Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: 9BMjH8+UXIGA/I9xsZIef5ph5wj4tl5GrXOUBTGfq3g=
Subject key identifier: 81:41:4A:3A:D3:EE:ED:D6:B7:2D:C2:7B:F9:3B:B1:66:88:D9:8D:D2
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 0196B77E2D6EFF12FA8C5A59992DF3413C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 03EB
Signing time: Sat 10 May 2025 00:00:21 +0000
Manifest this update: Sat 10 May 2025 00:00:21 +0000
Manifest next update: Sun 11 May 2025 00:00:21 +0000
Files and hashes: 1: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (hash: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=)
2: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: ZGPSlC8Gl3Y3bCic38HljK933l2EKa0sGGm0j/rXkKw=)
3: N16JeWvOmOgFnFHegC3uE95HfCM.roa (hash: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:2d:6e:ff:12:fa:8c:5a:59:99:2d:f3:41:3c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: May 10 00:00:21 2025 GMT
Not After : May 11 00:00:21 2025 GMT
Subject: CN=81414a3ad3eeedd6b72dc27bf93bb16688d98dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:25:41:bd:25:39:46:8f:16:38:4b:6d:07:
8f:2b:f6:af:25:ee:39:21:ca:74:55:d3:5c:b3:86:
0b:74:7f:f7:66:8e:42:37:e7:ba:28:78:87:78:82:
1f:0e:6e:85:04:5e:2d:b4:d2:f5:28:72:92:a3:fa:
69:e0:9a:dd:f4:ae:67:df:d4:fd:65:4e:b5:01:ed:
42:68:69:28:17:c9:42:83:b1:65:a0:75:b9:cc:31:
9b:82:7c:9e:20:ca:ad:82:e6:2c:40:e0:b7:27:09:
43:21:87:70:f6:82:00:fa:dc:e2:33:bc:2c:c8:c5:
0a:05:19:ea:54:d1:ce:74:9e:8e:e2:d6:44:6f:0e:
19:35:3d:59:eb:59:65:9a:1c:0f:56:63:48:0d:46:
11:b7:68:52:53:4b:36:08:8e:75:9b:27:aa:4d:14:
45:aa:d9:66:1c:34:48:98:71:f7:5f:e3:13:86:f6:
98:46:a5:ce:36:3b:ea:ec:11:4d:02:e4:f9:f5:44:
ca:47:b8:5e:f3:50:be:f3:cd:34:27:95:89:84:b7:
65:d9:e6:aa:ff:f9:90:ca:26:8d:15:53:c7:da:f3:
7f:e7:41:19:c0:b5:5d:c2:06:2a:48:8e:95:eb:3c:
8f:36:7c:2b:15:aa:c9:08:9f:e7:93:87:f4:a7:89:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:4A:3A:D3:EE:ED:D6:B7:2D:C2:7B:F9:3B:B1:66:88:D9:8D:D2
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:79:fb:4e:19:25:08:8f:4e:50:2f:c3:ad:b1:e3:d5:b7:7f:
d9:c8:e4:7e:44:41:67:5d:0b:b6:11:ab:e3:d6:81:d2:e3:ba:
02:47:ad:05:35:d4:42:77:a4:48:96:c6:f3:f5:5f:b4:bd:bb:
85:ec:c6:cd:ca:40:e8:44:79:fb:28:10:c2:23:d4:26:70:2e:
5c:d3:4f:1a:60:12:fa:4f:93:01:fa:45:3c:ce:7d:35:90:27:
a4:64:c2:35:67:2e:1f:2c:e0:2e:52:d3:76:86:65:84:59:96:
2d:e1:50:f4:4a:e9:20:77:b5:af:89:f4:a1:e4:ff:8d:71:0d:
dd:db:13:93:0f:d2:83:51:ba:78:f4:01:d4:72:fb:fb:5b:a6:
27:a4:43:58:d5:e8:15:f4:61:32:dd:c4:ae:b0:a9:8c:5f:91:
d9:ac:61:16:f2:e2:93:2c:42:60:08:c4:7d:62:b6:28:e7:5e:
82:a9:0e:b5:2b:3d:59:47:be:af:8f:4e:2e:e7:b5:7a:50:01:
a8:40:f3:b4:2c:54:ff:65:11:0a:6e:ae:ea:44:18:6f:18:53:
0c:e5:54:1d:bd:77:b9:60:fc:f4:9c:9d:eb:c3:6d:45:62:07:
ad:fd:00:58:41:3d:c2:11:9c:56:b4:e9:fe:d7:5d:61:86:82:
bc:7a:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:03:07 2025 by rpki-client