Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: LTUt/dxP7sFv4UOdj/Sf0wciGaA1/SJMAZwCjTjuiic=
Subject key identifier: 41:C0:97:E8:37:67:F3:59:FC:22:A4:70:A4:20:98:6D:84:66:79:6B
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 01967F462EB064A85A5B1BC0E2FB813F8A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 1402
Signing time: Tue 29 Apr 2025 02:00:27 +0000
Manifest this update: Tue 29 Apr 2025 02:00:27 +0000
Manifest next update: Wed 30 Apr 2025 02:00:27 +0000
Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=)
2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: s8NoySH9bXmOeXpqoqxY54wX7iGILASHua2AO2uNQQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:2e:b0:64:a8:5a:5b:1b:c0:e2:fb:81:3f:8a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Apr 29 02:00:27 2025 GMT
Not After : Apr 30 02:00:27 2025 GMT
Subject: CN=41c097e83767f359fc22a470a420986d8466796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:88:c8:70:b4:31:e0:d5:56:ec:6f:eb:2e:
51:50:ae:05:ab:e4:fa:9e:34:d5:5e:37:78:82:54:
b6:94:6f:d4:b5:01:a1:fa:ff:d5:c1:7d:71:b2:4d:
60:d3:87:47:02:a0:21:05:0c:00:47:76:cf:5f:44:
66:06:bd:fb:40:6e:8a:ee:de:8a:f8:c2:ad:f1:61:
e3:b3:d8:23:b4:4e:09:db:f6:9a:aa:8e:c5:b2:8e:
58:f8:d1:42:ac:9f:b4:44:3b:a4:be:d0:9f:c7:1c:
f4:50:22:b4:5a:ca:1f:8a:b1:97:ec:fc:67:19:2f:
a5:d6:29:b5:ef:44:67:9b:7b:23:cc:4c:2d:89:6d:
20:d5:6a:c6:da:f4:b5:87:66:74:27:da:3d:3b:91:
5d:e4:ec:57:53:d5:25:5a:77:9f:07:d5:6c:ae:90:
14:2b:0a:ca:ba:a0:43:2e:92:f3:77:a1:66:44:4c:
ed:be:63:e9:d7:5f:42:08:ee:98:0f:1d:c2:2a:c3:
4a:43:e0:19:37:5c:5b:8d:61:7b:c7:1c:7a:af:a0:
9c:4b:40:2c:99:59:5f:7e:3b:88:7a:c7:73:60:3b:
c7:3b:0f:3d:66:70:a7:df:96:97:df:bf:30:3c:b3:
60:a1:27:ca:9a:72:5b:a2:80:76:e4:f6:cc:94:56:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C0:97:E8:37:67:F3:59:FC:22:A4:70:A4:20:98:6D:84:66:79:6B
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:61:fa:a8:14:8f:56:61:2a:ad:6e:25:8e:c8:71:fb:6f:50:
28:dd:1d:0c:c9:83:c3:67:8e:54:1b:e3:d5:c3:01:74:ef:8b:
ba:2c:2e:02:cb:36:c3:ab:b7:3b:cb:76:93:4a:01:e8:4f:04:
d4:09:2d:60:31:d9:8a:74:99:c1:1b:aa:e4:df:a5:d3:9b:19:
18:52:bc:d5:c3:8b:83:ea:20:75:30:d6:ed:2c:0e:8e:87:1a:
ae:25:d3:b7:1f:aa:9c:a0:3e:d2:10:77:49:e1:be:15:2d:4c:
16:bf:9b:e0:63:a9:70:62:c9:7c:e2:19:75:a2:51:79:2a:c5:
b9:72:7f:91:60:55:04:8c:61:18:85:f3:7f:f4:30:2e:cb:ea:
47:c8:de:84:77:e6:a1:7a:3a:3f:d2:19:bb:48:f7:9f:b2:91:
25:55:2d:14:df:34:a6:31:f7:b0:88:98:51:03:74:49:1b:78:
b6:85:ce:6d:02:5a:31:de:cf:f9:7c:41:e5:7e:9c:a5:46:15:
6b:3d:37:6d:14:19:a9:44:fd:98:b6:49:f7:06:f2:2a:19:ea:
5e:d0:b8:73:65:a5:c8:8f:21:dc:3c:23:ef:d5:2e:da:7b:ce:
2b:f0:18:26:dd:3b:79:ec:e8:1a:44:97:9d:2f:e6:b0:88:90:
ae:c0:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:52:14 2025 by rpki-client