Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: SvjZR1+OX7oVuGRvjTQNlNzPPgzlzesXk2rp7ELT60Y=
Subject key identifier: AF:6A:86:D0:BF:AC:75:74:96:D7:25:D2:EF:A2:F9:8A:7A:FA:C6:3F
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 0196760C2D38A6E176D2B1069B7D5D7CBE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 0F0A
Signing time: Sun 27 Apr 2025 07:00:31 +0000
Manifest this update: Sun 27 Apr 2025 07:00:31 +0000
Manifest next update: Mon 28 Apr 2025 07:00:31 +0000
Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: Lnf9elvcRYJWqe2U9wqR2EEwBUr3GNR9CG72G2Lqd1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:2d:38:a6:e1:76:d2:b1:06:9b:7d:5d:7c:be:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Apr 27 07:00:31 2025 GMT
Not After : Apr 28 07:00:31 2025 GMT
Subject: CN=af6a86d0bfac757496d725d2efa2f98a7afac63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:2b:e3:27:54:67:91:8f:06:02:2f:42:02:
14:99:8b:e6:cf:5e:9f:be:98:01:45:fe:be:69:e6:
02:35:8f:14:9f:7c:2b:fa:38:84:ac:fb:39:c2:72:
54:70:ab:d1:00:37:50:17:7f:2c:21:79:c8:9f:44:
df:ab:b7:9b:9e:b6:43:31:fd:21:dd:fd:2a:f0:46:
5a:c0:15:6c:d7:d1:d8:7b:d5:f0:f8:62:86:fc:32:
03:f8:c6:6c:6f:1c:09:e6:78:f1:40:96:35:85:37:
9f:b2:7b:52:2c:16:5f:a6:f7:b3:fd:78:56:50:a9:
25:02:ec:94:37:2d:13:10:52:23:b5:f5:7f:8f:f5:
b5:d0:f3:fa:eb:b0:e7:98:06:be:73:f7:3b:90:b6:
d3:a4:88:c0:cb:65:3c:2b:8a:8a:af:fd:6b:d8:32:
cc:0d:78:92:e9:8b:da:13:02:cb:12:0c:79:96:1c:
dd:7b:37:e6:1e:0e:a2:34:15:49:56:5e:cf:b5:3e:
5e:bd:09:f4:54:3d:25:34:59:e2:ac:87:a6:2f:22:
e0:b8:2f:09:42:81:78:ea:a9:71:c2:ae:ac:64:24:
3a:0c:02:63:d1:b1:5c:42:52:de:57:5a:d5:30:81:
81:f3:bf:8a:f8:48:4f:93:23:c2:a2:99:f4:24:3f:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:86:D0:BF:AC:75:74:96:D7:25:D2:EF:A2:F9:8A:7A:FA:C6:3F
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:99:80:d1:4d:a6:ca:d2:ab:24:2f:58:2c:2b:68:87:30:
aa:02:f5:aa:4d:99:60:a4:68:3e:55:23:c1:0c:73:34:e4:25:
6a:7e:14:69:05:92:7a:8d:e8:f9:07:32:9d:3f:e0:ac:67:13:
8e:a9:4c:92:08:76:86:7e:98:5d:9a:8e:5f:4f:16:4b:c5:e4:
41:8a:8a:c8:c3:95:b2:7e:56:d9:bd:ab:c4:25:23:6d:6f:42:
c4:72:25:b3:47:9d:c1:30:10:d4:ad:e3:05:91:89:45:71:a8:
7c:bd:57:90:94:77:55:29:97:a6:ed:d8:37:43:df:5d:c4:6f:
c9:fe:57:34:b7:3e:5f:17:3a:bb:99:87:cd:ac:e0:7e:eb:18:
1f:42:99:6d:11:c3:b1:96:33:a0:f5:bc:50:c1:b7:2e:99:2c:
45:4e:7c:84:5b:cc:24:c6:3c:39:91:0f:2f:50:30:92:6c:23:
cb:b1:a1:f0:75:f6:c5:b6:8a:02:77:b2:7e:8f:81:64:db:7c:
c7:57:3e:b0:00:89:29:2b:7a:37:81:22:63:fb:55:60:6d:c2:
8f:1b:98:17:13:c0:b8:ca:3c:b6:39:3f:2b:91:15:e5:72:31:
35:02:27:ec:84:c9:00:1d:25:31:2c:08:ce:a4:31:6b:7b:4f:
c9:19:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:19:08 2025 by rpki-client