Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
File: MGE0vPWfWB1rdmMM-oeGeHaikhU.mft (raw, json)
Hash identifier: QZjjmxt21LLX1gQbOVVGf3g+wdIhjBh0peScjyZwHmA=
Subject key identifier: A0:EC:36:A5:41:75:C1:F8:83:A7:40:41:DD:FA:7C:CA:0A:44:2A:8F
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 01965538E23E75F4F6F23079E48852A63933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
Manifest number: 109D
Signing time: Sun 20 Apr 2025 22:01:53 +0000
Manifest this update: Sun 20 Apr 2025 22:01:53 +0000
Manifest next update: Mon 21 Apr 2025 22:01:53 +0000
Files and hashes: 1: MGE0vPWfWB1rdmMM-oeGeHaikhU.crl (hash: nUDTnWDEUxD8nKvV1oUqVlet1xaeMzX5YAK6h8sPYro=)
2: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (hash: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:e2:3e:75:f4:f6:f2:30:79:e4:88:52:a6:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Apr 20 22:01:53 2025 GMT
Not After : Apr 21 22:01:53 2025 GMT
Subject: CN=a0ec36a54175c1f883a74041ddfa7cca0a442a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:79:fc:ec:dc:78:28:ce:a5:8d:bf:47:65:82:
0a:1c:a3:04:f3:9f:b8:9b:71:6a:49:fb:a4:7a:80:
23:3d:ec:39:42:54:0a:81:8f:be:00:13:72:ab:67:
37:37:70:7d:10:e3:a0:2b:dd:20:5b:09:a7:4a:80:
a4:ef:1b:61:ca:a2:12:27:55:a1:18:52:3d:4b:79:
5b:ac:7b:3f:24:9d:d7:9e:20:33:6c:d1:fb:ea:19:
eb:13:4e:7c:0c:09:f4:02:ab:e5:d8:98:b9:04:12:
89:86:3c:f1:b8:a5:dc:da:18:c5:e5:e1:b2:b6:4b:
3a:5c:76:b1:05:c9:c1:3d:92:3a:06:6f:bb:11:67:
a3:5f:0c:8c:30:2d:c5:e0:27:22:75:73:a3:6d:42:
30:b8:8f:c4:c3:a9:50:11:da:4f:fe:67:1d:1f:8b:
06:c0:81:82:33:0a:8d:68:ad:b3:5a:27:fd:0d:e4:
3a:fb:86:2d:28:97:5e:22:0b:09:db:33:b8:29:b2:
a1:c0:ca:d1:4b:90:80:02:fb:76:18:75:06:0c:8b:
85:08:2c:25:d7:69:56:65:3b:5d:b2:ad:ec:3b:ab:
f4:d3:9b:8f:32:1c:6f:ac:d3:29:c0:03:35:ec:1b:
ea:7b:4f:75:64:a0:5d:10:3c:b8:f0:12:c6:04:d8:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:36:A5:41:75:C1:F8:83:A7:40:41:DD:FA:7C:CA:0A:44:2A:8F
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5b:9c:58:f3:37:4f:2d:85:0e:d1:8d:c1:6b:85:52:6e:3d:
50:93:fb:4c:30:79:50:5b:ca:27:fe:2b:6e:f6:89:a4:be:3f:
5b:4a:87:65:a1:65:21:c1:62:58:5f:da:83:7f:8e:da:aa:7b:
b6:fd:07:e5:1a:66:58:65:7d:27:e4:9a:d5:13:8d:04:d8:f9:
68:10:7c:2c:83:e0:45:d7:98:59:64:97:a7:1d:f9:7d:86:74:
76:f4:50:62:76:0e:f6:1d:81:69:6d:6c:c0:f8:13:80:2f:7f:
ee:83:e4:57:11:d7:7f:c2:1d:02:80:0f:55:65:0f:82:75:d2:
db:fd:7c:06:18:ec:6d:64:cf:b7:0f:cf:f8:d4:e0:5c:07:a2:
f0:4e:fd:ec:d5:70:98:8f:8c:3f:74:1b:34:f5:02:f2:09:eb:
5b:ba:35:dd:5a:16:48:85:6a:95:df:09:7d:44:e1:fd:95:66:
07:5e:b0:1e:57:1c:9c:5f:cd:d7:cc:20:f5:9f:db:43:8f:f3:
54:e9:4f:b9:d6:af:db:2b:da:c3:a8:e9:fb:8e:d4:5a:f2:18:
c3:dc:2d:df:38:4d:8a:29:79:8a:5f:4b:e1:c6:49:9b:49:1f:
ab:df:7f:8a:44:ae:a0:51:0b:59:12:37:1e:7f:46:18:3b:bc:
13:72:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:22 2025 by rpki-client