Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier: VktT5wVSp74VhUdga/YewtqqVTDZyAkkKiyN5SnmoSU=
Subject key identifier: 63:65:2A:8A:C3:2C:CB:76:42:FA:03:71:B1:39:A3:8E:18:17:3D:EE
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial: 0196B5C6DB8B1C98996D5D2A3041706F6B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number: 45
Signing time: Fri 09 May 2025 16:00:30 +0000
Manifest this update: Fri 09 May 2025 16:00:30 +0000
Manifest next update: Sat 10 May 2025 16:00:30 +0000
Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: aXrGI1Se5NAgsiTlHJbyClykUL9dS+5Qzpe+BT02bkQ=)
2: jl5BGicOacjnQYcT0f92Ohaidfk.roa (hash: 2+8T//3NgApFzgg77XKjZhpHy2WC3GoSuHjoqbCDjuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c6:db:8b:1c:98:99:6d:5d:2a:30:41:70:6f:6b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30663b5b7044232b989818d12cc90490212524df
Validity
Not Before: May 9 16:00:30 2025 GMT
Not After : May 10 16:00:30 2025 GMT
Subject: CN=63652a8ac32ccb7642fa0371b139a38e18173dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:35:f1:79:67:62:4c:c9:10:a0:9a:da:5e:
5f:65:8f:ba:9b:f9:ec:72:74:c2:5b:c6:f9:85:4a:
f1:55:55:66:91:67:9f:61:e8:f6:64:da:08:97:04:
b9:1c:dc:87:2d:fc:92:4a:41:15:4d:ed:64:09:1a:
39:94:f0:16:6a:a0:23:52:fe:e1:26:d8:40:76:dc:
d6:1a:5c:e7:0f:2a:c0:e4:2b:00:48:06:4b:87:5a:
c7:54:1a:7d:42:2c:cf:a2:bd:82:6b:76:eb:54:9a:
4f:4b:78:15:1f:c9:7f:f7:7e:b0:6f:aa:51:42:1e:
cf:20:c0:a1:ff:ec:fb:6a:3f:02:7f:bd:6b:7d:c1:
39:0f:6e:4c:5c:4b:4f:a3:3e:bb:db:05:e3:91:4a:
b6:c4:54:7f:21:ca:fb:26:58:06:4e:30:71:3b:41:
e2:28:df:df:69:34:98:49:37:69:ee:2a:88:ba:ed:
88:e8:10:f4:84:58:7b:4b:4a:0a:42:f8:08:d8:be:
10:38:6f:ba:98:0f:03:a5:26:b7:69:88:22:93:03:
88:5d:ec:ae:c5:4f:c1:f7:59:1a:28:67:dd:3e:60:
b0:f8:02:92:92:4f:47:39:2b:fd:6a:9a:92:c6:8c:
b0:7f:d6:05:4e:5c:2e:78:0c:be:4d:0d:88:4b:bd:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:65:2A:8A:C3:2C:CB:76:42:FA:03:71:B1:39:A3:8E:18:17:3D:EE
X509v3 Authority Key Identifier:
keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:74:f8:1e:13:33:5d:9c:50:2c:fe:8a:80:2b:8b:8e:17:89:
9e:6b:20:13:a0:13:ee:5a:6d:f7:d1:10:2a:d3:44:9e:08:04:
90:9e:2c:bf:71:d4:dc:a6:87:eb:fa:fa:ea:a0:5a:59:6d:73:
08:bf:46:23:e0:88:40:f5:84:6a:b7:dc:c8:53:ba:f6:f3:48:
47:2c:e9:e6:3d:f3:1a:b0:e2:e2:99:5f:81:01:dc:95:ae:9a:
7c:54:2b:7f:9d:9a:84:23:ed:25:a6:b5:3b:68:2b:37:65:50:
c6:d6:68:80:5e:bf:b1:ed:fe:cf:75:7e:74:a2:20:a6:7e:f1:
50:df:ba:f0:84:3a:cc:1b:96:72:da:e1:1c:85:be:af:81:3d:
19:4a:fe:0a:ef:5a:e7:98:dc:93:b5:c6:e5:bf:36:76:6e:70:
68:e3:22:3d:92:93:10:59:5a:34:f5:00:e3:4b:6e:37:21:7c:
e5:4e:80:f3:22:7b:f6:93:b3:e1:21:3d:33:39:8c:f5:a4:70:
c3:5e:6b:c4:70:71:a7:6d:f2:d1:17:7c:2c:ba:44:e3:7a:36:
86:e7:35:02:09:eb:0a:5d:6e:2e:98:1e:38:54:6a:56:66:bd:
fb:91:9f:93:76:92:9e:d4:ac:56:ad:11:94:6c:41:84:aa:c2:
37:f7:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:31:49 2025 by rpki-client