Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
File: MpbYU2ObwBkplCk-veCYBdLWIqQ.mft (raw, json)
Hash identifier: CPfHAcOYMFpFWXiHsfaMnaF4YHLjGp0MLyNCspxibLo=
Subject key identifier: 9C:A1:1A:17:FE:15:98:18:40:DA:66:F1:94:D5:83:71:F5:C7:67:CF
Authority key identifier: 32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
Certificate issuer: /CN=3296d853639bc0192994293ebde09805d2d622a4
Certificate serial: 0197B6A1624DD04B19C34F9535104BE9FF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:58 +0000
Manifest this update: Sat 28 Jun 2025 13:01:58 +0000
Manifest next update: Sun 29 Jun 2025 13:01:58 +0000
Files and hashes: 1: MpbYU2ObwBkplCk-veCYBdLWIqQ.crl (hash: cMbDzqNCX7IKlkRS0r8uokpuAQPiWkFzL6fD+5LmXoQ=)
2: hTnUv0N90doM0ZMOLyyFEOW9iK0.roa (hash: YJzqmH02+AW23mfkqCHZcxj82Owa829HDO8rFi0lEGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:62:4d:d0:4b:19:c3:4f:95:35:10:4b:e9:ff:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3296d853639bc0192994293ebde09805d2d622a4
Validity
Not Before: Jun 28 13:01:58 2025 GMT
Not After : Jun 29 13:01:58 2025 GMT
Subject: CN=9ca11a17fe15981840da66f194d58371f5c767cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:2d:5d:06:00:8e:61:c1:e9:2e:55:0d:1b:
49:46:57:2b:6c:a5:57:4e:83:5d:b0:16:8f:2d:0a:
37:e2:a0:42:62:b6:17:67:17:2d:cd:52:f8:15:c6:
62:51:2e:53:0e:ce:10:91:47:68:5b:d8:83:48:b6:
c7:43:d8:d8:70:19:45:b0:1a:b6:cd:a7:3f:9f:fc:
2b:5c:bc:f6:60:3a:b7:1d:40:84:c6:1d:4a:67:64:
d9:57:ea:81:1f:da:0e:7d:08:35:db:e6:4e:0a:7a:
d0:1f:5d:51:f4:dc:f6:fc:ac:47:f7:8a:fd:35:bf:
60:05:1a:b3:1a:88:9c:52:e0:6f:2e:81:0f:7b:06:
76:b3:de:fa:99:ba:5f:b3:6c:4b:36:3e:6d:a8:b4:
d5:ab:be:24:0d:04:0a:1e:b6:b1:6e:11:82:be:36:
ec:4a:5c:24:8f:b2:17:c5:a7:c2:50:1b:c7:e0:39:
36:3b:d0:63:40:fa:91:d7:74:75:e6:4e:93:42:ad:
4f:88:c3:88:f0:15:ae:ba:21:72:61:a4:65:16:d8:
a9:1e:3e:8f:ee:03:54:fd:65:fc:9f:38:21:5e:87:
57:72:80:3b:7b:b5:48:39:56:b5:d4:6e:56:a8:05:
2f:f8:6e:7f:e1:9b:63:22:f5:e4:2b:ae:f8:80:e9:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A1:1A:17:FE:15:98:18:40:DA:66:F1:94:D5:83:71:F5:C7:67:CF
X509v3 Authority Key Identifier:
keyid:32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:79:3c:90:52:08:6d:e2:e2:98:a8:00:6d:ea:97:22:e4:91:
bf:3b:4a:b6:4c:83:e1:f3:21:da:c4:72:17:67:03:99:8f:30:
45:67:7d:b6:e2:16:42:35:2b:5f:68:cf:d5:fc:7f:2e:e6:23:
55:bf:22:aa:d0:5a:46:4e:3e:54:42:63:57:db:c8:e0:93:a6:
c9:5c:ba:66:30:c8:73:3d:bf:f8:d5:5a:e4:e1:df:3b:24:2e:
7b:14:a4:f5:9f:67:23:78:d9:15:5f:f5:4f:8e:96:6c:1c:e1:
5c:e3:93:d9:44:cd:cf:94:65:ae:e2:78:db:0c:fd:08:12:26:
f8:e5:6e:07:c9:d0:cc:df:6b:52:d1:8e:9b:5d:52:ce:1a:ef:
6a:54:67:30:76:3c:f4:59:47:01:cd:22:97:6c:24:2e:13:71:
da:ac:4e:fd:68:bd:46:3c:d6:02:8c:e5:e4:47:e9:ad:29:36:
04:bd:a1:29:69:12:f0:0b:8f:2c:7e:2e:8a:5f:97:0f:f6:56:
94:f3:ab:32:3c:7f:4f:4e:c3:47:92:33:18:d1:09:fa:2e:39:
59:66:53:e0:cd:de:d0:02:bb:44:64:12:78:29:d8:c8:ec:a0:
8c:42:2d:0e:b1:c1:8f:0c:2e:6e:f8:79:da:22:c4:ce:8e:76:
e4:64:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:37 2025 by rpki-client