Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: frFlIMWxdl8n7w0L0QnsEZOuyxrRHJpNROrDhbdJT6U=
Subject key identifier: 3D:19:44:16:AD:E0:3E:83:A3:2D:B3:DF:8A:C1:0B:1B:43:A0:A0:00
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 01951134AB4F4FF3962B979C5A4BD5099F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 07FD
Signing time: Mon 17 Feb 2025 00:00:19 +0000
Manifest this update: Mon 17 Feb 2025 00:00:19 +0000
Manifest next update: Tue 18 Feb 2025 00:00:19 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: Y2bsaoxokh5aIEC0nMK4fyf4enzSNvjlY0/SawZOhVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ab:4f:4f:f3:96:2b:97:9c:5a:4b:d5:09:9f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Feb 17 00:00:19 2025 GMT
Not After : Feb 18 00:00:19 2025 GMT
Subject: CN=3d194416ade03e83a32db3df8ac10b1b43a0a000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:45:4b:40:b2:01:90:6c:12:59:5d:14:2b:
36:e9:3b:be:aa:46:1d:1d:4f:e0:02:7e:a7:a9:a8:
a3:55:84:b3:40:e3:47:0c:df:b1:7a:1c:78:a5:9a:
af:eb:6c:25:82:cb:25:26:8b:52:e2:9d:bb:a1:aa:
31:05:e4:2a:34:0c:ac:33:28:00:64:fe:01:82:e2:
a9:a8:50:40:72:19:9e:51:99:a3:93:13:36:a1:6c:
db:71:3d:cb:ca:ce:c2:ee:f9:b4:f2:dc:94:3b:e5:
82:01:c6:e3:68:44:60:e2:09:6b:f0:8a:ce:56:15:
df:6c:f5:cb:db:8e:c4:86:de:2c:3c:e3:c9:9d:54:
16:3f:15:ec:52:c2:1b:bc:25:55:72:16:eb:dc:88:
22:e3:1f:9a:65:04:9a:94:9e:0f:6d:b7:f0:11:bf:
74:0b:fc:2e:66:9e:b8:91:b5:ed:8e:54:d0:d7:ec:
4f:a6:8f:d4:f6:f9:bf:1a:12:a9:7a:a4:85:44:80:
47:75:74:6b:e3:76:da:c6:1f:ed:25:01:52:ff:e7:
7f:4e:b3:99:5a:8b:58:ad:7f:0b:5e:76:de:52:ed:
a6:f1:38:4b:16:6e:d0:d3:a0:89:e7:2e:9c:90:83:
05:d3:e6:74:00:fa:9c:9f:de:cb:7a:19:fd:41:db:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:44:16:AD:E0:3E:83:A3:2D:B3:DF:8A:C1:0B:1B:43:A0:A0:00
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fc:43:70:c1:8d:6d:e9:f6:06:b0:5c:77:ed:15:47:c4:6a:
e4:ac:24:d8:b4:dc:66:65:1a:df:e0:07:f7:e9:88:1e:38:92:
ab:e5:3c:46:ae:2d:ad:38:e5:ad:80:ec:8d:04:52:27:72:46:
e5:86:2f:58:c9:27:f2:1c:3f:a2:05:e9:c5:ed:ec:3a:38:5d:
43:55:03:e8:09:bb:17:14:c2:c7:d7:71:55:01:41:cb:2c:79:
a9:91:4a:3b:4b:c9:4e:4f:3d:dc:34:3a:8d:f0:98:fb:25:2e:
d5:13:45:ed:e8:3d:fe:3a:6b:c6:10:16:1a:59:7b:bc:e1:4f:
a5:ea:38:31:f0:67:85:76:9c:ee:d0:a6:06:34:72:ea:48:6d:
66:23:d3:22:b8:6f:74:bb:24:51:8b:c5:27:ce:61:fa:28:3c:
e3:77:1c:3a:80:ee:46:7c:2c:82:27:0e:5b:79:59:af:00:c6:
59:07:c1:75:4a:72:c0:1f:88:d3:5e:42:37:e6:88:77:b9:74:
e7:6a:41:bf:06:ce:3b:c7:43:20:05:84:0d:8f:05:05:04:fe:
b1:59:da:3c:1f:58:3b:fc:fa:b3:6b:6a:7e:91:fb:96:38:2c:
0c:b7:3f:fe:d8:bd:a9:bb:bd:b0:48:b8:cc:6c:51:70:3e:ed:
9c:1c:86:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:49 2025 by rpki-client