Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json)
Hash identifier: b9NRE427uU5rZUh6vKjjUEy2YANic90BIpoQ3q5ZVek=
Subject key identifier: 59:7F:D4:E8:0A:8B:3F:74:C8:D3:3C:F9:2A:2B:87:9A:21:06:77:4E
Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df
Certificate serial: 0196760C16A3B0F684FE848C385285D724C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
Manifest number: 24
Signing time: Sun 27 Apr 2025 07:00:25 +0000
Manifest this update: Sun 27 Apr 2025 07:00:25 +0000
Manifest next update: Mon 28 Apr 2025 07:00:25 +0000
Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: 8XtgcDY+XXDtAlJKkrodR18byHypPYtMQo54/dQTBy4=)
2: jl5BGicOacjnQYcT0f92Ohaidfk.roa (hash: 2+8T//3NgApFzgg77XKjZhpHy2WC3GoSuHjoqbCDjuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:16:a3:b0:f6:84:fe:84:8c:38:52:85:d7:24:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30663b5b7044232b989818d12cc90490212524df
Validity
Not Before: Apr 27 07:00:25 2025 GMT
Not After : Apr 28 07:00:25 2025 GMT
Subject: CN=597fd4e80a8b3f74c8d33cf92a2b879a2106774e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:da:5a:32:0d:63:04:72:f7:ec:6b:7f:01:
ef:f0:c3:08:b5:dd:10:4e:98:a3:c3:40:a9:c0:70:
48:46:ed:c7:0b:0c:9d:0a:5e:d1:78:26:cf:86:6b:
6d:a5:83:9f:4d:56:7e:6c:b2:48:5b:8b:a0:46:09:
53:02:36:c9:04:46:46:02:21:24:e8:c0:71:94:c9:
61:b7:e0:54:88:48:db:45:bb:1d:e4:fd:e7:f2:e0:
58:62:10:f1:c2:79:21:18:dd:0a:b7:56:40:b2:02:
f7:b0:27:be:78:03:d0:f6:75:cf:75:6c:06:e7:1f:
9c:d5:a5:13:00:51:0d:1d:8c:2f:c3:8a:a0:49:6c:
89:61:d1:15:15:1a:03:09:41:7f:81:40:44:b2:c3:
6e:bc:d2:a0:73:5b:d3:b3:11:f1:c4:5d:37:0d:83:
f5:4f:1f:37:03:df:97:9a:cc:6a:80:6d:08:63:11:
59:f7:70:91:66:6d:eb:ab:50:ea:81:23:01:ba:70:
74:ee:ed:0a:ca:bd:c6:67:d7:87:5b:4c:70:98:ba:
5d:6b:66:ba:51:44:03:1d:a2:59:19:b3:94:8b:a2:
64:03:e7:74:cf:ce:a7:10:af:70:a4:87:4c:52:47:
e4:7f:ee:af:ba:a3:22:f4:07:fc:c6:d3:40:cc:df:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:D4:E8:0A:8B:3F:74:C8:D3:3C:F9:2A:2B:87:9A:21:06:77:4E
X509v3 Authority Key Identifier:
keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ba:24:d0:2d:6d:9e:95:6a:43:a2:76:d9:e7:90:48:17:cd:
53:42:9c:79:98:39:10:81:7d:cc:d6:15:3a:2f:d6:e2:15:d5:
9f:8c:6b:fe:a1:96:a1:7c:51:79:f2:aa:46:46:2e:c3:07:c3:
68:ff:9c:83:0e:4d:b3:57:e2:48:41:31:18:3e:70:ce:be:00:
07:c9:75:d2:31:c4:8e:d0:d2:de:4e:e7:7d:39:09:8d:be:59:
bf:3e:a9:ac:52:a2:ea:21:1b:e9:1c:34:ae:a6:14:c8:9e:9b:
ee:ae:e6:9e:56:1c:e9:dd:33:e2:52:f0:d1:65:c9:6d:99:13:
d1:fa:82:45:d5:c4:21:cf:f7:98:66:b8:da:4e:a2:bb:2a:c9:
b1:b7:ca:e0:ba:75:13:89:3a:59:77:78:1a:5e:68:65:51:69:
5f:e5:9a:b4:5c:f1:2c:d9:45:79:5e:21:6e:7b:7e:64:cc:fa:
98:c6:a7:2e:67:ef:aa:5b:34:31:8f:69:78:b4:4e:c6:98:eb:
31:1a:ce:71:24:0a:0b:51:b1:a3:5a:d3:aa:7b:3c:be:8a:e4:
0a:83:b6:aa:32:de:37:a3:fb:c1:ab:2b:57:d4:b4:47:21:60:
b5:19:e1:c9:b7:05:37:a2:a8:af:07:0d:c6:b8:57:18:88:0c:
3a:05:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:34 2025 by rpki-client