Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: 20P9+ng1PXBObMg6HiEMFjtBb7WqanVEvk+ydk6d+p8=
Subject key identifier: 2E:4E:42:19:2D:E3:10:15:EA:EA:BF:B3:1E:A8:3C:7F:ED:E5:3C:D1
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 01976F62B01541F4690AF9F0B0D3DAAED743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 07DE
Signing time: Sat 14 Jun 2025 17:00:27 +0000
Manifest this update: Sat 14 Jun 2025 17:00:27 +0000
Manifest next update: Sun 15 Jun 2025 17:00:27 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: nbPBcRrZF2u9S9Yp89u+aQ3iyAkQR595ioqqcvpO3NI=)
2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:b0:15:41:f4:69:0a:f9:f0:b0:d3:da:ae:d7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Jun 14 17:00:27 2025 GMT
Not After : Jun 15 17:00:27 2025 GMT
Subject: CN=2e4e42192de31015eaeabfb31ea83c7fede53cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:e4:a0:a8:b4:58:8d:8f:ca:17:88:cf:24:
b0:0a:65:3b:17:4e:c2:b1:e8:32:a4:f9:1b:d8:61:
1f:e0:45:d3:36:b0:29:97:a5:6e:fb:ff:74:46:35:
22:2d:fc:da:63:b8:77:ad:02:4d:07:b0:23:66:f3:
20:a5:ed:d3:19:c0:db:fd:9b:c7:08:e7:1a:40:59:
60:45:52:b6:ee:48:44:24:c8:86:f8:33:ee:e9:14:
fc:46:77:2c:ff:0f:3f:e5:9b:ad:f5:b5:cf:f8:d0:
37:2f:07:13:94:98:96:f2:06:d1:4b:4a:4d:1e:5c:
dc:24:22:72:50:bc:e5:b3:c3:f1:89:45:43:5e:0e:
ed:f7:19:47:07:c1:7d:1d:91:4a:18:eb:02:c5:85:
89:2f:1b:bc:11:0f:2a:09:a1:c6:d6:d8:38:db:1f:
e6:4b:44:b8:37:91:fa:65:d6:09:2e:25:f9:75:98:
c2:b9:3a:fb:93:e3:83:8e:7c:fe:a9:71:1c:39:27:
e7:40:19:f1:df:1d:40:34:b5:7f:8a:be:91:35:db:
ed:6c:47:3f:70:3a:55:0e:d4:0e:50:f3:ce:dc:82:
31:e4:0b:17:1e:df:11:ab:2b:29:37:cd:75:f8:29:
a7:c5:3b:37:65:df:78:e9:c2:1b:4a:72:8d:cc:44:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4E:42:19:2D:E3:10:15:EA:EA:BF:B3:1E:A8:3C:7F:ED:E5:3C:D1
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:93:8f:59:9d:9a:73:f6:36:a3:90:49:96:c9:75:95:a2:
b0:5f:d8:52:24:c2:d4:3b:7b:7d:6f:54:06:03:cd:ba:4e:a8:
21:d4:c8:10:4d:07:c1:7c:56:e0:76:52:e2:cb:e7:f8:8e:7b:
61:ca:ea:84:86:db:1f:44:3e:82:7a:65:9c:29:52:f5:0f:4d:
fe:b3:9e:93:67:ee:45:a2:3c:a5:23:80:47:b8:9f:5c:d6:de:
11:e5:62:bc:e9:8e:b2:db:bd:92:76:a6:ee:b0:4b:7a:a3:c3:
62:63:d8:67:90:2b:e2:4f:a9:9d:44:3b:69:47:60:83:b7:ce:
44:50:ff:f2:ef:c1:a9:15:c6:ee:f5:6e:8f:13:3d:ab:18:19:
f4:05:14:5a:a8:02:36:39:22:00:13:ce:aa:a6:9c:8e:7c:0a:
ae:a3:ad:03:49:0c:69:3c:e1:31:dd:3a:49:6b:3d:d5:86:49:
78:dd:87:d3:d9:14:93:87:38:3d:43:57:21:1e:02:1a:3b:89:
95:2b:f8:c5:55:53:0d:b7:79:9f:c2:39:8a:8e:8f:92:0f:62:
d0:d0:7b:ee:a6:3f:a8:d7:a0:7d:a8:80:31:4d:03:17:21:fd:
f3:93:61:0f:d6:dd:a9:48:e4:2e:7b:35:dc:9b:be:a6:94:cb:
ab:3f:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:21 2025 by rpki-client