Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: rZuimSkkD+MLzu3FSbjPpvkXYKY/zDwD01srVgF/WNM=
Subject key identifier: 6A:F3:F6:F7:A8:62:C1:ED:1F:02:6A:2E:9D:3E:7E:7C:C2:A3:02:F5
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 0194BB972236AF330A692F730B19BB7BEBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 02E4
Signing time: Fri 31 Jan 2025 09:00:31 +0000
Manifest this update: Fri 31 Jan 2025 09:00:31 +0000
Manifest next update: Sat 01 Feb 2025 09:00:31 +0000
Files and hashes: 1: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (hash: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=)
2: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: nYQDJPExr94D1mg/Q95opznmiWXKkDVNNKkvnkvFFJU=)
3: N16JeWvOmOgFnFHegC3uE95HfCM.roa (hash: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:22:36:af:33:0a:69:2f:73:0b:19:bb:7b:eb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Jan 31 09:00:31 2025 GMT
Not After : Feb 1 09:00:31 2025 GMT
Subject: CN=6af3f6f7a862c1ed1f026a2e9d3e7e7cc2a302f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:29:34:e8:88:4e:46:88:cd:9a:cd:5a:35:
59:80:e8:a1:3c:16:e0:5c:9e:7f:d6:29:80:62:9c:
95:d2:3d:ee:74:5b:dc:8b:0f:f0:75:e3:44:80:55:
99:73:34:ac:84:95:a8:41:4d:e3:a0:28:39:d4:89:
61:86:09:af:0d:48:4d:68:03:8e:15:42:d1:ea:5c:
30:1f:87:44:1b:ca:a8:5d:74:ae:85:6f:68:ce:a8:
a4:88:be:4f:47:fa:e1:f0:ce:eb:9f:1d:26:bc:d1:
83:cc:3a:20:26:00:ef:15:5f:c0:b4:87:bc:a9:3d:
85:a7:f2:ed:d6:e1:55:2e:c4:37:f3:27:98:01:12:
e6:0d:94:6e:34:2e:7f:d5:ed:17:fc:ff:37:e2:62:
ca:5a:e0:a4:8d:58:89:e4:a5:03:8e:f1:d2:95:09:
27:12:4d:f1:87:98:6d:15:a6:c1:ec:b0:b0:97:f7:
ee:a1:c9:bf:97:a1:41:65:63:d6:55:b6:3e:16:9a:
70:9e:db:18:3b:cf:b5:3b:44:60:0e:e9:fa:8b:56:
cf:b9:f3:13:28:44:18:0c:23:01:cf:53:05:12:f9:
09:c7:5d:1a:88:2e:12:80:94:0f:11:1e:eb:93:5b:
27:01:dd:33:76:92:2e:b3:37:7b:4e:0f:d2:ee:b8:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:F6:F7:A8:62:C1:ED:1F:02:6A:2E:9D:3E:7E:7C:C2:A3:02:F5
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:33:74:04:09:ea:ef:f3:99:31:50:0d:11:d8:a6:d2:9d:f8:
e1:10:28:c0:45:52:68:8f:a6:98:cd:4a:17:ef:8b:38:c3:44:
c5:35:8d:4f:cf:64:b2:98:6c:51:c9:fc:9d:14:8c:ac:45:ef:
db:2b:b1:12:c0:1f:ca:d7:19:92:e6:b7:9a:7f:75:13:db:5d:
9c:cf:d7:bb:ac:68:b8:78:e0:92:9b:c4:65:35:3f:d4:7f:ac:
9c:b5:50:a1:a1:be:07:6b:be:0e:eb:74:8a:bf:2a:39:aa:ea:
4b:05:8b:3e:b6:0b:91:1a:d2:c3:78:ec:36:1a:e7:25:2f:73:
c9:52:e2:ad:c2:44:15:df:62:33:fb:76:72:f9:24:1b:34:16:
d0:e9:84:86:7a:c3:a2:22:a4:92:d8:97:11:a9:94:72:f6:7c:
df:ca:73:f6:c5:b8:db:70:14:8a:35:96:dc:0c:8d:c3:b8:30:
fc:fa:7a:b0:df:f5:08:c7:45:18:fd:7e:97:1d:2f:c7:2c:16:
ed:e8:27:d1:3f:b5:c3:63:e5:a9:65:3f:da:f1:7c:35:ca:a5:
98:36:0e:13:96:26:f4:86:3f:99:a9:f4:6d:6a:45:f0:0d:c8:
ff:f1:bf:c9:01:53:ea:ae:a8:dc:79:35:d6:1f:c3:aa:f8:ea:
09:d5:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:51 2025 by rpki-client on console-fra.rpki-client.org