Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: KMYRgnW7dw/+S2F5oL7XXsjp57qq5V8XGRhTswWOTEM=
Subject key identifier: 71:44:EB:85:13:D2:0E:0C:B7:86:A0:6E:90:12:22:2B:9D:78:D5:89
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 0197B5FC71C5C1DF66A6B1A723A3FC9C8384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 03FC
Signing time: Sat 28 Jun 2025 10:01:49 +0000
Manifest this update: Sat 28 Jun 2025 10:01:49 +0000
Manifest next update: Sun 29 Jun 2025 10:01:49 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: 0Pc9lykg+x34r6OCnc5HAHe8mghtWSodMeG8avLKJnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:71:c5:c1:df:66:a6:b1:a7:23:a3:fc:9c:83:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Jun 28 10:01:49 2025 GMT
Not After : Jun 29 10:01:49 2025 GMT
Subject: CN=7144eb8513d20e0cb786a06e9012222b9d78d589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:77:4d:19:73:15:5f:29:d7:75:3b:bf:57:
56:fc:95:7c:16:94:bc:38:c5:62:fb:d9:7e:d7:b7:
03:52:64:ec:7c:5a:4d:8f:a8:34:4d:52:3b:21:86:
26:2a:e5:4e:63:a4:e7:d4:4b:86:70:a1:c2:62:f8:
13:34:5e:43:62:3a:8a:2d:3d:da:c5:24:6b:29:1b:
70:a0:51:be:a6:ac:b4:57:8a:1a:6e:1f:29:b9:54:
1c:a5:be:99:bb:7e:28:ee:3b:d6:f9:c2:91:d2:74:
b6:cc:81:ed:2c:6a:7d:f6:34:0a:2c:53:64:9a:c2:
fb:4d:fd:85:5c:67:13:07:c6:db:d7:a0:f0:87:42:
47:7b:16:db:d7:b7:95:ae:68:70:7f:5b:b7:37:8d:
95:ab:31:12:49:35:db:8a:c8:b8:56:f9:a3:10:0f:
89:c1:e3:90:f0:63:94:dd:f6:31:44:dc:3f:9f:df:
59:ff:78:79:95:58:f0:67:a9:fa:40:ab:21:42:32:
c6:47:02:9e:89:9d:4d:3f:77:32:36:24:b6:6a:a8:
6c:72:9c:a1:e0:ca:22:a0:5c:78:34:e6:00:fe:4f:
6f:b1:0b:5c:02:23:a9:e7:3f:be:b7:f1:5d:2b:fe:
81:74:04:2f:76:92:00:a6:7a:eb:c5:c5:fa:54:f3:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:44:EB:85:13:D2:0E:0C:B7:86:A0:6E:90:12:22:2B:9D:78:D5:89
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:23:37:0e:aa:fd:44:c3:1b:3c:6c:56:4c:5c:44:8b:44:b8:
21:08:ed:4f:07:c4:bb:bf:e2:7c:fb:4c:33:c9:30:d6:30:33:
12:61:c9:05:df:45:14:b9:df:c8:6e:99:56:17:6b:c6:a7:23:
eb:06:c7:b7:0c:a1:2d:28:81:7a:1b:90:50:1e:e6:b0:a5:6d:
d3:81:d1:57:27:9e:a7:0f:c1:29:7e:d8:09:82:14:02:cd:2d:
d4:df:cd:9b:4e:3b:54:fd:39:bc:b5:30:e6:4c:4e:d2:11:63:
46:b1:6a:12:8e:c2:d3:ae:b8:6f:ba:2d:e0:ae:14:6c:1a:4a:
d8:c7:e1:61:af:ea:99:39:95:62:21:92:02:5d:97:6b:19:13:
6c:0a:5e:96:d4:ab:1c:30:47:17:da:e7:91:26:17:e4:c1:a5:
c3:36:c2:99:4e:e7:7d:a4:3b:9d:99:12:b7:09:42:4b:d3:72:
a7:1c:84:7e:42:95:62:dd:69:6c:43:49:02:ea:77:69:d3:34:
9d:15:1f:9e:87:01:cc:37:73:4d:7d:89:39:03:f0:95:93:24:
b0:47:23:5c:f5:2b:cb:63:1a:91:60:8a:5c:3a:2d:9d:ab:28:
81:ac:7e:35:28:ef:f8:dc:46:f4:3a:46:ea:ee:77:6a:0b:ac:
fe:93:84:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:18 2025 by rpki-client