Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json)
Hash identifier: MEK1NPh32Het26WyKEprU/yIH/zBPohjQgAIBix6uZ8=
Subject key identifier: 2A:E6:F8:E5:D7:62:CC:E1:26:9A:CA:E3:CD:11:65:3D:BC:D5:D9:45
Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Certificate serial: 0196BB92F47BF519546CFAE013BE9ADA25AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
Manifest number: 01FE
Signing time: Sat 10 May 2025 19:01:32 +0000
Manifest this update: Sat 10 May 2025 19:01:32 +0000
Manifest next update: Sun 11 May 2025 19:01:32 +0000
Files and hashes: 1: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: eYi2Yf9l0vGDdBWykhot0ttn4GOX3In3XEk1ZUJXoGw=)
2: l_KNRz-DOMsGFsOq9QowWZSTlSY.roa (hash: npXTC3HvU34eVfQ3A8stCbWQJ3DirxlZznu2fCVNFbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:f4:7b:f5:19:54:6c:fa:e0:13:be:9a:da:25:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Validity
Not Before: May 10 19:01:32 2025 GMT
Not After : May 11 19:01:32 2025 GMT
Subject: CN=2ae6f8e5d762cce1269acae3cd11653dbcd5d945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:36:97:eb:91:27:d1:93:3d:35:a6:ad:08:
9a:be:a5:2a:79:a7:78:6b:26:ea:ad:9a:be:0e:5d:
11:ab:81:61:86:cc:47:e8:71:63:81:d1:bd:4d:33:
5b:3a:50:8d:a6:e4:ac:91:58:45:df:05:fe:ca:63:
c2:a7:85:02:4e:3e:b2:e0:a5:fe:31:5d:5e:b5:52:
d8:f4:00:93:5c:03:f3:27:fd:a4:c6:1a:f2:a7:7b:
e8:62:dc:90:88:5c:f0:71:d7:45:7a:06:15:b5:ff:
85:e2:8e:ba:9d:db:9a:d3:62:35:c0:2f:5a:34:4b:
ee:51:cd:9c:e6:fa:84:33:79:30:23:3b:7d:ef:8a:
36:21:5e:4b:f4:ac:4d:91:8e:1c:b1:ac:67:78:0a:
f1:01:29:38:c4:54:21:13:09:f6:c8:9d:6a:df:f6:
ac:8c:03:c6:2b:12:64:48:7b:ca:c8:b9:72:a6:fc:
b3:30:76:1e:ba:7f:bd:92:02:17:9a:f1:32:cd:e1:
69:92:b6:63:e5:6f:9a:f6:40:1c:b7:94:f9:42:8d:
fe:10:bc:5b:84:6a:f2:88:56:2d:c3:eb:2a:f3:a5:
20:9b:79:b0:2d:3b:69:41:e9:10:45:64:ba:60:70:
1a:b3:bb:9f:40:1b:14:c8:5c:02:41:3e:60:07:d6:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:F8:E5:D7:62:CC:E1:26:9A:CA:E3:CD:11:65:3D:BC:D5:D9:45
X509v3 Authority Key Identifier:
keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6d:e6:ad:68:4c:9b:6d:f4:fb:aa:b8:0e:cc:a8:94:c3:a1:
b9:11:69:5e:4d:cd:aa:52:94:2f:1f:4c:2f:16:0f:1b:33:11:
3b:51:18:c5:30:89:8f:47:ec:33:2f:fc:7e:3d:d5:55:82:bd:
7f:da:6b:a4:90:b1:f8:11:16:e9:65:a8:e2:88:41:9f:b7:9e:
b6:f3:c3:40:cc:01:0f:f6:fa:31:07:f9:3f:be:a0:ea:1d:bc:
a4:04:d1:b8:5c:4f:6e:6a:74:73:3e:7d:1a:e7:8c:e9:4f:84:
de:0e:91:06:a0:40:3f:46:26:c1:18:33:16:44:cb:a9:a4:7a:
41:43:cc:a3:91:3e:8f:40:98:84:75:d0:0d:a5:f4:ee:27:39:
4b:14:8e:b3:41:38:9f:58:14:2a:10:8b:f7:f4:71:86:15:a3:
1a:7d:dd:56:27:6e:f1:3c:5e:db:98:7a:07:71:d3:a4:80:c0:
57:5e:fb:cb:48:ac:6b:f0:4f:5d:37:d7:35:66:bc:62:99:6a:
b6:f7:87:62:8b:5b:fb:35:96:73:c5:60:34:63:b3:e7:04:95:
42:32:3d:49:f0:93:9f:8b:7d:5b:fc:d3:07:e7:41:e7:9e:67:
6d:6f:81:54:59:88:41:82:75:7a:53:dd:26:9b:cf:6d:3a:35:
de:2e:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:15:08 2025 by rpki-client