Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: y7r1chOKVIvCqZRjfk95OE6rVDR0xzVelOGYM3rDZXI=
Subject key identifier: F1:47:C6:6B:E8:18:43:1A:2D:4D:3F:8D:E1:05:9A:9D:77:76:80:AA
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 0196748BB4A85361ECF4757B49B6A513F45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 08B5
Signing time: Sun 27 Apr 2025 00:00:34 +0000
Manifest this update: Sun 27 Apr 2025 00:00:34 +0000
Manifest next update: Mon 28 Apr 2025 00:00:34 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: N30wUuq71dMJDsaAHuKMcnPLsjaSzOksAEcE/H1Ffes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:b4:a8:53:61:ec:f4:75:7b:49:b6:a5:13:f4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Apr 27 00:00:34 2025 GMT
Not After : Apr 28 00:00:34 2025 GMT
Subject: CN=f147c66be818431a2d4d3f8de1059a9d777680aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:70:e2:39:aa:7f:d7:5b:93:1e:f8:33:84:
58:68:7c:b9:f0:30:e6:89:e0:fe:15:c7:d2:93:4e:
df:e6:ed:3e:18:0d:7a:86:a5:ca:ef:36:d6:51:ae:
ed:fb:a5:b1:be:32:aa:90:b0:a6:18:03:14:8b:fb:
82:56:f5:eb:44:38:1d:70:cc:c4:f6:ef:08:ee:16:
38:e5:75:fc:c3:b5:d9:8e:d1:20:a6:0e:21:ee:48:
c6:c0:34:cf:90:93:fa:23:b7:16:f7:23:e7:4a:47:
cf:1c:d6:4a:eb:bc:b2:df:1e:1d:b8:43:48:01:c8:
cd:8e:65:35:b4:dc:34:65:40:b5:71:61:3c:5e:63:
70:36:c4:f9:bd:a0:23:a6:b4:ea:17:07:67:fa:f9:
16:56:40:60:5f:d2:99:63:88:01:9d:86:8b:0b:c5:
ce:73:25:c7:c1:a9:90:07:e3:b4:d9:2f:7b:56:b0:
bb:34:12:bd:7b:b8:3b:bd:19:78:94:79:2c:fe:76:
29:2f:0b:2e:e9:0d:78:f8:9a:4f:a0:6d:e9:2e:be:
12:24:d8:7e:de:33:08:8c:e2:5e:99:43:f7:cd:4e:
27:5c:ff:70:2f:a9:4a:3f:64:b6:45:85:77:2e:9c:
60:10:91:b9:d8:46:43:0d:6a:19:5c:d3:02:2e:09:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:C6:6B:E8:18:43:1A:2D:4D:3F:8D:E1:05:9A:9D:77:76:80:AA
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cc:bd:0b:a4:5e:c5:db:00:cb:07:10:08:ec:96:20:8d:aa:
7f:b7:bb:d9:ba:d9:ff:99:cc:2e:0d:09:32:f7:24:e5:c4:8b:
84:4c:e9:3e:ce:76:86:80:9d:6d:1a:b8:0c:4d:e3:ca:a0:d0:
81:fd:1c:29:dc:44:d5:b3:c2:06:f5:8d:24:27:9d:b7:de:a7:
24:dc:ae:eb:52:f7:bb:b3:88:b0:4c:e4:23:91:7b:c5:1c:6a:
02:f2:c0:de:4c:2f:93:a8:25:d5:ea:ae:04:a6:eb:94:ee:88:
44:f2:0d:e9:15:a7:ae:d0:1f:45:d6:75:3c:e6:a2:87:1b:94:
03:3a:08:29:77:e3:bc:34:21:fa:30:23:7a:a8:44:38:e2:24:
ee:b6:01:bc:81:3f:04:05:f7:b3:f2:fb:f2:0b:82:95:23:c5:
03:2f:84:4c:9b:2d:3d:47:b2:8a:5b:c3:3a:2c:82:ce:a1:f8:
e9:a1:18:7d:57:99:1e:62:03:d5:8d:de:93:f1:7b:20:d3:23:
c7:11:c6:a1:21:97:79:37:63:bf:5c:49:d9:95:bc:d8:0f:ff:
49:be:e1:79:38:04:0f:33:31:f2:28:01:51:ef:ee:a4:33:a7:
b9:ee:33:04:db:6b:71:1a:9d:f0:83:ae:cc:03:d5:2c:5e:7f:
33:0b:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:55 2025 by rpki-client