Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
File: MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json)
Hash identifier: l2i86Y1WmAHOFnur4PRjH8lGMzUalqyVh6Uz8rXMoos=
Subject key identifier: 3A:24:04:10:6A:7B:47:63:C6:E9:C8:11:0B:54:6D:DE:75:58:BE:E7
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Certificate issuer: /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial: 01967567720B608C9BF13DB854AA7D668257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
Manifest number: 01DF
Signing time: Sun 27 Apr 2025 04:00:35 +0000
Manifest this update: Sun 27 Apr 2025 04:00:35 +0000
Manifest next update: Mon 28 Apr 2025 04:00:35 +0000
Files and hashes: 1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: epIqnL85SfRfzGrDJ08q8YkDXrnJuspHopG9dwVrmFE=)
2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:72:0b:60:8c:9b:f1:3d:b8:54:aa:7d:66:82:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
Validity
Not Before: Apr 27 04:00:35 2025 GMT
Not After : Apr 28 04:00:35 2025 GMT
Subject: CN=3a2404106a7b4763c6e9c8110b546dde7558bee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:9e:12:59:d2:4e:65:45:72:25:0e:ab:f9:
96:67:6b:aa:c8:5e:6b:ac:d7:86:dc:61:05:f4:22:
d2:fa:68:ab:40:e0:ea:48:f4:c6:6a:b7:c3:d6:a1:
a4:21:b6:64:89:25:dd:2c:36:07:03:57:8a:3d:8a:
98:58:7a:18:fc:b7:1b:1c:d1:8d:85:2d:7e:be:af:
5e:85:91:3b:a9:ef:78:79:63:c0:0a:f0:05:71:16:
18:b0:0e:eb:20:3f:8a:ed:81:03:72:f4:a7:b8:3f:
c2:a6:81:de:3f:a1:0d:e1:10:7c:99:4d:49:54:28:
3d:f1:b0:67:ca:68:8a:e5:e1:c0:ff:84:6e:39:cc:
aa:b5:51:85:9a:c1:7a:5f:3d:7b:09:d7:f3:1c:10:
78:2b:c3:b7:6f:bb:5d:ee:db:68:8d:c1:ab:1e:35:
1b:bc:fc:4b:03:ab:f5:35:a7:36:7e:3a:58:99:00:
da:11:0d:6c:13:f9:ce:0a:1b:a6:84:65:a0:0c:68:
44:93:27:82:c8:c0:3e:a7:85:25:ea:63:fb:65:17:
cf:47:c9:34:5a:a7:84:2c:03:79:f2:1f:37:7f:11:
0e:9d:15:b4:21:97:e9:fd:1e:b3:8d:c8:e8:f9:75:
9e:89:c6:c7:df:e9:47:cc:02:6a:f8:84:ca:f0:f8:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:24:04:10:6A:7B:47:63:C6:E9:C8:11:0B:54:6D:DE:75:58:BE:E7
X509v3 Authority Key Identifier:
keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9c:72:2d:c6:cc:99:7a:7d:d0:cb:60:86:3b:fa:0e:b9:07:
ec:fe:64:3e:ba:4d:17:9b:74:50:32:28:25:9e:2e:ca:16:b4:
cc:72:e8:e5:be:d2:83:65:09:a7:77:52:bf:1a:5a:ad:81:18:
dc:30:0b:51:aa:97:fe:68:34:13:78:a1:c3:07:23:13:f3:a1:
8a:96:da:22:b7:51:5a:12:42:19:f1:8d:85:d6:c1:47:24:28:
bf:ce:5c:00:92:b0:3b:f9:42:38:6a:45:81:fa:48:fc:78:b8:
c9:d0:7b:22:4e:7f:16:a1:09:24:12:5d:53:b5:e6:14:fc:20:
ec:47:e1:e9:34:36:dd:41:35:88:39:e2:ba:dd:ee:86:f2:8f:
8e:89:7b:f0:3d:ee:e5:57:55:7b:c7:11:d9:d9:b5:36:4b:56:
03:bc:c9:6e:04:56:21:f6:8e:87:dc:03:9f:41:08:0a:4c:e0:
53:51:05:6b:83:73:5c:58:b1:59:57:87:8f:65:a3:e9:8e:33:
48:d1:37:6a:d6:8a:6e:14:1f:cd:21:c4:f3:07:22:4e:39:33:
e2:df:44:14:28:1e:28:83:2f:59:ea:af:63:3b:3b:2e:70:b3:
06:02:c2:a7:73:98:43:6f:bd:4e:97:31:dc:e9:bc:27:12:a7:
28:60:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:09:25 2025 by rpki-client