Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: CmnJpYP4X4XawXMyY9xhn/rhT+FJKGmWbK30a5uvSGc=
Subject key identifier: AD:9B:A5:0C:D4:9D:1B:48:B7:C7:75:99:22:CE:35:D9:B2:A5:BD:25
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 0196C0B8CA0A6A0FA2A4BBE56126DE41E6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 05E9
Signing time: Sun 11 May 2025 19:00:57 +0000
Manifest this update: Sun 11 May 2025 19:00:57 +0000
Manifest next update: Mon 12 May 2025 19:00:57 +0000
Files and hashes: 1: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: oFKL9WFfbH+6oFzfkBeggJ+QOIOLBu270ByI15KLM6I=)
2: lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa (hash: dTACe68AOYRTGOWM2bf2NFYllivUWP/q40LE4fNKxno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:ca:0a:6a:0f:a2:a4:bb:e5:61:26:de:41:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: May 11 19:00:57 2025 GMT
Not After : May 12 19:00:57 2025 GMT
Subject: CN=ad9ba50cd49d1b48b7c7759922ce35d9b2a5bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:17:a8:5e:bb:3e:b2:6b:9e:cb:61:dd:b0:
1a:8e:7b:f5:f7:a1:c1:3b:da:c4:86:1a:a5:c6:d2:
e4:d6:e6:29:a3:f1:aa:06:7f:ea:a6:d7:fa:20:38:
7e:0c:08:56:0a:f4:fc:b8:5c:9f:d5:f4:ec:f1:84:
df:fb:e1:e8:03:8d:b8:e4:a6:98:39:1b:c1:37:92:
c0:e4:39:1b:26:62:10:1e:bb:de:b6:62:0c:1e:41:
4f:6c:66:e1:51:ed:f5:83:55:45:d7:bd:7f:f8:d8:
1f:48:2a:db:db:88:19:32:0e:cc:b1:3c:10:ac:53:
76:97:68:87:60:2e:ce:f3:ed:8a:2d:ab:30:43:4c:
33:7c:33:56:42:fb:e7:07:92:d2:6e:e4:09:22:1c:
fb:2c:85:ad:98:4e:63:8b:06:8d:df:31:2e:61:e7:
f0:dc:88:54:84:5c:36:99:52:92:bf:8c:78:e7:f9:
89:29:f1:69:24:9d:b1:3e:5f:05:9a:b7:00:f8:31:
2d:e8:e9:77:de:42:22:d4:cf:98:b7:78:b5:ac:9d:
8a:fe:c0:cb:e0:dd:33:76:2d:07:db:ae:d3:a9:0a:
2a:d3:9b:49:64:90:eb:70:d0:a6:66:9c:07:07:45:
7b:77:d6:54:87:58:39:91:15:ed:73:25:29:00:b9:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9B:A5:0C:D4:9D:1B:48:B7:C7:75:99:22:CE:35:D9:B2:A5:BD:25
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5a:93:75:0c:2c:8d:38:0b:fe:c5:d6:78:d9:2d:e4:7d:2c:
7a:d1:b3:c9:bb:da:89:06:ab:f1:db:89:f2:0d:fd:72:eb:be:
db:32:68:4a:31:d2:cf:20:1c:cc:22:23:89:3b:e4:41:99:fd:
34:1e:56:f3:f4:24:9d:e4:8b:21:28:17:8d:b8:b5:d7:8b:88:
0c:21:d3:20:05:65:cd:d6:33:dd:c2:b9:4c:cd:b5:7b:53:ee:
ae:86:b7:6e:22:a2:dd:41:c1:34:3f:f0:e5:e2:45:00:a2:c4:
14:b0:7e:1c:fd:7b:3b:f9:7d:63:2a:55:01:85:28:f1:71:42:
7e:1f:ef:89:dc:25:46:81:63:83:53:47:1e:ce:36:bf:16:c6:
5c:ba:0e:bf:61:ae:2d:03:2d:a3:30:01:66:e4:36:f8:34:f9:
22:82:78:e9:b6:47:0e:4b:21:97:30:1f:86:9a:be:93:cd:52:
b6:d3:b7:64:79:83:67:cb:d2:ce:83:ff:ae:9c:6f:14:2e:9e:
fb:18:3d:59:dd:29:2a:5f:88:f1:ed:23:d6:87:c6:39:c7:6f:
03:d0:45:c8:35:de:89:4e:c4:6c:d8:30:e4:c6:7f:7a:01:68:
0b:a4:86:34:79:18:7b:42:6e:5c:97:5a:3b:12:64:02:3c:24:
67:26:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:21:32 2025 by rpki-client