Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: wDKRFnyxVxYisXyDuaBYUnhYBcCX06OlIXepGhoIVtk=
Subject key identifier: 62:2E:AC:18:9E:FF:C4:59:FD:DE:8D:B6:9E:85:52:4E:B8:B2:00:DE
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 0196816BB7A3C44408FC6E0A2659F553ECC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 12:00:42 +0000
Manifest this update: Tue 29 Apr 2025 12:00:42 +0000
Manifest next update: Wed 30 Apr 2025 12:00:42 +0000
Files and hashes: 1: 9iuKUiRNNk0yJqP9x1MG2I_7d9s.roa (hash: OJC+CIaFp/mpbSmO0wI1lGEv8Ek7U6QE2MP4Wm3PDaM=)
2: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: 3BKWrztWlR3plaFB9vF1Kx3BTMVvqbB43SxqWE6DKOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:b7:a3:c4:44:08:fc:6e:0a:26:59:f5:53:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Apr 29 12:00:42 2025 GMT
Not After : Apr 30 12:00:42 2025 GMT
Subject: CN=622eac189effc459fdde8db69e85524eb8b200de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:60:52:88:96:72:66:24:7e:d3:3a:65:fb:
1a:e0:32:c8:0c:f2:6a:ad:95:dc:75:04:b5:0a:86:
82:d2:cc:fa:22:fb:7c:59:7a:1b:25:1f:68:23:50:
25:fe:06:eb:ae:33:d0:62:70:69:9c:0b:c9:96:7a:
0f:b9:6b:d4:cb:b2:2f:23:aa:4d:ed:d8:c2:10:f0:
58:07:06:73:ac:22:55:18:c2:eb:8a:56:37:92:50:
2e:22:8e:60:cd:bc:1e:e7:ab:46:f2:73:49:a6:aa:
e7:b6:d0:ea:20:3d:ba:c2:b5:bf:33:1c:1a:c8:0a:
d2:ce:f2:b5:9c:96:7f:88:2f:f9:51:79:ec:d2:de:
97:6d:0d:1e:37:bf:89:d2:df:08:65:3d:82:39:3f:
bf:f9:23:49:cf:1f:5e:dc:e9:bf:30:01:66:fe:4b:
cc:27:6f:55:1c:77:c6:84:50:0e:12:c9:0f:77:bb:
a8:78:2f:a3:8e:96:fc:b7:58:6e:95:19:4a:39:87:
8e:63:d0:40:4b:14:e1:d6:49:99:31:fd:f6:f8:c2:
e9:bb:f0:cf:5d:d0:f1:30:4c:5c:3f:14:72:d0:25:
d9:10:a6:56:03:45:a0:85:ca:a5:d8:3c:15:e2:f9:
b8:ea:21:2f:ff:23:0a:25:61:3e:d3:f5:cb:9f:5d:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:AC:18:9E:FF:C4:59:FD:DE:8D:B6:9E:85:52:4E:B8:B2:00:DE
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:23:23:e4:73:c8:de:b0:37:f2:70:9a:b7:14:cf:1d:c3:16:
f3:7f:a9:d3:c5:ef:e5:00:63:94:47:b6:86:b3:cf:f8:ff:6e:
4c:01:d1:64:76:e9:0e:56:13:14:2a:eb:f0:f6:2d:58:72:32:
56:29:33:04:42:41:48:83:72:56:00:de:2d:8b:fe:55:d4:4b:
09:8e:e7:7f:6d:33:c6:7b:38:44:53:72:3e:09:65:3f:e3:e1:
3f:78:3c:00:ea:16:f5:f5:40:47:4b:19:de:a9:f8:bc:32:e0:
9c:3a:15:13:db:ff:17:a4:6e:60:30:63:86:72:6b:85:f8:3a:
93:10:a8:54:77:97:06:cd:0b:c9:1a:60:b4:f4:62:5e:e2:30:
13:b3:35:8e:87:9e:5e:7d:83:16:f4:c7:c4:fb:a9:e8:d4:3e:
66:88:bb:af:f3:20:95:27:53:b4:82:7b:a2:13:17:1f:60:f0:
ba:c5:c4:48:09:36:b2:d2:3e:55:16:42:93:25:78:70:f8:df:
63:4e:f6:c9:ba:15:5e:6d:96:e4:bf:6b:8d:94:fe:34:a9:d2:
58:d0:09:91:d3:b0:fb:b6:45:66:55:03:6e:2d:b9:06:1d:e2:
68:ce:fa:3d:f0:2a:cd:9a:b3:4b:60:5b:fa:b4:b4:ff:08:66:
ae:0a:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:30:06 2025 by rpki-client