Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: /4yl87ylvYPS3WpD76n+/wcOjOaaG/dJLuEhGLA+gtg=
Subject key identifier: 27:FF:CF:E2:80:8B:D9:44:0D:C7:2D:DA:63:A5:C5:52:4F:EA:28:46
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019677557CEE086D0BF806D9F85C52517B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 05C3
Signing time: Sun 27 Apr 2025 13:00:13 +0000
Manifest this update: Sun 27 Apr 2025 13:00:13 +0000
Manifest next update: Mon 28 Apr 2025 13:00:13 +0000
Files and hashes: 1: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: JVDkTVoX23+nq1aXFgrgJiN/4uhmKIbb4Q2cAh8/J8A=)
2: lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa (hash: dTACe68AOYRTGOWM2bf2NFYllivUWP/q40LE4fNKxno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:7c:ee:08:6d:0b:f8:06:d9:f8:5c:52:51:7b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Apr 27 13:00:13 2025 GMT
Not After : Apr 28 13:00:13 2025 GMT
Subject: CN=27ffcfe2808bd9440dc72dda63a5c5524fea2846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:09:8b:45:92:6b:83:d0:1a:5e:26:b5:e0:
df:77:11:99:d9:20:c9:f7:57:a2:15:50:45:0a:7a:
5e:73:97:38:64:5f:57:fd:4c:1d:b8:78:ce:c8:82:
53:c6:a4:51:e3:2a:4c:90:f5:1b:eb:7e:bf:9c:3e:
4e:a2:00:86:5e:e1:05:49:a6:1d:1c:40:24:9d:90:
fc:6f:6f:3f:e6:f8:e2:03:d7:93:9a:12:0e:02:91:
f2:f0:9a:f3:e6:66:e0:6b:40:71:e5:15:6e:a6:42:
50:20:e1:8b:46:99:51:0a:bd:66:ec:1e:d4:7b:52:
44:2b:5f:88:a6:42:fe:f4:f4:8f:63:a7:83:c8:09:
35:0b:84:f8:8e:63:1c:af:9d:78:3a:95:8d:90:28:
d2:1a:7a:88:f5:1d:41:25:d1:59:9f:82:9d:53:de:
6a:53:26:00:83:2a:96:1d:6a:f7:f8:69:ea:51:38:
9c:e5:ce:85:29:86:c5:6a:2c:4a:89:54:21:76:78:
8f:23:80:c6:ab:ec:8d:dc:18:6a:2b:f8:96:2b:cd:
89:46:97:a7:4c:79:d2:4c:f8:3f:7b:55:5a:4e:f9:
e5:be:76:fe:de:23:cf:ed:cf:62:e7:48:4f:c5:5d:
be:bb:f7:1f:92:8e:cb:7f:40:58:2c:81:1b:52:44:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:CF:E2:80:8B:D9:44:0D:C7:2D:DA:63:A5:C5:52:4F:EA:28:46
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:58:a2:2f:be:27:65:92:61:f7:44:21:1f:ee:9b:69:f4:28:
a3:57:93:c8:92:47:6b:f6:c6:32:f1:10:b4:d9:bc:70:67:f0:
af:1e:5e:b9:75:1f:4f:de:5d:90:52:d0:ff:af:15:19:5b:b6:
3e:3a:9e:39:eb:dd:2c:c3:0c:fb:56:9c:fd:d7:02:83:d9:d3:
bc:51:db:53:82:d0:d9:b4:e6:bf:77:1a:be:a9:e1:c4:6b:ee:
00:63:0b:9a:32:02:36:86:d4:2b:2a:81:f0:03:60:38:34:0c:
79:83:bc:ff:50:c6:9e:d7:40:f5:98:8b:d8:60:6d:38:02:e8:
7e:93:20:e6:2e:6f:e2:c4:74:d3:c7:01:f0:bc:16:82:c2:ee:
f9:f3:db:e4:74:94:e7:37:ca:36:d6:f2:1d:eb:89:b9:19:f8:
31:55:4f:99:dc:fc:4d:47:61:47:d9:87:63:30:50:4d:df:15:
14:5a:c9:01:21:2f:8b:80:b0:0f:74:7e:b5:8c:9c:7f:7e:47:
d9:cf:03:01:cc:40:18:4d:e7:7b:b3:7c:13:52:67:a3:57:f0:
f9:03:88:63:9e:8c:32:13:3a:f2:95:02:1e:2a:8c:6b:b4:6b:
65:14:48:fa:78:11:54:8f:87:8c:c1:38:2c:6b:fa:4d:58:9c:
5f:e8:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:50 2025 by rpki-client