Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier: diCWE3A8gpx4R7OiQQIcY7uk1alANH3w3gIhEFeH1JE=
Subject key identifier: 39:67:F1:1D:0F:7B:CA:CF:05:B1:6E:50:3E:85:4C:A5:D0:08:71:72
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 01967CE9CE713EBBB70325BD2DFD216D2C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 15:00:19 +0000
Manifest this update: Mon 28 Apr 2025 15:00:19 +0000
Manifest next update: Tue 29 Apr 2025 15:00:19 +0000
Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: tkaICQowBJRc3Vpeu/7tzyHZWwwxNIKj19VSBRz4bf4=)
2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:ce:71:3e:bb:b7:03:25:bd:2d:fd:21:6d:2c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Apr 28 15:00:19 2025 GMT
Not After : Apr 29 15:00:19 2025 GMT
Subject: CN=3967f11d0f7bcacf05b16e503e854ca5d0087172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:e9:1d:81:c8:a3:bd:94:e0:8f:8d:46:30:
1b:13:4c:61:97:fc:a0:44:84:86:57:70:0b:0c:96:
c0:b4:57:92:50:3d:b6:82:7d:7c:9f:cf:e3:66:9a:
b5:15:69:10:c8:22:40:8b:0d:96:92:85:bf:16:f6:
42:1e:82:23:90:e9:b3:6d:59:4f:b0:d5:10:3d:c0:
3e:ae:c6:c1:9b:04:24:ce:a7:53:bc:6c:04:c5:ee:
ae:10:15:29:24:d0:49:5b:93:24:e2:83:77:8b:14:
43:08:f3:3a:c3:43:f7:9f:ea:a1:3f:5e:5f:5c:45:
67:33:aa:ef:2c:a5:2f:b3:6c:20:e2:96:02:78:ab:
a7:ec:97:de:b2:f3:92:e8:be:2b:17:69:03:8a:37:
62:cd:e3:51:e8:74:6c:2d:ad:f1:a8:6a:5a:60:e0:
b2:27:1d:e7:e0:4a:35:8e:43:6e:56:79:37:ec:31:
e1:13:05:7d:65:41:9d:91:e1:59:dc:16:73:8f:f5:
5b:bc:ca:13:4e:fa:15:32:74:30:99:ee:d6:2d:ba:
42:24:ce:a1:3d:d2:77:aa:68:8c:82:c7:e0:eb:19:
5a:0f:58:46:34:50:61:2b:0d:74:10:a5:0b:8d:46:
c0:17:49:f3:d9:8f:8e:36:aa:83:cf:df:ec:20:01:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:67:F1:1D:0F:7B:CA:CF:05:B1:6E:50:3E:85:4C:A5:D0:08:71:72
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ec:1e:d3:73:7d:82:ff:9b:bd:86:2d:84:17:93:f7:ed:95:
aa:ae:89:52:80:6e:43:7e:c4:ed:91:4c:41:5e:e3:b6:45:a4:
23:ab:8b:e7:02:33:06:8f:d1:e8:92:9e:fb:f9:bb:60:4c:b8:
8a:78:e3:f7:e5:4a:fe:d8:0d:7b:71:fa:92:39:44:1d:64:8e:
c4:11:71:3a:aa:f3:51:71:93:12:05:63:56:b9:61:03:b7:62:
09:ef:55:72:c5:c5:a1:d7:63:c2:14:61:16:6b:b7:58:d6:55:
6c:48:2a:80:f7:48:a6:81:c5:4a:2c:3e:52:9a:6c:e1:7d:9c:
79:cf:98:56:40:73:8f:b4:37:6f:d3:61:76:c5:47:f9:47:cf:
02:cd:7d:9e:3d:7a:44:ec:a6:f0:e5:cb:bb:66:34:b7:79:e0:
09:d7:7a:d5:72:49:d8:02:da:af:19:1a:72:c5:a3:a1:6b:1a:
ca:b8:61:76:db:b8:24:57:40:3c:35:d8:b6:ec:ec:24:88:95:
d0:c2:44:2b:78:00:5a:01:d6:f8:ef:e7:0e:55:f3:3f:96:41:
e6:70:43:ea:bf:f2:ae:10:9b:b8:43:70:9d:ef:96:49:03:8d:
e6:73:2a:25:b9:43:8b:ae:06:c6:f0:88:85:c2:25:c2:8f:c3:
0f:71:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:43 2025 by rpki-client