Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File: MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier: N+resF4r3alzjyl+W95Cmj+Nk/jPQjaeK5Nt/WB6F4s=
Subject key identifier: 53:E3:A5:C7:43:1F:23:F8:E5:D0:49:76:4A:17:93:B0:8E:57:72:96
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer: /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial: 0196876DC6AA98F1DED9C6AD7779B648309F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number: 05D9
Signing time: Wed 30 Apr 2025 16:00:40 +0000
Manifest this update: Wed 30 Apr 2025 16:00:40 +0000
Manifest next update: Thu 01 May 2025 16:00:40 +0000
Files and hashes: 1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: ShjKo9shSzQDLHQ1eyrHSCulKaju4QILJe38pMUJ6BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:c6:aa:98:f1:de:d9:c6:ad:77:79:b6:48:30:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Validity
Not Before: Apr 30 16:00:40 2025 GMT
Not After : May 1 16:00:40 2025 GMT
Subject: CN=53e3a5c7431f23f8e5d049764a1793b08e577296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:1b:89:e5:2c:e5:04:fc:90:cf:bc:1e:02:
49:72:7f:4c:d6:93:20:f8:08:cc:4e:54:82:67:f8:
67:df:2e:6c:8a:3f:71:2e:7f:5d:d4:34:f0:e4:76:
fd:d7:4d:9a:b4:66:5f:6f:d3:e8:b2:77:dc:98:d6:
b4:67:09:ae:3b:8e:e2:4c:27:5f:34:85:d4:2b:25:
37:11:f7:60:cb:83:eb:2c:02:22:54:4f:b5:a3:d1:
7c:24:8a:5c:b3:1e:bd:b0:a9:82:26:70:09:90:72:
65:f0:f2:d6:bc:3b:ea:91:e8:08:ea:aa:59:5c:a2:
8d:b3:77:0b:31:c2:ac:75:53:41:39:3e:42:1e:57:
09:48:23:8a:58:4f:0b:8e:f5:05:65:f0:f4:29:b1:
37:8e:c2:8f:2d:91:fd:49:5f:ce:dd:01:9e:5f:2e:
2a:bb:22:71:82:b2:6f:a8:ba:da:d7:43:06:d2:57:
48:cc:fe:8d:58:dc:47:bb:f1:50:d0:1c:03:fe:ae:
fc:05:1c:b6:e7:28:3f:f0:ff:fd:2b:67:bb:b3:3e:
33:62:71:79:1a:9f:bd:45:aa:7e:76:e9:17:e9:0d:
78:cc:5e:d5:e7:ea:24:2d:45:9b:db:56:f0:b3:cf:
b7:3e:89:94:96:d2:05:00:b6:f9:3d:fd:a8:1c:29:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:A5:C7:43:1F:23:F8:E5:D0:49:76:4A:17:93:B0:8E:57:72:96
X509v3 Authority Key Identifier:
keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3d:06:47:a4:d5:b1:02:94:a0:43:fb:c9:1f:9d:79:7a:bb:
e4:da:37:f7:f1:f6:bb:8a:ef:12:b1:5a:04:63:65:c4:e6:b4:
6f:b3:78:09:99:88:5c:f1:0c:57:e1:69:a3:9b:67:c2:2c:38:
0e:d3:03:51:ec:8d:bb:1a:2d:f5:72:89:10:51:a4:fb:6e:34:
b9:02:06:0e:e8:f9:65:4e:d4:c1:05:a2:56:8a:67:76:8f:e9:
05:93:0c:ad:cb:69:ca:9f:21:d2:82:75:f7:7a:f0:be:7a:1b:
da:cb:34:37:89:ea:2e:61:bc:8b:3e:88:0d:4f:f7:3c:33:c6:
5d:c5:ad:13:c8:79:d7:8f:95:60:9d:4f:12:08:be:55:11:d6:
8d:05:21:90:57:7f:09:62:d5:22:97:0f:e1:7d:46:c5:c5:9d:
80:14:19:25:c8:c6:9c:3f:6a:bc:1e:a1:bf:22:54:66:4e:6b:
46:a4:c4:46:e0:48:e7:a9:ea:54:ab:88:dd:5e:29:ec:7f:4c:
60:d2:e0:99:08:40:01:3b:fe:2a:83:78:91:78:8f:00:3e:a5:
2f:ab:27:76:82:ef:37:39:05:56:8c:6b:17:40:84:07:05:89:
96:96:a5:6e:60:51:35:67:7a:7e:33:fb:02:af:49:dc:3f:fe:
31:6b:43:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:00:06 2025 by rpki-client