Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
File: MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json)
Hash identifier: oKdOAjvszIa+A3lsPLs7HT8vberF+B18M5mOH/tbDYI=
Subject key identifier: B9:E0:4E:2D:53:D5:C0:2F:52:06:93:D2:66:FD:82:B3:73:5F:5B:D1
Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
Certificate issuer: /CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Certificate serial: 01977119FDD257BEB0D6A1CCA74CB12FF8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
Manifest number: 14F1
Signing time: Sun 15 Jun 2025 01:00:18 +0000
Manifest this update: Sun 15 Jun 2025 01:00:18 +0000
Manifest next update: Mon 16 Jun 2025 01:00:18 +0000
Files and hashes: 1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: FvG3sdryG3Cp/fCisbLG4rT95yWk35MfE/auDH2DnKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:19:fd:d2:57:be:b0:d6:a1:cc:a7:4c:b1:2f:f8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Validity
Not Before: Jun 15 01:00:18 2025 GMT
Not After : Jun 16 01:00:18 2025 GMT
Subject: CN=b9e04e2d53d5c02f520693d266fd82b3735f5bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:c8:df:70:28:77:4a:19:72:85:dc:38:4a:
0c:14:90:3f:de:3a:0e:4a:37:ad:c4:9c:f8:67:2d:
48:79:df:ef:62:d6:e1:27:4a:71:c8:8e:93:71:be:
27:a6:e6:38:ad:e1:e8:91:d9:c0:0c:a0:bc:e4:89:
de:97:2e:73:45:22:66:93:c1:92:ab:66:42:ab:11:
8a:2a:0b:20:97:18:44:9a:cb:ae:5d:32:5e:95:4f:
e0:36:8a:e6:c0:dd:2f:95:9d:1b:e3:44:6e:c3:8b:
e8:63:02:05:e2:72:47:ed:8a:68:d9:35:9d:6d:98:
cf:f2:32:ac:33:8e:62:d2:e0:77:0c:11:3e:15:d7:
71:f4:01:a0:37:a7:e9:f1:c4:2f:23:54:45:e1:81:
27:6f:a4:c1:0d:bf:a7:3e:94:b1:7e:6b:e5:56:1d:
5a:f8:9d:5a:ae:d7:bf:4b:e0:00:9b:e0:9c:07:a5:
02:55:01:d2:47:2a:4f:af:07:7f:d3:60:79:8c:66:
06:3e:dc:23:ed:87:0a:b3:d6:4b:61:53:a9:9e:17:
2e:c4:b1:31:3f:3f:96:4c:86:77:6a:4c:ca:d3:2f:
0a:db:33:41:15:0c:36:3e:0e:81:3e:ad:de:02:2f:
8a:fa:ae:cd:e7:72:e4:85:a0:1d:85:86:77:16:33:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E0:4E:2D:53:D5:C0:2F:52:06:93:D2:66:FD:82:B3:73:5F:5B:D1
X509v3 Authority Key Identifier:
keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6e:74:64:dc:a3:6f:59:7f:e4:99:6d:28:5d:f2:8a:0e:bf:
1c:9c:39:7e:78:02:c9:be:96:ce:ae:da:b0:ec:27:c7:90:cb:
98:ce:2c:70:a3:44:75:5b:81:f8:9b:09:4e:2c:e3:06:5d:ae:
74:a9:d8:ed:d8:f6:ad:82:6a:93:f5:90:22:ad:b6:cb:6f:74:
4a:af:37:9a:7c:be:15:2f:06:7a:9d:42:69:b1:5a:cd:b8:e0:
30:92:66:8e:c9:6b:d8:d0:8c:02:df:ac:64:bb:8f:7d:1b:eb:
1e:d3:01:9d:16:76:0d:a9:47:c2:0a:bb:d8:0d:33:ab:80:bf:
62:51:1e:2c:cb:18:47:81:db:03:7c:35:63:e6:8b:a6:dd:af:
49:92:43:35:8f:c7:bf:a2:03:d2:c8:34:e8:55:0a:a6:6f:3b:
23:72:65:0e:5f:13:82:69:01:06:e3:d4:5c:2c:90:7a:3c:48:
42:f0:4b:d1:0f:60:ee:eb:9b:28:06:b9:81:a6:bc:ee:dd:00:
ac:30:f6:d1:62:ff:29:cd:cc:ed:7d:a8:a4:09:6e:b0:b3:c9:
60:fd:52:17:fb:9e:a1:29:e8:8f:01:ba:1f:13:70:e8:ef:5f:
10:d7:30:b3:d9:5c:cf:11:3c:0b:89:14:5d:75:99:df:72:ad:
c6:18:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:54 2025 by rpki-client