSPHiFiMDwle0uZdoFp7pVQZlk9heyufImoCOSPG
mOkHj+eSmdkSy0wmOJRD+YxvOY+DBLwQXX6Cy5DV5cbyDMkCPJCYYrWhBPHLBeKT
RadfCsvKMf6QdI/9/1W2CAM0btkGapTPScIwPtkeV6rVYinhmjOQK4wY8HMIGRWO
bEKdsDTgHesE8zKCOkUcoTpyauxl7XgFfaplkDs1XwLCa00/blNGAONKtNvrmQPu
c1IPg3Q4eYt0XxSfWzB+2D2CsyI+GTkFP8eg2fFktOwzzmcbwmhl+azlDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/3TnBTaax+ydpODotqqTR3MZhyMB8GA1UdIwQY
MBaAFJqWGhIcUgBU30zlnlWSrGiwUGvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUt
NDhiYzhjYjNjZGFhLzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUtNDhiYzhjYjNjZGFh
LzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSmAJsh5
PZuiYkGD9Im/DbT0TciSLRemhv9zgKCHN/RAvfv1JriQSM7H5gMe7M4DY2Z0MwbL
oLXBDUWz+cXax2V4qt2nq8xlcT4cT/K024uhSTSXZSQtONkbphDTKn9iBvSUofqX
Hu1uNSO04So8oqN2F1DI5pC26I+eWNSkY4ZKXamr8QJ88baoF0VGXq8NmoKp/1al
4aoUeXbUj8yEd01fvZx2P/SDnBBFvpjTDwr8GmZFYL/NHkePNHj7ChftCRex6hqs
m0g5yRmyRyPP+jKVyGfhXCMupdnHWrk2Lj5avjr7WjW6Hdn3uuPQICJ5ifuYTbM+
UOrRIJZHpqzj0w==
-----END CERTIFICATE-----
Generated at Tue May 6 02:32:44 2025 by rpki-client