Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File: mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier: MgeLcDSgvXjHJsrVxaG1tIdjHOzBr7QyWmF1RWosGL4=
Subject key identifier: BC:1D:AB:48:F0:85:C3:76:C4:18:8E:AD:CE:8B:CC:30:06:49:1E:CD
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer: /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial: 0196C34BB0285CD0ED64CF613DEA02665F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number: 0429
Signing time: Mon 12 May 2025 07:00:39 +0000
Manifest this update: Mon 12 May 2025 07:00:39 +0000
Manifest next update: Tue 13 May 2025 07:00:39 +0000
Files and hashes: 1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: mJwtLVQ9igyNXTWIOg7M5wScPvcQFAd+U3rNSSIfcs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:b0:28:5c:d0:ed:64:cf:61:3d:ea:02:66:5f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Validity
Not Before: May 12 07:00:39 2025 GMT
Not After : May 13 07:00:39 2025 GMT
Subject: CN=bc1dab48f085c376c4188eadce8bcc3006491ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:54:5f:0e:c4:f7:f5:7f:e1:2f:c5:f0:27:c4:
36:e3:0f:65:89:fb:a8:28:82:1b:ef:54:fd:7d:a7:
65:ca:98:97:45:a1:6b:be:f6:5e:dd:ab:8b:07:3d:
4b:6f:2f:1a:e2:16:14:f9:6a:56:e4:da:40:6a:40:
22:d8:dd:ce:10:85:fe:6e:0b:ff:59:b0:84:b7:54:
d9:e0:ca:49:d0:a9:ed:27:cd:9b:51:3c:9e:29:89:
c3:47:cb:55:90:e1:89:52:d8:ea:f0:0e:c0:3f:4d:
e9:55:cc:8e:fb:bd:4c:cf:aa:76:01:1d:6d:83:ed:
61:f1:05:0a:71:78:a3:7b:f7:3b:5c:f5:99:2f:47:
88:01:e2:77:b0:95:8f:4a:ad:7c:25:b6:d8:e9:a9:
19:02:4d:d9:86:54:1c:51:65:99:12:45:8b:5d:87:
2f:b3:96:d8:88:ec:cb:90:65:e5:da:9a:31:fc:d6:
a8:39:c4:f5:ba:16:e2:b7:98:49:d5:36:fe:59:11:
33:6b:ca:ac:4f:32:f3:a9:7a:60:b2:05:97:24:16:
d2:73:6e:46:63:33:a3:a5:15:41:be:31:68:77:29:
68:f0:09:25:ca:09:20:90:d3:fd:4f:73:c6:25:c3:
29:20:82:8c:78:56:b1:bf:50:bd:e0:6c:3b:23:9e:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1D:AB:48:F0:85:C3:76:C4:18:8E:AD:CE:8B:CC:30:06:49:1E:CD
X509v3 Authority Key Identifier:
keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:15:3f:f4:62:3c:ec:5b:0e:36:bd:26:f9:fc:9f:23:b2:37:
29:9d:d2:80:f4:86:1c:90:3e:71:e5:3f:c3:08:d3:a9:26:46:
de:93:45:18:f8:3c:38:75:7d:f8:d3:04:b3:30:2d:45:e9:d5:
be:71:93:49:20:8e:8f:6d:5c:d8:49:2c:e6:b8:37:79:a8:00:
93:87:80:a1:57:99:40:9b:ed:ff:4f:52:c8:f8:47:92:56:c3:
a9:b8:fb:70:12:69:ee:30:e0:4e:b6:5c:01:b8:e9:3e:19:17:
1d:26:76:d0:92:93:45:ee:8f:5f:98:ff:96:9c:e5:55:10:b7:
65:3a:0d:90:2f:d7:8e:ad:a2:50:51:d5:42:2e:bb:18:a1:49:
4c:d8:07:ad:ca:21:70:7e:fc:62:44:8e:4f:e1:14:11:68:74:
c7:c2:fa:46:ab:f6:d8:ae:39:0d:11:c0:97:3e:37:03:1b:42:
6a:01:65:94:e1:91:10:db:20:a5:ec:77:0f:15:51:40:04:d0:
e6:14:ea:b4:8e:e9:cb:67:b1:d4:0d:d5:c1:88:8a:a7:5d:73:
b0:c7:ea:ba:2c:0c:0c:b1:0c:c1:cc:56:42:13:d5:c7:8d:52:
54:e9:64:f7:1d:07:80:48:8e:51:d3:98:83:82:57:ec:bd:b6:
ef:51:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:23:05 2025 by rpki-client