Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: QC4M03DJChD0UfAsWmib1Ylaesnvg7DTWno5u2mExcg=
Subject key identifier: F7:91:A2:D2:89:8A:70:03:E2:9D:39:67:A3:7A:17:73:BB:90:CA:2D
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 019680FDC1340160C6E4DF176812A848845E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0A6F
Signing time: Tue 29 Apr 2025 10:00:35 +0000
Manifest this update: Tue 29 Apr 2025 10:00:35 +0000
Manifest next update: Wed 30 Apr 2025 10:00:35 +0000
Files and hashes: 1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=)
2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: 3Ym8aHgBrQF7t6CYkRR68POJxHRJEjqcvZ8NTUt1jOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:c1:34:01:60:c6:e4:df:17:68:12:a8:48:84:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Apr 29 10:00:35 2025 GMT
Not After : Apr 30 10:00:35 2025 GMT
Subject: CN=f791a2d2898a7003e29d3967a37a1773bb90ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:2c:1b:fb:5e:ce:b7:9c:c9:1a:f3:94:1c:
f2:88:2e:a7:01:6b:5b:20:0b:a2:46:2a:e9:4c:b0:
f8:8c:bc:c5:ab:21:70:a9:8d:8e:ba:36:71:8d:e7:
7e:ff:63:69:da:b6:50:e5:61:b2:e2:d2:fd:ec:7d:
09:36:db:72:16:ea:0d:86:f8:18:d2:2f:07:32:f4:
0e:3e:50:3b:51:29:b2:49:ab:a2:eb:4a:61:95:44:
3a:e7:78:20:ee:36:43:8b:26:9e:29:25:e2:3a:bc:
01:c6:e5:49:5d:1b:db:7d:76:6c:f9:04:b1:b5:0b:
c7:99:d9:50:88:96:f7:b6:9e:12:95:51:b1:d9:04:
c0:ed:be:9f:69:8c:b6:31:48:ef:af:17:fc:3f:19:
31:c4:34:c9:bc:fb:46:64:e8:d9:ef:7b:eb:89:81:
7a:e9:22:49:44:4c:29:7f:c3:d0:73:fd:2e:61:d6:
f2:5a:e2:a5:0d:e3:a4:6d:bf:1c:12:9e:1a:a8:cc:
4f:85:42:81:be:ac:15:6f:21:0e:05:8b:50:14:8e:
3b:e6:24:c8:e6:b3:c0:31:3e:2e:63:ac:4b:75:b0:
b8:05:1e:db:c8:2f:ed:38:91:16:0e:e7:d2:54:3d:
b1:e0:93:45:8f:44:51:ac:4f:46:0d:43:31:71:86:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:A2:D2:89:8A:70:03:E2:9D:39:67:A3:7A:17:73:BB:90:CA:2D
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8f:6b:fd:1a:12:1c:c2:50:79:fa:77:75:8b:c8:4d:c7:ea:
66:12:19:2b:16:ad:ee:c8:d7:6b:02:bf:b6:a6:5c:34:f6:98:
09:df:25:20:f1:1c:02:b6:93:b4:96:f9:ea:3d:99:76:3f:e0:
83:af:89:2d:56:7d:c5:19:84:c2:0c:72:43:19:04:d6:ff:f1:
a0:7b:46:ce:8e:aa:bb:ca:24:dc:c1:03:5a:e9:d5:06:0a:f2:
f9:6b:f2:70:1a:6f:83:d2:71:fc:6b:c5:27:9f:2f:64:e8:6b:
53:bb:95:8d:7e:b1:77:07:8a:77:0e:ef:c8:d2:fe:e0:6b:e2:
d7:d4:71:5a:10:63:92:99:cb:ce:e2:ee:f4:95:b1:bc:0e:ab:
12:3c:a3:a7:69:40:ce:10:2a:3b:ee:1a:5b:8a:d7:6c:9d:7f:
b3:2a:7d:34:14:2f:73:23:05:1b:d2:47:f5:c7:e7:f8:50:7c:
69:27:a0:17:e7:3e:c2:df:6a:9e:2f:eb:5b:e6:80:c6:1e:8c:
0e:83:77:12:d7:78:11:92:a9:42:48:a2:f6:3f:d7:27:2d:bd:
6f:e0:82:88:07:46:5d:2d:c6:46:9e:1b:fc:a5:f7:6d:b7:4b:
e2:da:83:a2:8a:7f:41:20:82:81:c4:31:a2:24:bf:89:23:d2:
a3:89:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:13:40 2025 by rpki-client