Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier: xCkQTUJT/Jn9hQq/At2Z5TZWp/DW8ZZQphbfWc6/YSY=
Subject key identifier: 8A:27:F4:68:88:2D:66:3C:BF:55:5A:83:C7:47:7E:CB:89:1D:5E:F5
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer: /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial: 019673B0500C5E04A1FBD0E6CE27F15FB715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number: 1382
Signing time: Sat 26 Apr 2025 20:00:56 +0000
Manifest this update: Sat 26 Apr 2025 20:00:56 +0000
Manifest next update: Sun 27 Apr 2025 20:00:56 +0000
Files and hashes: 1: 2B-FwUEQx6Nr4Ray6DAMUlw7Mv8.roa (hash: BBGC/ULum47ycUnwMz9z0fK4GgKW3TWVfbzBiHksvmc=)
2: GtTmoRT7XNVXBnXOsHZVf63eiDE.roa (hash: D+k5RJe28ejPSPya6Jjm6aV5eby1Bwyad8Nl2+QCWeE=)
3: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: Dph5QCYFWJil/oTZXspeGP1LTEExC7WvKVeOXeUsOBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:50:0c:5e:04:a1:fb:d0:e6:ce:27:f1:5f:b7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Validity
Not Before: Apr 26 20:00:56 2025 GMT
Not After : Apr 27 20:00:56 2025 GMT
Subject: CN=8a27f468882d663cbf555a83c7477ecb891d5ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:b6:19:25:95:6d:0d:98:8f:2b:a9:bd:e0:
98:56:e4:7d:bb:6d:08:50:76:c4:71:6a:ca:1d:05:
d3:ca:d1:db:e1:54:b0:45:90:af:0a:76:e4:d2:93:
21:49:ba:c5:3f:94:46:e9:d1:45:39:18:ca:ad:a9:
06:ba:8d:f4:98:a4:d6:03:1b:c4:52:40:49:ce:fb:
87:31:09:90:85:1c:be:93:b9:8c:c5:b2:64:0f:c3:
e5:6d:02:34:f0:18:be:bc:c8:62:d0:8c:6c:40:e3:
07:e0:ca:85:b0:22:01:3e:01:43:b5:12:20:ca:67:
ce:73:25:76:df:a2:92:2e:c9:20:4d:25:60:a8:62:
f8:6b:a5:9b:75:27:a5:b0:51:35:a9:6c:46:53:49:
d3:b3:00:53:8d:08:c8:d6:9a:80:34:8e:2f:de:de:
62:57:8a:8e:e6:5e:51:f7:9d:a3:fd:2c:93:2b:ae:
c5:cb:bc:09:83:bf:11:5e:97:9d:89:9a:60:87:52:
59:1d:49:5f:fa:1b:e1:e3:79:f6:fb:4b:ea:be:1e:
99:e8:ee:12:5f:86:2a:f6:cb:f5:27:dd:2e:11:45:
50:1c:f8:38:84:12:bc:9a:67:05:71:e0:f7:87:ae:
e5:5e:c1:77:a2:96:18:2a:85:43:11:72:9c:93:3d:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:F4:68:88:2D:66:3C:BF:55:5A:83:C7:47:7E:CB:89:1D:5E:F5
X509v3 Authority Key Identifier:
keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4b:0d:d9:c0:4a:12:0d:71:05:8a:97:dd:05:f9:ba:e0:07:
78:5f:40:e7:fd:42:36:bd:af:fb:ce:0a:3b:60:fe:97:f5:f3:
43:db:c3:07:5f:9c:9c:8c:c5:b2:10:18:15:43:46:e4:a0:a2:
7d:4e:2b:71:eb:0d:08:51:e0:c0:f9:c4:09:1e:a5:6f:ed:99:
4f:e4:e4:ab:f7:dd:49:65:b4:41:93:a8:b9:cd:48:58:fa:3c:
4a:2c:02:15:34:ee:ea:d9:2f:4f:b2:8a:52:db:73:e7:66:bc:
38:4a:1b:ff:f5:28:dc:ec:01:19:a1:bf:b3:b4:33:2c:35:81:
0d:75:25:5c:43:ea:bd:92:70:69:19:6f:65:7a:81:ee:16:cf:
db:0a:0c:d9:fb:ce:f6:00:18:6e:6d:96:75:ba:bf:be:02:48:
90:e1:7d:fd:e1:ab:ab:8b:3e:c6:3e:c0:69:9c:52:55:73:b7:
26:4c:ad:42:3c:07:52:49:d5:82:66:a9:46:94:f6:3b:5c:6b:
3e:65:fa:aa:f3:11:bb:ab:89:38:19:bf:7d:28:2d:57:b4:61:
81:ce:1b:61:7f:8f:74:68:63:2d:8e:77:5f:d8:89:4b:0e:4c:
2d:e0:49:63:6b:72:93:40:27:6f:f9:e4:94:2c:70:d4:5c:eb:
a2:03:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:28 2025 by rpki-client