Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier: EEi/pX40obtAFV6pcsKwYbIa2BL70sqklu0uAbGakPw=
Subject key identifier: 7C:DB:C3:A1:C3:D4:6F:78:9A:8C:90:59:CE:0D:68:A1:62:EA:66:C5
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer: /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial: 019659149AD3343C2FE2330A1DC52879170C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number: 11A8
Signing time: Mon 21 Apr 2025 16:00:44 +0000
Manifest this update: Mon 21 Apr 2025 16:00:44 +0000
Manifest next update: Tue 22 Apr 2025 16:00:44 +0000
Files and hashes: 1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: d7EldqRDI4B3uQ09VVAsrw9/A023mz/1qjfU6CGQBPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:9a:d3:34:3c:2f:e2:33:0a:1d:c5:28:79:17:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Validity
Not Before: Apr 21 16:00:44 2025 GMT
Not After : Apr 22 16:00:44 2025 GMT
Subject: CN=7cdbc3a1c3d46f789a8c9059ce0d68a162ea66c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:71:66:5d:8b:8c:0c:5a:61:5d:60:52:27:
8c:1e:f5:d1:fd:60:15:9a:f5:49:d3:27:63:cd:60:
b8:17:51:14:65:7c:37:63:7c:de:d1:d8:9a:eb:bf:
9a:40:e6:9f:3f:9e:36:4c:e9:86:92:66:2e:10:56:
4b:26:ff:b5:71:3a:f1:42:96:2f:4a:56:36:8a:89:
b7:c2:6e:88:e5:26:71:0d:f9:7a:17:34:1b:b9:b2:
6b:e5:16:4e:81:d2:d0:a9:13:a5:73:a0:9e:6f:6a:
51:54:f0:5b:96:a0:3d:a9:77:cc:d4:fb:e5:26:fa:
53:7c:9d:b9:f0:2d:64:ca:8b:b9:11:18:21:f7:f3:
7f:40:bb:ff:6b:60:3a:d7:db:ba:e7:04:c4:f5:0a:
b3:d8:76:c8:84:24:11:35:bd:f7:84:09:33:35:c4:
f1:01:2e:68:ab:53:a3:72:05:43:ac:ac:20:be:cb:
46:b4:8a:92:9c:c3:1b:63:c7:f0:ed:ca:5f:ec:2e:
47:8b:25:f7:e1:0f:e3:f4:c6:01:9e:c6:12:86:81:
28:ff:c2:15:d8:05:b2:fd:f8:30:37:8b:0e:df:fe:
bd:35:a8:44:7c:e2:dd:32:ca:20:73:40:20:73:79:
96:55:e9:3e:ef:96:49:9f:e5:81:82:16:4f:0b:c9:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DB:C3:A1:C3:D4:6F:78:9A:8C:90:59:CE:0D:68:A1:62:EA:66:C5
X509v3 Authority Key Identifier:
keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:02:2b:cc:31:88:84:f0:8e:f0:b4:94:7b:d9:e6:5b:03:ee:
8c:dc:8c:14:1c:2d:c2:e6:f3:f9:9c:c8:44:1e:bf:20:59:1a:
70:e1:ce:3d:f6:fb:65:b6:15:07:d5:20:a7:83:ae:69:77:0b:
80:1f:f9:38:13:86:fd:17:b4:aa:84:df:96:cb:ad:4a:0a:d2:
55:76:fb:98:f2:fd:03:33:10:47:c2:b2:95:9a:cb:ac:3f:0a:
a6:0d:b0:7b:a7:0a:b6:8c:4e:eb:e0:96:e2:d4:f0:54:9c:4d:
a6:12:70:1b:af:3d:9a:1c:13:4c:4b:5e:d5:3b:84:41:83:97:
15:77:76:16:36:7c:79:6f:3c:2b:72:d4:84:20:d1:74:97:3b:
9e:46:08:9b:6f:c5:b0:4e:a8:3b:50:97:1e:6c:74:60:cc:ee:
ea:d0:1a:85:90:65:e2:17:bc:09:3e:74:f2:28:32:b1:ed:2f:
8c:75:16:1f:e1:c0:cb:37:fb:3c:0c:0e:65:00:88:f8:e9:17:
ab:88:a6:a4:47:92:cf:24:de:0e:4d:e8:3b:16:84:e8:90:14:
3a:d1:42:8e:1a:6c:d5:85:50:9f:00:58:60:04:b0:d1:c4:20:
6b:86:2b:88:5c:29:97:04:81:41:1f:b7:3f:51:b7:bb:fd:79:
85:f1:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:20:01 2025 by rpki-client