Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: /feGG5EyEMNr9pFxIyKxOslptVkyDfYj425ZGT1J0eg=
Subject key identifier: 5C:98:EB:33:21:3F:3A:62:9F:97:00:4B:16:9D:16:3E:28:2D:C5:95
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 01967E3352FA2C8887A63748375E6149E724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 123D
Signing time: Mon 28 Apr 2025 21:00:14 +0000
Manifest this update: Mon 28 Apr 2025 21:00:14 +0000
Manifest next update: Tue 29 Apr 2025 21:00:14 +0000
Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=)
2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: u3mfHMzIcaEnjygCycm9w9WTIpzHh0gicA0lLZx8Bb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:52:fa:2c:88:87:a6:37:48:37:5e:61:49:e7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Apr 28 21:00:14 2025 GMT
Not After : Apr 29 21:00:14 2025 GMT
Subject: CN=5c98eb33213f3a629f97004b169d163e282dc595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:65:35:eb:e8:c8:4a:4c:a9:a4:7e:38:e4:
bf:f1:ec:9c:69:e4:52:2a:82:43:7e:5a:c0:dc:ff:
e6:d9:21:2a:82:89:8a:34:ba:6f:26:98:7f:80:d7:
29:da:2f:eb:38:b7:ad:cd:57:8e:8f:e7:85:35:35:
17:5d:aa:e1:22:69:52:9d:ee:79:2a:d1:a8:93:34:
81:d5:52:6b:97:c5:2e:8e:0d:ca:96:87:96:a7:ff:
8a:32:fe:35:29:e7:43:3f:12:b3:25:0f:06:8a:81:
bb:8d:5e:15:47:e5:d0:bb:1d:df:d3:4f:c9:ff:3d:
04:ba:b7:72:d7:8b:a3:6b:14:f7:d3:f9:9f:97:2f:
15:d2:d1:ed:ac:b6:f7:86:cf:92:4b:df:53:ae:24:
14:7f:6b:49:92:db:9b:ff:07:c0:38:53:8f:b9:a4:
3b:16:00:0d:4f:4a:a8:50:18:07:01:08:83:2a:d7:
b8:f4:5b:e6:09:65:8f:51:0d:6e:67:ed:5d:32:3d:
cb:77:9d:e2:9d:9a:d5:3a:c1:6b:79:f2:cc:f8:77:
36:6f:4f:38:3f:6f:a7:20:e6:8a:c3:b5:96:18:3a:
af:6d:7e:fb:7d:fb:04:e3:8f:7a:5d:32:c0:03:b2:
6b:78:e2:59:b6:26:d7:8c:83:f7:2f:f4:9e:b9:cc:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:98:EB:33:21:3F:3A:62:9F:97:00:4B:16:9D:16:3E:28:2D:C5:95
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:17:88:ed:c7:6e:cd:65:6d:65:f3:3c:e5:c5:74:56:e6:8d:
3f:4e:90:5c:80:77:06:0f:61:c7:cf:38:19:18:c1:af:c0:ad:
fc:21:c9:6e:0b:46:04:d7:73:58:0c:19:8e:f6:fa:62:a1:85:
50:c6:ea:63:e9:0a:85:ca:e7:da:df:9a:a2:41:e3:07:57:c7:
09:60:a8:4a:13:24:69:d9:42:fa:a2:b5:cc:45:e1:1f:69:ac:
f4:9b:98:c3:7c:53:e4:bb:96:3e:95:e7:c9:96:46:11:2b:71:
b7:6d:b5:89:28:29:16:73:64:a4:63:8f:09:af:60:a6:cb:0f:
20:af:06:17:e3:f0:54:90:48:af:de:11:9c:a8:32:3b:ab:b7:
d4:80:04:9d:33:4d:21:9d:06:be:10:24:24:34:b6:a2:80:61:
2a:e5:b9:7d:e4:39:ab:92:b4:07:22:51:c8:bf:03:a5:ae:f1:
d7:71:8d:a1:3c:d1:f5:18:1b:b4:a3:be:f4:37:e3:f8:d1:8d:
ff:9f:19:fc:da:b0:30:34:51:dc:98:a3:02:55:58:c1:12:11:
a5:96:e4:11:d0:ce:df:c5:24:ca:a4:1f:da:9c:08:ca:ae:ba:
39:c9:b3:ff:21:e3:e7:a3:33:f9:fa:45:fc:b7:68:cb:8f:75:
2b:a0:f2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:39:29 2025 by rpki-client