Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: QVvjuqrqaQhgg9XRNzyJS9MAf7Tiz0IEfWm0iPXj2FQ=
Subject key identifier: C4:DD:48:18:AD:BA:B0:F7:39:C7:FF:2E:13:D7:12:F9:0D:0A:44:72
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 0196C0B8AC7CFB2DEBD57551E9FCEB75283F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 14C9
Signing time: Sun 11 May 2025 19:00:50 +0000
Manifest this update: Sun 11 May 2025 19:00:50 +0000
Manifest next update: Mon 12 May 2025 19:00:50 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: LdgsIMgRcyojwyJNUn8acRzgDPfDgHvkgunlehtf39k=)
2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:ac:7c:fb:2d:eb:d5:75:51:e9:fc:eb:75:28:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: May 11 19:00:50 2025 GMT
Not After : May 12 19:00:50 2025 GMT
Subject: CN=c4dd4818adbab0f739c7ff2e13d712f90d0a4472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:c4:fb:2e:a1:c6:3a:9c:64:cd:d9:e4:8b:
6d:cd:0c:79:b7:75:3f:5e:3e:31:32:67:3b:65:7b:
9d:c3:a5:a4:23:0f:af:68:9b:e1:9b:f2:a8:2e:24:
d8:49:68:a5:7d:71:20:0a:40:5a:e0:c7:f7:8c:6a:
37:11:34:e2:26:f0:78:98:f8:8c:3b:41:d2:58:98:
d0:38:36:4a:fe:33:08:9c:11:bb:1b:d3:cf:65:85:
79:4e:e2:d3:82:1b:ef:8a:7a:bb:48:d8:1f:78:96:
b4:13:a0:7f:fb:66:6b:da:e1:51:3e:2e:43:5f:04:
a8:07:08:b8:b7:80:2e:8c:ea:97:88:dd:f0:4a:1f:
4f:c1:93:67:d3:82:9c:3e:51:f6:94:99:30:80:80:
14:6a:07:b9:cb:0b:0f:a8:d0:8c:a9:9a:b6:39:30:
a2:d4:fa:17:81:a3:e8:6a:cf:cb:50:a4:25:1c:30:
35:f4:4d:eb:40:8f:db:73:fd:5c:43:cb:1a:77:09:
81:23:b7:05:ea:39:0e:67:9d:eb:93:16:62:be:06:
54:5d:da:bc:c6:e8:c6:b3:5b:fa:46:3a:3c:b8:ac:
67:51:3a:49:22:f9:29:66:e2:88:b7:57:c6:11:94:
2d:e1:0c:0f:1a:10:fa:58:3c:b0:f6:8a:b6:f9:14:
8d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:48:18:AD:BA:B0:F7:39:C7:FF:2E:13:D7:12:F9:0D:0A:44:72
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:98:1a:cb:26:64:dd:7b:e5:a2:cc:b6:2f:86:7a:52:eb:66:
20:02:60:75:41:a0:61:d8:7c:a1:c5:bf:46:ab:d5:7a:85:2d:
a3:d1:34:f3:29:5d:2c:0d:1b:00:99:e8:e2:28:e6:ed:e8:ab:
7e:ee:de:a5:de:9d:75:31:69:8a:7c:79:e7:da:bb:08:aa:46:
dc:25:47:87:0d:ab:24:87:cb:43:e0:22:ae:cd:6a:90:55:05:
c3:1b:04:6b:71:5f:ad:a0:43:9d:f9:a2:3f:fe:6a:b3:09:b4:
25:51:0c:6a:43:54:4a:29:07:a5:d8:86:91:19:9c:bd:10:1e:
8b:22:2a:e5:5e:ce:29:b1:fa:12:6b:03:22:03:8b:1b:23:3e:
99:ba:ea:0a:54:ba:fb:79:a7:78:df:43:2c:de:17:ae:22:fc:
86:b5:99:4e:01:cc:fd:d2:c4:7b:61:04:6e:5a:79:5e:14:d4:
e2:7b:96:aa:4d:a5:3a:e1:16:47:20:6c:40:ea:34:4e:be:bd:
9c:cc:67:b3:3d:5e:f5:55:7a:79:fa:be:4b:8b:24:c9:29:fa:
19:94:13:82:7c:d6:62:45:50:43:35:c6:3f:8f:6c:e8:2d:ae:
69:8c:19:f2:64:3a:13:cc:4e:8e:28:d0:b0:b9:95:7f:e9:25:
0e:4f:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:14:42 2025 by rpki-client