Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: BwwWh0+fcfSrAUUO44oZq/PQafDjxkceaTp7pIM8id0=
Subject key identifier: 77:A8:DF:4E:04:24:A3:EB:9E:7D:48:CB:D6:FC:D2:DE:4E:00:1A:31
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019673B0184F8516AFF13A0F9D132C8F2374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 20:00:42 +0000
Manifest this update: Sat 26 Apr 2025 20:00:42 +0000
Manifest next update: Sun 27 Apr 2025 20:00:42 +0000
Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: 0JwWFYqVEdR+8zVNiPT65xvQye2wY8oum8njXgIkMBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:18:4f:85:16:af:f1:3a:0f:9d:13:2c:8f:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Apr 26 20:00:42 2025 GMT
Not After : Apr 27 20:00:42 2025 GMT
Subject: CN=77a8df4e0424a3eb9e7d48cbd6fcd2de4e001a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:8f:5e:26:32:57:96:2b:39:90:02:93:67:
d0:4e:de:24:f0:a1:59:de:bc:37:1c:d3:e1:2e:c8:
69:66:33:05:b8:db:e6:2f:12:f8:dc:78:43:9d:a0:
70:3c:1d:b8:44:fe:89:52:aa:64:07:27:8d:72:4b:
47:91:d0:4e:c4:c1:70:d4:59:44:d0:98:ab:7f:b8:
76:b4:7c:4c:51:a8:59:b1:40:d3:fe:92:de:4e:f8:
79:bc:09:8d:2e:7d:4c:e5:d6:58:f3:79:d3:de:b2:
93:49:c0:ed:68:4f:29:28:8e:76:6c:ac:62:5c:5a:
a8:c6:32:da:f3:40:e0:14:27:18:54:04:62:cb:81:
1d:ac:5e:ef:4b:bc:b1:fa:a9:9e:da:b8:bc:a9:5a:
cf:3d:17:c3:83:f5:46:7d:cd:77:f0:f0:5e:2e:7d:
45:13:08:dc:03:ea:c2:5a:5d:ea:2a:c8:66:a4:d2:
5d:8f:73:44:11:b6:72:84:a0:d5:da:f0:72:45:59:
bf:35:af:1b:56:30:8f:bf:34:e5:b7:54:cd:95:83:
8d:35:6d:af:d6:4b:7c:90:17:c7:2f:4d:6d:8d:38:
1f:fb:61:53:62:73:be:a0:3a:f1:e2:fa:12:de:ca:
3c:46:be:01:23:82:c2:94:7f:71:49:68:6a:8f:d3:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A8:DF:4E:04:24:A3:EB:9E:7D:48:CB:D6:FC:D2:DE:4E:00:1A:31
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d2:80:70:53:71:e7:3a:9a:ef:02:b8:94:b9:46:37:91:3c:
dc:25:97:90:55:1e:1a:69:e9:aa:c4:99:c2:cc:4e:95:0e:ef:
8a:c1:fa:21:9e:4d:bf:52:0c:94:dc:f1:71:d2:8d:64:83:04:
a6:13:8b:88:d1:69:fe:f4:7f:07:c6:ae:13:99:49:2c:b7:ea:
9e:f6:f2:e8:d3:b7:37:8b:24:b5:7c:ac:f1:41:32:6a:9f:74:
e2:a3:8c:8a:26:40:de:ce:e2:25:11:8e:fc:2f:93:a4:fc:1d:
0f:34:a9:06:29:1e:01:ab:ae:83:f4:1b:2f:ad:57:dc:64:c0:
f2:1b:84:8e:d0:a2:ef:2c:bc:2b:d8:92:7f:43:f4:67:c2:1d:
1c:9c:21:d2:05:ec:0f:d0:c1:9c:1e:ff:7a:81:1a:73:37:c9:
6d:87:8c:1b:4a:99:26:33:37:e4:2a:fa:e7:f0:e5:af:8c:6e:
bf:00:f4:64:d3:81:4f:fd:42:74:29:c8:5c:8d:ed:3d:4b:a0:
d3:2f:6f:b9:1c:a6:29:96:00:b0:1a:5c:6e:a8:2f:3c:30:ff:
40:16:be:6f:ef:6c:81:50:cf:0b:91:f5:d1:89:b2:d5:74:9c:
17:b3:4a:31:9d:12:bd:1d:c2:5c:5d:31:68:f8:df:5f:3b:d1:
f6:3a:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:55 2025 by rpki-client