Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: 8VQDbxSgO4CREzvsXPKmwxA90EjL/6TDun/TQM9oriM=
Subject key identifier: 40:76:3E:9C:9F:C1:27:1F:76:20:8D:D6:93:F3:0E:BC:46:72:58:C5
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 019682B54EA4859EF20259DAF2965C51D5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 05EB
Signing time: Tue 29 Apr 2025 18:00:42 +0000
Manifest this update: Tue 29 Apr 2025 18:00:42 +0000
Manifest next update: Wed 30 Apr 2025 18:00:42 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: PXSmyS5/o4ZIB+Mbv07OXVVShrhSFk08z0QcuQPNVO0=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:4e:a4:85:9e:f2:02:59:da:f2:96:5c:51:d5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Apr 29 18:00:42 2025 GMT
Not After : Apr 30 18:00:42 2025 GMT
Subject: CN=40763e9c9fc1271f76208dd693f30ebc467258c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:18:8c:62:a6:60:fe:83:d9:0d:8d:de:d6:
2b:91:1b:a5:f9:03:d8:0b:60:6b:34:5d:79:a9:e1:
ad:e0:b5:2b:87:0f:34:cc:e5:7b:ed:40:49:5f:26:
74:f9:d4:be:4e:25:2d:e4:3b:f7:71:f2:8a:74:8d:
ad:bd:36:bc:9a:e7:9c:87:3c:ca:0e:e5:bb:80:f6:
1c:c6:22:be:29:9d:ee:76:dc:d0:15:1f:53:7e:d4:
7b:e7:46:8a:30:6a:3b:a4:40:ab:6c:fd:9e:fc:47:
fd:6a:5e:23:36:4b:ba:5c:09:11:5f:34:b2:30:41:
ff:fe:82:45:e5:df:4b:fb:2c:28:20:55:5e:3c:59:
85:06:33:54:a1:f5:61:9c:11:75:e8:53:c6:6c:80:
a1:b9:5c:68:8e:48:c3:23:1c:28:ca:3f:d8:ec:2c:
ea:35:7b:83:69:00:10:50:61:e0:01:2a:28:6c:8f:
98:87:46:ac:db:aa:0e:95:fe:a0:4f:e8:ed:b0:72:
63:2f:84:1c:88:7f:00:d0:cd:6d:22:c0:5a:7b:6b:
f5:ed:07:69:6f:e4:03:df:77:6a:48:a4:76:5b:29:
8f:85:44:8a:dc:43:e7:05:97:f6:28:20:ec:cd:d6:
ed:10:37:91:4c:d7:f3:b8:da:1c:36:c5:61:4a:6b:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:76:3E:9C:9F:C1:27:1F:76:20:8D:D6:93:F3:0E:BC:46:72:58:C5
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9a:49:7f:69:a0:ab:b6:19:98:1e:92:4f:a7:7d:8a:67:cb:
64:6c:37:96:87:cf:ed:f2:dc:24:da:d8:f0:4b:97:19:da:94:
1b:b2:a0:8b:ee:f4:ee:b7:a3:aa:7f:8e:26:0f:44:10:c7:bb:
3b:74:63:96:00:f7:6b:0b:d9:2b:d3:96:15:78:31:dc:d9:39:
a9:db:d8:6c:c0:32:1c:dc:c7:a8:b9:48:56:a9:20:8f:b8:3b:
4d:11:26:94:9f:18:70:d7:c9:85:7c:b1:c6:25:a9:66:31:51:
8a:ae:d8:5d:bb:da:43:e0:3d:16:9e:34:a0:bf:02:1c:89:26:
38:60:84:2b:2a:6b:08:2f:62:a1:10:66:4c:02:98:2f:42:25:
7a:23:47:4a:ef:e7:a0:45:a9:ba:19:a2:72:ab:00:3b:b8:8a:
22:3d:f2:08:d6:d6:83:67:32:02:8f:bf:64:6a:07:86:65:dd:
65:83:66:14:17:d5:49:46:cf:b4:72:aa:73:e6:71:bc:bc:cb:
f8:5a:3d:dd:56:3d:8c:4c:e1:ab:11:0e:40:c9:af:29:38:66:
4a:9d:ec:f5:a0:43:52:b0:69:42:a8:7d:68:d9:93:85:a2:fa:
2a:44:78:3b:8a:58:69:d8:39:5d:40:7f:f5:d2:ab:c4:1f:be:
ea:97:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:28:35 2025 by rpki-client