Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: x6HlbeMzdJyRVEns+LcwUp28zyWua5XE0O0tTvPt48Y=
Subject key identifier: 61:2E:DD:9A:FD:4F:E1:34:C9:27:B6:27:A4:53:E7:AB:A0:CB:DA:B8
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 01967868B1E97C40D1568D25D42A7DB53859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 0C84
Signing time: Sun 27 Apr 2025 18:00:49 +0000
Manifest this update: Sun 27 Apr 2025 18:00:49 +0000
Manifest next update: Mon 28 Apr 2025 18:00:49 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: /oZqBNI6TTUr/FpR1egrL6J1qVixNtq+HhHuFxjw+Y0=)
2: penXvalgbMBLZqcx96rUayqK3NQ.roa (hash: vb/Iw29Kb6TCjGenAwHcr/Ra62ZOMD3/iU+HDEP/27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:b1:e9:7c:40:d1:56:8d:25:d4:2a:7d:b5:38:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Apr 27 18:00:49 2025 GMT
Not After : Apr 28 18:00:49 2025 GMT
Subject: CN=612edd9afd4fe134c927b627a453e7aba0cbdab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:0c:56:9e:d7:c9:a0:b1:b6:84:b8:d7:95:
4b:36:2e:7b:06:07:d7:d1:a6:88:72:f9:06:b8:d5:
90:c1:80:3c:0d:aa:88:61:e2:b5:38:91:d0:28:99:
38:5b:5a:35:e5:49:66:bb:a9:73:2f:95:04:28:19:
35:57:66:78:d7:f6:f0:a9:a8:a4:46:02:a6:4a:b3:
11:c3:57:72:99:34:66:99:f8:a1:44:ea:fa:4e:1a:
51:68:d8:88:3b:f6:ae:3d:e0:87:44:3f:c1:c7:4b:
dd:ee:a7:69:ae:f7:b5:f0:71:98:fe:d2:d6:69:36:
d9:e1:60:81:09:00:b8:84:38:5b:1c:53:24:b7:44:
02:f1:71:48:fc:75:4b:ad:63:47:b7:63:dc:e1:a0:
9a:cd:0b:bb:f2:32:e0:aa:b1:35:a1:c8:3c:a6:3d:
c4:0c:c5:8d:d3:45:22:5f:cc:35:f9:ba:76:d8:a9:
5f:d4:16:21:ab:57:c9:36:c3:15:89:ba:6e:da:0d:
07:ab:d5:e7:8c:d6:42:ec:de:7a:6c:87:bb:20:34:
20:87:2b:c1:0f:b8:c7:8d:10:b6:eb:5d:37:1b:ed:
20:2b:db:1c:ad:df:36:49:24:12:94:88:a3:f8:29:
6c:6e:1f:11:46:e3:3b:6a:8f:81:e6:00:57:a4:d7:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2E:DD:9A:FD:4F:E1:34:C9:27:B6:27:A4:53:E7:AB:A0:CB:DA:B8
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:53:a4:0a:18:00:fe:88:1c:ed:b7:f6:cf:b0:4d:97:48:67:
3f:82:dc:03:44:cb:2f:38:3d:ce:12:10:9d:84:77:7e:6b:3b:
12:3c:e8:23:f9:2e:d7:b2:da:3c:16:14:a1:a1:c2:fa:aa:ee:
69:cd:35:88:ee:38:80:a4:fb:0c:98:73:cd:45:17:fc:d4:78:
69:ec:42:36:b7:c8:13:68:f2:b4:4a:29:ca:c6:a9:20:19:b5:
d1:9c:e1:db:4b:dc:dc:09:5d:4b:21:07:8a:ea:7a:1f:b1:af:
33:c1:37:60:58:ee:de:ed:ac:01:1d:06:fb:9c:cd:de:3a:83:
d8:33:69:27:27:4d:b9:09:6c:d0:d3:23:50:e2:94:7b:40:0d:
64:b9:fb:ba:25:73:87:d3:ae:5f:f6:59:29:f6:c3:96:5c:34:
5a:9d:8f:8e:42:4f:ec:06:56:fb:ed:2f:c9:2c:57:f7:94:23:
25:21:1d:4c:28:62:46:76:6f:3a:cf:97:b7:4e:ec:7e:0d:d9:
fc:b7:fd:2c:28:6b:81:ed:41:2f:86:0a:87:49:27:b9:b2:55:
a8:26:c4:9f:c7:b9:33:1c:9d:8a:2b:67:04:d8:24:99:a4:99:
e8:d5:ca:91:e9:42:f5:d0:ab:e9:67:7d:4d:97:fa:96:b1:ff:
60:b3:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:34:54 2025 by rpki-client