Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: uo15ZLIbcdfW8eExc/7j7YuP8kk0GFc4J+vztKzs6bw=
Subject key identifier: 46:F1:95:60:4B:31:CC:7E:F0:EF:BD:88:33:1F:1B:59:F4:50:23:A3
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 0196C7CD693D6C361EC94F1D49E2A01048C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 14CB
Signing time: Tue 13 May 2025 04:00:49 +0000
Manifest this update: Tue 13 May 2025 04:00:49 +0000
Manifest next update: Wed 14 May 2025 04:00:49 +0000
Files and hashes: 1: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (hash: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: q8UzZ2NKPJ/8BcDEz9Ai5APjwdWERYcRICfOBvV1fAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:69:3d:6c:36:1e:c9:4f:1d:49:e2:a0:10:48:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: May 13 04:00:49 2025 GMT
Not After : May 14 04:00:49 2025 GMT
Subject: CN=46f195604b31cc7ef0efbd88331f1b59f45023a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:bd:b4:09:02:de:c2:4a:d0:b8:c0:38:b2:
06:dc:74:73:d3:73:f5:0c:5f:4a:e3:a3:5b:54:de:
e8:db:f0:ca:73:54:aa:d9:f1:c2:b2:42:a0:1a:9f:
2c:f4:c0:7e:f9:c0:48:e4:d5:e4:94:0c:fd:15:1c:
9c:d0:85:3b:c7:aa:01:e3:87:0c:66:be:6f:8f:f0:
71:fc:07:b3:32:bc:6c:6e:ec:a9:b4:85:60:6c:24:
9b:a5:fd:7a:5d:e2:40:a9:e4:ef:ef:f2:a7:49:2d:
a5:53:40:02:a5:03:c5:f0:d3:ac:8c:14:c5:29:b7:
8c:52:ed:4d:41:eb:38:f3:85:88:e0:06:1b:0f:6c:
52:0f:42:f7:a7:8e:ec:c0:c8:dc:95:d8:e8:cb:e6:
b8:81:13:32:3d:ff:b8:0f:17:24:73:57:56:28:cc:
30:7f:3a:90:7f:e2:d3:03:4b:59:03:e1:fa:b4:43:
dc:7f:9d:ec:d1:43:8a:2b:f8:2f:8f:db:1c:80:fc:
ac:5a:b0:e0:d6:8f:6f:e1:bf:d1:f1:83:16:af:67:
88:f3:f8:b7:a6:7c:5b:bc:05:25:46:e7:38:d9:d9:
33:1a:7b:f6:c2:32:97:0f:a5:0a:73:14:fb:31:ac:
d3:cb:80:eb:00:75:d0:c8:e3:c8:5d:86:f9:64:26:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F1:95:60:4B:31:CC:7E:F0:EF:BD:88:33:1F:1B:59:F4:50:23:A3
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dc:8d:ff:af:c2:49:96:47:d9:a4:b7:4e:78:13:bc:3a:66:
04:64:e2:53:a0:11:85:a8:31:6a:02:f5:9c:11:6b:a0:65:3b:
1c:33:bc:12:57:7e:c9:2c:2d:fa:18:99:6b:17:02:a0:3d:30:
8b:49:a2:45:dc:c1:ba:e5:38:5a:a3:6c:4d:37:01:ed:c5:6c:
0a:c4:ae:45:a2:0e:3b:45:f0:1e:1a:8b:0c:7c:df:d5:84:01:
91:d6:47:c8:62:f3:b2:c3:07:97:21:aa:18:4a:eb:60:f2:b7:
c8:fb:ae:00:ab:d8:47:be:e8:78:80:b7:21:b5:93:1b:2d:1b:
11:64:da:db:b4:8d:d3:a5:fe:ae:81:46:4f:34:17:27:0f:80:
38:65:55:c6:f6:c4:69:8e:90:2d:f4:0d:f6:f1:d8:93:a9:8a:
7b:55:d7:1d:49:af:1b:1f:6a:09:0e:9b:4a:c7:29:9d:86:7e:
99:6a:b9:89:9f:70:42:78:8e:96:b2:22:c7:1d:3d:ef:a2:cf:
c3:16:82:2c:cc:6f:89:ea:65:47:46:87:d4:64:e0:2d:c9:29:
d4:09:12:94:66:e3:c0:6a:1d:d2:65:b5:7b:60:a4:88:d2:ca:
d6:1c:ec:ef:91:24:d2:69:e2:4e:bb:c5:1c:da:2d:47:1e:38:
25:5b:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:21:08 2025 by rpki-client