Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: frNrJwZ5UWYy7W84epQcPRsce10Qd0iVOrlVuUU7H6U=
Subject key identifier: BB:C1:1B:75:F9:F0:E8:A4:B3:F7:81:19:06:D2:4B:64:EC:07:C7:4C
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 01967454A0679A52B44474D3AF661F8B4082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 125D
Signing time: Sat 26 Apr 2025 23:00:25 +0000
Manifest this update: Sat 26 Apr 2025 23:00:25 +0000
Manifest next update: Sun 27 Apr 2025 23:00:25 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: iz9+1ALarRNdMeuxe1zVeUk21xzMF7d2HZ5kDsEXRcU=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:a0:67:9a:52:b4:44:74:d3:af:66:1f:8b:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Apr 26 23:00:25 2025 GMT
Not After : Apr 27 23:00:25 2025 GMT
Subject: CN=bbc11b75f9f0e8a4b3f7811906d24b64ec07c74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:64:98:47:66:3d:39:7a:72:4e:bb:92:25:
7e:bc:c6:17:5f:8e:1b:78:41:23:e6:c1:88:6f:9a:
1e:14:50:e1:3f:99:d8:72:b0:dc:2a:7c:8f:52:08:
cd:8f:37:33:35:46:2e:50:0d:5c:0a:d0:1b:45:bb:
91:d6:31:0e:2d:0b:8f:ad:d7:9a:fe:ff:3f:81:ee:
2a:fd:17:b4:8f:bb:7a:33:bb:2d:2f:c3:17:38:10:
fc:3c:50:ee:cb:ca:16:93:b9:92:93:78:7f:d9:be:
22:0c:33:46:97:1b:74:75:d4:f8:b5:92:4d:78:b7:
b4:f9:f9:32:71:6e:f5:39:0c:3c:75:d4:a8:bb:43:
ab:80:3b:e9:b2:f5:24:79:40:8f:ae:d8:30:b7:db:
bf:bd:65:11:71:12:ad:41:94:f6:36:7d:49:94:83:
2c:a6:b6:85:94:ba:7f:64:64:d2:28:84:54:31:14:
ee:30:a0:02:d6:8e:7d:f8:41:b1:44:25:06:61:96:
3d:82:fc:63:54:f1:cf:8d:d1:81:b5:19:76:cd:f4:
bd:91:f5:32:cf:b1:d1:3f:6b:44:02:b9:c9:f0:21:
21:cf:ee:32:25:39:75:80:3d:e1:20:ee:ed:e2:3f:
0f:b0:ea:c9:f5:cf:8e:f0:03:8e:cc:69:d3:d6:fb:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C1:1B:75:F9:F0:E8:A4:B3:F7:81:19:06:D2:4B:64:EC:07:C7:4C
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7a:12:bb:e5:29:97:98:cc:2c:54:fc:46:be:6a:87:b6:32:
5e:66:b1:90:96:7d:cb:43:01:3f:13:20:53:5c:80:5a:6a:f0:
29:da:a2:41:44:64:4e:08:26:27:f7:86:41:d8:ed:0b:bc:6e:
24:96:99:3c:7a:d6:69:3a:04:19:64:d6:3b:bf:5d:e5:dc:01:
ed:c3:15:79:0a:4c:ba:ed:87:d4:a8:58:b6:00:d2:52:0f:69:
43:1e:3b:44:16:de:e3:cd:46:f5:32:86:94:1f:2b:b2:67:80:
07:05:af:ea:48:39:9a:f3:71:62:3e:98:2c:5c:e9:24:35:d8:
34:dd:8e:21:a5:71:15:a9:e3:2b:fb:34:97:23:14:5f:1d:57:
3d:1d:89:e6:b7:93:6c:a9:e5:94:be:98:33:91:49:ba:44:02:
64:ef:a3:0d:fd:66:e3:08:24:28:9f:f1:d2:a6:da:06:81:e6:
b4:9f:6e:c9:e6:61:ce:53:64:05:74:7b:d5:88:60:ce:f5:da:
db:73:c9:d6:4b:14:9f:c3:11:fb:52:04:90:e0:3b:54:f6:41:
ff:6e:a5:9d:21:59:db:a3:36:5f:1a:82:fe:bd:ab:eb:61:24:
e5:fc:85:0a:30:85:36:f5:6e:de:49:06:43:a0:07:7d:71:9f:
be:b9:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:44:02 2025 by rpki-client