Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
File: MMOt1700croWgExJC2ahCXZZvTE.mft (raw, json)
Hash identifier: Lwvyi2YTkzcQKMiyCmWVz+ZrEprtI6un6TMPtSt5Tr0=
Subject key identifier: 1D:26:E1:5E:86:51:08:B0:C9:4C:1D:A3:98:AA:F6:9C:97:9A:28:19
Authority key identifier: 30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
Certificate issuer: /CN=30c3add7bd3472ba16804c490b66a1097659bd31
Certificate serial: 019676E817029D9AA192CAC19CA4F636100B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
Manifest number: 0AC2
Signing time: Sun 27 Apr 2025 11:00:43 +0000
Manifest this update: Sun 27 Apr 2025 11:00:43 +0000
Manifest next update: Mon 28 Apr 2025 11:00:43 +0000
Files and hashes: 1: MMOt1700croWgExJC2ahCXZZvTE.crl (hash: tcfWOFqDyeIn534f/+SADkCCDM0xOLQxZlFpkpxoPuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:17:02:9d:9a:a1:92:ca:c1:9c:a4:f6:36:10:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c3add7bd3472ba16804c490b66a1097659bd31
Validity
Not Before: Apr 27 11:00:43 2025 GMT
Not After : Apr 28 11:00:43 2025 GMT
Subject: CN=1d26e15e865108b0c94c1da398aaf69c979a2819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:9c:9e:39:cb:4e:67:be:df:bc:14:ca:19:
69:7f:47:c9:c4:31:60:2d:5d:03:2b:7c:64:6c:01:
36:a0:ec:d4:3e:7c:ba:09:3b:93:26:c7:e4:41:99:
ed:6b:43:96:47:f6:91:ed:60:eb:61:50:d5:5d:07:
c2:fb:fb:d4:3f:b3:1b:b0:b1:a7:34:0b:5b:42:8d:
69:38:30:a4:db:1a:6f:32:4a:42:7d:c9:48:a0:1f:
e2:cc:49:3a:12:d6:67:18:4f:b9:9b:31:c0:c0:7d:
f7:f1:e1:89:fc:d7:73:19:2e:21:3f:09:cb:21:e7:
e6:d6:28:6e:d5:c0:3d:07:a5:34:38:a6:92:25:f2:
25:ea:aa:e7:e9:9b:b9:4e:bd:cf:aa:f3:af:de:d1:
d3:99:e6:1b:11:ee:23:ea:fc:32:ee:86:8c:12:b5:
07:47:dd:d6:1a:bb:cc:7b:eb:c1:23:ec:04:ce:06:
c4:bf:44:f7:60:10:5c:1d:68:1b:c3:5e:c3:9c:ff:
43:7c:ca:49:d0:af:a2:a7:97:e1:c2:6c:d1:5d:2f:
59:c3:84:f4:a2:ee:fd:29:9e:0a:e0:22:ed:d0:9b:
cd:7e:6e:9e:b1:f7:db:79:cf:f2:96:8c:23:71:95:
4a:d1:72:1c:4a:33:1b:d4:82:14:c7:6d:22:6b:87:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:E1:5E:86:51:08:B0:C9:4C:1D:A3:98:AA:F6:9C:97:9A:28:19
X509v3 Authority Key Identifier:
keyid:30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:03:a6:50:35:89:7e:86:3b:7a:f1:55:84:63:27:af:69:ea:
aa:a5:21:cd:d4:34:b7:54:1d:39:33:db:ce:6b:07:49:24:1e:
4a:4e:a5:e6:65:82:c1:c8:c6:44:8c:07:33:0d:fa:05:da:89:
6e:8b:cd:ff:9d:10:de:45:0d:5a:4a:cc:88:f6:ea:26:50:6e:
b1:f7:91:6b:e2:48:d2:53:e1:cf:12:df:11:72:7f:c3:37:e8:
c0:46:7c:94:f5:0f:e0:c7:85:37:d3:dd:10:9e:c3:db:30:b6:
53:d3:41:b0:89:a9:e6:c4:bf:7e:43:3a:ea:da:8a:d4:67:06:
f6:7e:8a:ff:6e:86:7a:13:2b:48:01:c3:3b:56:d1:a2:ea:fb:
ba:95:20:bf:a9:6f:53:ec:20:99:2f:2b:df:fa:64:2f:d0:a5:
ce:59:43:65:a4:95:51:03:b4:c7:85:64:4b:ce:58:5e:72:11:
f9:0b:59:1d:28:c6:b1:f5:ae:89:d6:27:28:1b:66:2d:a7:df:
b7:10:d9:b7:b5:4a:08:2c:c4:e1:6e:9d:c2:ab:72:e1:5a:e3:
e3:ea:8f:3c:7f:52:71:68:d0:60:18:6f:a5:e7:d0:31:06:31:
31:07:d2:18:fb:02:35:e4:45:0d:a1:82:15:ad:fd:c0:74:f2:
98:3d:57:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:55 2025 by rpki-client