Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
File: MpbYU2ObwBkplCk-veCYBdLWIqQ.mft (raw, json)
Hash identifier: Ph8riFAVhH7bZd6J0z+z5d6BIYeiDKTQqPlv4L7497s=
Subject key identifier: 27:53:10:86:83:59:AC:CD:89:D1:44:B0:A6:6C:55:6E:9B:1A:11:EA
Authority key identifier: 32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
Certificate issuer: /CN=3296d853639bc0192994293ebde09805d2d622a4
Certificate serial: 0196BB92DB6CD49CF00C4F43A0837814BBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 19:01:25 +0000
Manifest this update: Sat 10 May 2025 19:01:25 +0000
Manifest next update: Sun 11 May 2025 19:01:25 +0000
Files and hashes: 1: MpbYU2ObwBkplCk-veCYBdLWIqQ.crl (hash: Pi8FbyOynHAzERh8QqJADTorDJ0qS1rk7YWCRTmK3CU=)
2: hTnUv0N90doM0ZMOLyyFEOW9iK0.roa (hash: YJzqmH02+AW23mfkqCHZcxj82Owa829HDO8rFi0lEGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:db:6c:d4:9c:f0:0c:4f:43:a0:83:78:14:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3296d853639bc0192994293ebde09805d2d622a4
Validity
Not Before: May 10 19:01:25 2025 GMT
Not After : May 11 19:01:25 2025 GMT
Subject: CN=275310868359accd89d144b0a66c556e9b1a11ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:a9:4c:27:81:c0:58:42:5d:7c:77:22:8f:
01:ad:95:05:50:cd:3e:d2:a2:12:5b:11:39:7e:c9:
f9:ce:b2:28:d8:d6:80:bd:65:54:16:2f:50:f0:be:
66:61:a1:c9:e8:e9:e0:98:1d:c3:43:b2:a2:bc:5d:
48:a2:ea:57:67:f9:ec:b2:89:58:aa:be:b8:61:7d:
a9:88:b8:63:2e:5e:5f:8f:02:2e:c5:ca:35:6f:9a:
3b:ec:5f:78:ea:32:e7:ff:2a:1c:89:40:a7:4b:6f:
fe:8d:91:77:63:73:0c:54:e0:b8:46:ff:ae:82:11:
e8:ca:07:bd:45:c9:58:6e:84:16:20:bf:25:19:55:
79:ef:82:79:43:9c:53:b9:b1:7c:36:66:26:78:85:
c3:b0:d9:9f:65:d7:b1:c5:ee:3c:98:9a:8e:c7:6e:
75:6f:e6:15:28:b9:2e:20:2a:00:25:1a:40:49:de:
11:8b:a6:fe:06:27:33:29:b9:54:0d:01:98:91:26:
fe:b3:77:29:08:60:f5:44:99:a5:18:61:74:54:cc:
aa:e0:ff:3c:3b:94:cf:2f:fe:df:c5:af:9d:54:29:
55:b2:ce:0e:7f:4d:24:21:90:58:0e:c9:9b:86:db:
49:95:68:6f:c0:83:17:1b:dd:7e:1c:75:cd:5d:39:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:53:10:86:83:59:AC:CD:89:D1:44:B0:A6:6C:55:6E:9B:1A:11:EA
X509v3 Authority Key Identifier:
keyid:32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:76:0c:ca:36:7c:d4:a2:77:23:af:1d:48:af:ad:65:27:66:
e2:06:ed:e9:10:8a:1e:52:17:0c:24:95:3b:75:da:38:b0:18:
7d:68:4e:8f:60:b4:23:4d:36:db:4a:8f:c9:4a:35:8d:8b:bc:
7c:2d:31:0e:16:87:cd:f2:10:31:70:21:55:ab:ff:68:65:ea:
b8:e2:50:6b:78:80:37:03:c5:7e:a3:ae:99:9d:ba:04:2d:a2:
86:d7:d6:1e:dd:34:68:05:b0:18:76:2b:a8:06:09:77:a0:7d:
a7:91:8e:af:79:db:9e:df:86:03:2a:d8:b2:22:25:77:f4:99:
7a:01:3f:a8:b6:9d:34:61:dd:98:18:2c:9e:35:d7:2e:cf:14:
26:53:74:66:15:fc:12:d4:84:2a:a1:45:fc:b2:b5:17:d4:1a:
eb:57:79:3c:ef:5d:87:77:48:4d:2b:5b:00:f3:7c:b4:6e:54:
30:8b:07:c4:f1:0e:d3:63:f1:da:b8:ed:05:b7:3a:3e:b1:82:
30:51:50:df:9e:22:b7:33:16:45:ee:92:99:f4:a3:e0:0d:1a:
2d:2e:8a:7f:63:75:45:32:4e:d2:ed:a6:35:95:1c:ca:0b:94:
b6:e5:8a:cc:92:11:cc:2c:24:de:bb:d2:86:b6:7f:e3:68:60:
27:42:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:16:27 2025 by rpki-client