Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: Fl+Z5sx0pyvoQ9SAQ6Q/DAxnrnlqTpXBnI1xkAY5F+s=
Subject key identifier: 24:FB:96:87:FB:4C:07:D5:E1:D1:9A:58:54:65:1B:31:4C:FA:BD:66
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 019674F9CB779998DD18FFF43D54E1D99AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 11DF
Signing time: Sun 27 Apr 2025 02:00:49 +0000
Manifest this update: Sun 27 Apr 2025 02:00:49 +0000
Manifest next update: Mon 28 Apr 2025 02:00:49 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: PCCiF7lcytYVcPsN70y29SUr4+EC0GmPaw0nWzdRQzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:cb:77:99:98:dd:18:ff:f4:3d:54:e1:d9:9a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Apr 27 02:00:49 2025 GMT
Not After : Apr 28 02:00:49 2025 GMT
Subject: CN=24fb9687fb4c07d5e1d19a5854651b314cfabd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:99:d6:64:e2:1f:54:60:58:d4:ac:8d:87:
8c:06:0d:60:5b:e0:39:ef:a7:c5:f3:8b:6d:af:3d:
76:6b:b8:0f:52:5f:88:2a:12:31:4b:3f:9f:b8:c9:
fd:34:27:4e:d6:89:a4:2c:45:f3:bf:87:de:3e:8b:
4a:73:b9:a2:02:9b:9e:d2:d3:9c:c9:18:4c:8a:67:
16:b0:24:14:ed:4a:78:2b:12:d6:46:25:6a:97:06:
ac:ff:37:6a:89:f2:03:75:9e:b1:c2:e3:16:22:82:
e0:d5:0d:f9:6b:63:68:07:aa:71:cc:66:c2:1b:74:
f6:b9:09:60:65:03:3a:40:08:56:ee:15:7f:cc:fe:
3b:3d:e5:ae:fb:8c:a9:46:42:35:63:f4:e5:fd:88:
41:5a:f0:89:50:d6:83:75:0e:d5:15:d6:01:5b:e6:
63:2a:d6:cf:5e:c0:76:ad:80:b7:f7:a8:f1:f9:84:
36:f9:4e:a0:9d:a8:ae:3f:cc:43:81:42:ba:b8:95:
52:fd:ba:be:91:c2:d4:1a:96:ab:0d:f1:a2:ff:5c:
c6:74:87:e3:a1:ce:23:31:3e:68:9e:83:1e:72:d4:
77:19:9b:2b:ce:4a:f5:09:d5:15:8d:b2:78:06:d7:
45:3e:cc:2a:be:57:6a:8e:bb:e1:38:ba:82:cc:74:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FB:96:87:FB:4C:07:D5:E1:D1:9A:58:54:65:1B:31:4C:FA:BD:66
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fd:6a:9d:de:9e:e3:3b:a1:9e:b2:dd:a0:43:b2:36:44:5a:
4a:64:04:f9:60:a3:b8:22:4f:5e:41:55:7d:62:f1:9c:2b:de:
2a:19:bc:81:9d:9f:a9:f8:1b:8a:43:dd:68:0f:ee:0f:db:29:
52:95:88:7a:8f:2c:66:d3:e4:61:07:01:1a:a4:3f:8d:66:d2:
01:3f:6c:5a:42:b7:77:81:9a:6b:43:b7:92:d7:0c:ae:b6:c8:
cf:ec:0b:a4:65:32:7b:e1:72:61:0b:1e:5e:be:f9:74:99:ff:
c3:79:40:01:c7:93:40:2c:3f:dd:9c:a8:6e:ac:8e:ed:c7:fa:
74:c9:2f:76:b7:08:be:74:b1:8d:90:e2:50:29:f0:cd:b5:39:
85:1d:6e:78:6c:4c:13:89:d9:32:e7:0e:02:ed:1f:e3:e4:b2:
60:84:35:ae:bb:e1:72:c1:49:45:5b:87:c3:92:f9:f9:42:b0:
82:bf:19:2e:b9:ec:4b:28:e7:b2:b2:cc:94:f7:24:36:fb:d5:
11:c1:9a:3c:44:6e:c4:77:6b:04:bf:55:72:e6:e1:6a:86:e1:
9a:c8:f0:d0:21:5f:a7:a4:5e:05:8c:e5:ec:e1:8e:4d:17:3b:
3e:2e:43:b8:f4:37:40:b5:b7:08:04:53:5b:8f:ad:54:ab:b0:
48:a0:3d:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+ct3mZjdGP/0PVTh2Zr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyODZmMWMyMDVlZTMxODdlMmFjMWE0YTViYzA0OWYzNDQ5
ZmY2NjcwHhcNMjUwNDI3MDIwMDQ5WhcNMjUwNDI4MDIwMDQ5WjAzMTEwLwYDVQQD
EygyNGZiOTY4N2ZiNGMwN2Q1ZTFkMTlhNTg1NDY1MWIzMTRjZmFiZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMyZ1mTiH1RgWNSsjYeMBg1gW+A5
76fF84ttrz12a7gPUl+IKhIxSz+fuMn9NCdO1omkLEXzv4fePotKc7miApue0tOc
yRhMimcWsCQU7Up4KxLWRiVqlwas/zdqifIDdZ6xwuMWIoLg1Q35a2NoB6pxzGbC
G3T2uQlgZQM6QAhW7hV/zP47PeWu+4ypRkI1Y/Tl/YhBWvCJUNaDdQ7VFdYBW+Zj
KtbPXsB2rYC396jx+YQ2+U6gnaiuP8xDgUK6uJVS/bq+kcLUGparDfGi/1zGdIfj
oc4jMT5onoMectR3GZsrzkr1CdUVjbJ4BtdFPswqvldqjrvhOLqCzHRJ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCT7lof7TAfV4dGaWFRlGzFM+r1mMB8GA1UdIwQY
MBaAFDKG8cIF7jGH4qwaSlvASfNEn/ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDIt
MzI0ZWYzNGViZWEyLzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDItMzI0ZWYzNGViZWEy
LzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUv1qnd6e
4zuhnrLdoEOyNkRaSmQE+WCjuCJPXkFVfWLxnCveKhm8gZ2fqfgbikPdaA/uD9sp
UpWIeo8sZtPkYQcBGqQ/jWbSAT9sWkK3d4Gaa0O3ktcMrrbIz+wLpGUye+FyYQse
Xr75dJn/w3lAAceTQCw/3ZyobqyO7cf6dMkvdrcIvnSxjZDiUCnwzbU5hR1ueGxM
E4nZMucOAu0f4+SyYIQ1rrvhcsFJRVuHw5L5+UKwgr8ZLrnsSyjnsrLMlPckNvvV
EcGaPERuxHdrBL9Vcubhaobhmsjw0CFfp6ReBYzl7OGOTRc7Pi5DuPQ3QLW3CART
W4+tVKuwSKA97w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:32 2025 by rpki-client