Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: qguHBw9zve+oWf6Ntfqe+G1ryM/LxqCcG0P7Shi5cRk=
Subject key identifier: 75:50:FE:0C:46:04:E1:C9:DD:F6:59:34:A9:6D:D6:91:95:2D:73:14
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0196771EC8600FFAB641B3EBC61B842D66F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0A99
Signing time: Sun 27 Apr 2025 12:00:28 +0000
Manifest this update: Sun 27 Apr 2025 12:00:28 +0000
Manifest next update: Mon 28 Apr 2025 12:00:28 +0000
Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: lRHz2/M0qmf+2KQ2rgJl3a/nek0iu1zYzrC/ngyVZbo=)
3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:c8:60:0f:fa:b6:41:b3:eb:c6:1b:84:2d:66:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Apr 27 12:00:28 2025 GMT
Not After : Apr 28 12:00:28 2025 GMT
Subject: CN=7550fe0c4604e1c9ddf65934a96dd691952d7314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:66:87:ac:1a:df:56:3f:a0:71:7b:28:25:
16:a8:84:7b:38:ab:fb:2c:6a:2f:0e:3b:ed:d9:d0:
9c:5a:30:fd:bd:bd:8c:67:7c:48:18:be:cb:43:cd:
ba:2d:b9:79:c3:2a:ef:89:25:0b:f4:59:ae:45:b0:
79:2d:75:a5:c9:0d:cf:c8:e8:0e:27:0e:01:c2:b9:
a5:4f:f6:00:90:75:4a:ae:46:49:8c:00:c4:92:b5:
a5:6f:71:d1:0b:bd:a6:5c:3a:df:0f:28:6a:df:16:
21:4c:2f:7e:25:05:59:9d:a6:b7:ac:2e:05:38:a9:
54:86:0e:ca:77:3b:31:05:d6:2b:db:b9:dc:c7:db:
9c:36:a7:80:42:a9:6a:90:1f:47:cb:d3:85:2f:b0:
f6:47:bc:54:8e:d2:c1:05:6c:40:53:11:18:d8:55:
6d:24:8c:e4:46:80:33:a2:94:72:c3:50:f3:b9:21:
46:87:85:7a:cd:c2:2b:de:3c:2c:e6:2a:05:dd:5a:
46:19:54:15:a1:86:7f:4c:9a:98:86:2f:5c:be:ec:
02:00:26:d4:45:28:46:e3:e0:13:04:56:b7:6d:6a:
7b:34:2e:e1:c4:4f:cc:36:05:ad:ee:05:c7:ef:d7:
fe:5e:1a:c3:e1:0d:00:3a:fd:df:40:3b:6c:56:e3:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:50:FE:0C:46:04:E1:C9:DD:F6:59:34:A9:6D:D6:91:95:2D:73:14
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:79:08:49:3f:67:d6:b6:dc:16:7a:3d:53:0b:3c:49:46:38:
c5:1e:b7:40:ad:08:d5:80:f5:7f:8e:d1:4f:5c:04:90:e2:be:
16:be:fa:94:d0:36:33:af:ac:da:2c:6d:08:74:b9:36:4b:d9:
9e:a0:56:b4:b7:c4:d5:fd:37:db:22:7b:5c:20:71:ec:42:0b:
52:f5:c8:e7:41:a7:f6:71:1c:01:bd:e0:36:0a:32:e6:a2:d1:
41:48:c8:b3:ec:3c:86:69:04:7c:cd:01:69:e5:d5:df:74:4b:
4e:db:62:a2:44:15:ec:36:fe:6e:3c:2c:0e:dd:e8:87:85:13:
4a:21:9b:f9:52:5c:9b:6e:ed:ee:cc:e9:44:d5:11:55:fb:8f:
e1:4e:39:e2:41:ea:69:ea:06:fc:a7:d8:b0:6c:e0:86:82:84:
b3:35:fe:4c:bc:75:f0:e8:c9:76:d1:ba:04:d5:81:7b:10:00:
f5:a9:6c:f9:af:94:1f:34:89:93:08:d2:84:eb:fb:3a:b8:99:
cb:68:1a:c1:27:77:d0:7c:80:6e:8b:51:ce:49:7a:0c:43:c9:
b9:ed:2d:14:b0:75:14:09:4f:66:b0:a2:51:0f:62:d1:31:93:
de:3c:5a:a3:34:4a:a7:1e:c5:1b:ef:e9:6c:a8:7b:1e:4d:6f:
21:28:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:11:58 2025 by rpki-client