Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: TmNap04jcRPw8blhDwAimIzWJDiOJG8Ojdyv/XYn2xs=
Subject key identifier: 54:94:C2:D0:E5:E2:2F:4E:90:A7:C4:46:25:4E:11:02:04:73:35:C3
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 0197B7EA2ACB696E8F0148F65D5482A19ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 19:01:06 +0000
Manifest this update: Sat 28 Jun 2025 19:01:06 +0000
Manifest next update: Sun 29 Jun 2025 19:01:06 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: kXsczs6EPS3mytI8BzAzGFIeOCmfQBcoAEIT+zTe10M=)
2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2a:cb:69:6e:8f:01:48:f6:5d:54:82:a1:9a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Jun 28 19:01:06 2025 GMT
Not After : Jun 29 19:01:06 2025 GMT
Subject: CN=5494c2d0e5e22f4e90a7c446254e1102047335c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:13:6b:b6:15:43:dd:9a:89:81:ad:89:4d:
60:5f:ee:c4:80:f0:91:b2:f0:94:fc:37:5d:d6:ec:
08:68:8c:ae:0c:36:b6:07:01:8a:b4:52:04:50:c8:
34:c6:7c:a4:82:b2:a2:9f:8b:f8:6d:6a:bb:9d:97:
cc:12:29:6f:32:a9:50:bf:52:e5:e4:1b:e6:80:7c:
fc:00:84:d1:71:ba:b8:25:22:fd:4e:53:f5:ad:b0:
4b:58:ab:42:aa:88:16:3b:b0:5e:1c:21:5c:71:cd:
30:70:02:e4:b0:2f:01:61:5b:c4:31:48:c3:8b:62:
7b:fb:01:24:eb:8e:76:5c:28:0d:c4:f5:00:76:3e:
87:cf:b6:2a:86:56:40:64:ae:03:aa:d2:08:ba:2f:
68:d6:13:52:5a:19:a4:c8:18:48:f2:06:a5:28:48:
f4:3b:23:ab:97:c1:8f:c8:26:2a:fd:da:22:10:1d:
78:9b:d4:cb:40:d4:b0:52:18:81:04:7e:22:7c:a6:
46:dd:0a:f6:80:f2:47:38:9b:5f:c3:88:a7:7c:f5:
3c:7a:54:17:98:d8:83:a0:18:1a:22:26:36:c6:8f:
44:78:a8:e4:90:3b:7f:06:8c:60:40:73:d1:e1:7b:
94:98:b8:28:29:ec:cd:de:91:f8:d1:e3:8c:27:f8:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:94:C2:D0:E5:E2:2F:4E:90:A7:C4:46:25:4E:11:02:04:73:35:C3
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:99:b5:ed:1f:05:c4:9d:24:a2:a4:fe:75:ae:dd:0e:d1:69:
33:bf:fe:71:0b:c7:74:00:0b:14:3a:5f:8f:0a:78:a9:52:7d:
71:af:db:46:ea:dc:a4:f5:34:35:a6:72:ec:ec:ec:f5:46:96:
7d:fc:36:84:32:d5:b9:a3:20:27:ff:0c:bc:36:9a:a5:71:b1:
e1:4a:11:b2:51:43:1f:65:9a:a8:57:60:24:83:83:85:70:e8:
be:d5:7b:73:b9:d2:5a:0f:41:e8:a9:3d:89:b5:08:63:89:d7:
92:25:43:4c:d1:7b:45:0b:03:57:a6:4c:89:45:33:6c:63:81:
cc:ac:a6:b9:94:b1:88:e6:34:2a:a3:5f:bb:63:00:6f:e7:22:
d7:08:c8:90:e8:d4:02:4d:b6:ae:a1:1b:8c:99:56:ef:8d:0e:
36:ad:04:dc:84:88:eb:cb:09:d9:ac:85:05:9d:26:07:81:66:
fe:f1:2c:44:25:e8:fa:3c:ad:d6:3e:ac:56:16:7e:c3:d6:ac:
11:a6:a8:3e:61:c7:6d:93:77:e5:ee:ca:03:8f:b0:63:fb:d4:
cb:c0:03:c4:56:e8:31:8d:bd:90:b4:8d:6d:09:4e:76:a4:99:
1c:fe:5b:45:1c:ef:12:47:a3:62:9b:77:9b:b9:68:20:aa:74:
1e:eb:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:18 2025 by rpki-client