Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier: 3IGDRoySh9jU0kmmclNwikQI1D+CwBFmC3+jG6R2xK4=
Subject key identifier: 42:FA:4B:16:A6:CA:9E:A4:CC:0B:1C:2D:0A:D8:AA:39:5D:EF:1E:A7
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer: /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial: 0196911646EFF858AAEC7F74E4EB4F8F2E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 13:01:18 +0000
Manifest this update: Fri 02 May 2025 13:01:18 +0000
Manifest next update: Sat 03 May 2025 13:01:18 +0000
Files and hashes: 1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: SWwhiSrafjo7/Lm6VR0ghMWP7cd5P2oUUlL07h0by2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:46:ef:f8:58:aa:ec:7f:74:e4:eb:4f:8f:2e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
Validity
Not Before: May 2 13:01:18 2025 GMT
Not After : May 3 13:01:18 2025 GMT
Subject: CN=42fa4b16a6ca9ea4cc0b1c2d0ad8aa395def1ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cd:19:ab:b8:92:ea:a1:30:9d:72:b4:cd:74:
4f:dd:f2:3c:7d:1d:74:80:4a:fe:0d:74:f7:fe:5a:
46:f6:0d:f0:36:1a:33:09:44:a8:86:e0:e2:d5:90:
df:b5:3a:01:b1:54:00:d1:0d:e6:6b:53:b5:9b:5a:
2a:37:0a:da:14:f8:a0:e6:b6:e8:c6:64:f1:4d:cf:
d9:c8:e8:88:6a:be:5d:5b:bf:19:b3:44:1f:4c:d5:
60:cf:cb:36:f6:db:db:ba:08:9a:a1:c5:39:7f:e7:
e6:f9:8f:0b:87:9e:a0:0c:d1:26:e3:9e:22:94:a6:
d1:7c:15:5c:24:07:60:df:4e:2d:eb:3b:59:85:1f:
c8:a5:23:86:74:d2:69:c6:25:5f:4f:5f:8a:2c:6a:
fe:c4:6a:55:ac:49:70:3e:53:d3:3a:60:61:21:5a:
3d:72:3d:d3:cc:18:09:67:b0:a3:d3:ee:2b:d9:0b:
cf:ea:c3:de:d9:f3:9a:8b:f5:e9:92:9a:04:65:b4:
ff:ea:42:e2:f2:82:58:60:b7:16:13:7d:42:99:d7:
07:e4:a8:ed:ef:47:1e:f8:93:5f:dd:34:3d:8b:d0:
90:7f:ac:11:74:37:3c:0f:f7:1b:3e:cd:f7:f5:6d:
12:79:f9:2f:54:b9:7b:91:e3:a2:89:18:d0:76:3e:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FA:4B:16:A6:CA:9E:A4:CC:0B:1C:2D:0A:D8:AA:39:5D:EF:1E:A7
X509v3 Authority Key Identifier:
keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:25:64:94:c2:81:58:44:b6:94:f1:9d:dd:ad:be:09:ae:7a:
37:ff:bd:9d:bb:86:84:a5:cb:a6:8d:83:ea:5a:5f:e0:b5:de:
ac:e1:1b:ea:cd:fb:e4:dd:a5:15:9a:d7:b6:4a:ba:54:01:ff:
b3:fb:e4:10:ba:24:54:0f:d7:1e:62:c2:e6:d4:c0:b6:3b:76:
4f:27:93:3b:56:ae:d8:7d:3f:25:28:7b:d5:ea:c7:c1:0a:64:
5a:71:04:b2:94:2c:4e:54:55:d7:be:22:a5:9d:ec:c8:8b:3f:
db:a5:25:a9:24:43:69:d0:06:0a:27:aa:81:23:8f:9a:a0:6f:
fa:8d:87:f9:54:a4:9d:19:49:77:51:4d:4d:02:87:02:b5:3f:
61:69:d1:14:c7:b9:f7:56:a3:8f:4e:35:77:14:07:14:82:29:
be:c9:67:c0:ef:66:e9:f2:49:59:4f:98:d2:ef:8f:d7:10:0a:
55:3c:5c:bf:ef:95:83:48:11:79:9a:b2:be:2f:ea:1e:19:f9:
6a:cb:6e:d6:d4:aa:3c:85:0f:3c:06:1f:f2:7a:3a:d9:75:20:
69:34:00:9a:43:28:61:c0:71:da:15:86:0a:4a:91:a8:67:ac:
1b:e4:43:73:88:49:b1:e6:ec:10:b3:7c:70:a3:4a:6e:d7:57:
77:5e:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:43:41 2025 by rpki-client