Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
File: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft (raw, json)
Hash identifier: Ykyq2LJ6MuIqxDwcax3Pnwf3sg+PNfAd39mwzJTSjfI=
Subject key identifier: 82:A1:EE:43:C9:37:2F:FD:13:15:F7:32:12:A9:9A:B5:E4:12:10:C4
Authority key identifier: 30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
Certificate issuer: /CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Certificate serial: 019653B6F2BE24CC04191C6ADE3040ADE927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
Manifest number: 0E73
Signing time: Sun 20 Apr 2025 15:00:20 +0000
Manifest this update: Sun 20 Apr 2025 15:00:20 +0000
Manifest next update: Mon 21 Apr 2025 15:00:20 +0000
Files and hashes: 1: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl (hash: jNsPYWqRZBcg5GTVmVf76oj8TfppH4LjFuochmScp2I=)
2: hfNN3XiVLhZTBEzmZ9kxsFWjtgU.roa (hash: rdvuWCnmeSdDSQrFfaBCbjsr2zsTzqKaLeEHczQ6fHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:f2:be:24:cc:04:19:1c:6a:de:30:40:ad:e9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Validity
Not Before: Apr 20 15:00:20 2025 GMT
Not After : Apr 21 15:00:20 2025 GMT
Subject: CN=82a1ee43c9372ffd1315f73212a99ab5e41210c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:90:bf:e3:c5:04:bc:9c:e1:3d:7e:f9:46:
17:46:2d:79:13:dd:0c:af:a2:3c:9a:fe:32:07:06:
b3:0c:7d:be:75:a0:76:4b:b7:bb:29:20:93:76:a3:
4d:a9:03:b1:37:c0:e0:59:d8:7c:b4:1f:9d:e5:bd:
67:27:26:72:cb:0b:27:da:5c:ac:df:02:f1:cf:bd:
56:d0:37:c0:06:ad:8f:aa:7c:37:fa:30:d6:03:f6:
80:25:25:81:75:0e:0a:fc:6c:50:6e:b5:45:af:1e:
e2:9f:e6:e5:21:4b:a9:b1:b1:07:14:b5:3e:0c:e1:
ef:f7:2d:45:fd:46:a0:ed:b0:e1:f1:20:77:fa:d1:
39:26:38:03:3f:e9:54:57:b7:72:e1:cb:dc:5e:ca:
66:b8:ea:e7:62:e7:fd:e7:94:15:dd:48:8f:d8:bd:
8a:4c:79:89:a8:67:8d:34:7b:17:08:7b:5d:76:2a:
46:f8:73:14:38:8b:8e:0b:bf:41:f9:62:99:a1:25:
56:51:ef:e9:8b:d8:d4:10:01:02:ab:59:c7:d6:1e:
e1:37:2c:f9:c7:10:b0:04:a3:85:2f:11:b1:4e:e6:
10:a8:12:32:9a:ac:63:70:3c:3c:d4:a5:5c:f1:b7:
e2:6d:90:e3:ca:09:cf:3e:e5:14:a0:ab:d5:a4:a6:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A1:EE:43:C9:37:2F:FD:13:15:F7:32:12:A9:9A:B5:E4:12:10:C4
X509v3 Authority Key Identifier:
keyid:30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:45:1d:1e:89:dd:87:b1:8e:1d:2d:93:80:08:e0:6c:5d:68:
88:30:2a:08:4a:36:8a:fb:e5:4c:6c:01:25:9d:c9:5b:c0:4b:
69:34:11:fd:48:e1:a4:5f:ed:f5:eb:3e:65:5e:4d:a6:1a:44:
32:45:ec:7d:e5:aa:95:16:02:cf:01:05:e0:d8:b5:53:e4:7b:
61:53:1a:d1:ba:bf:eb:30:9e:87:40:69:55:57:77:94:fc:7e:
79:e0:15:13:22:eb:7e:cf:68:b1:61:7f:60:ad:d6:4c:38:ee:
89:c6:bb:61:dc:93:e9:de:64:89:08:f7:dc:9a:de:cf:63:62:
94:22:b3:69:c9:a6:dd:8a:6d:95:43:5f:59:45:33:39:94:36:
36:1d:e6:2d:04:d5:9f:e4:ed:ec:01:e6:ac:d2:c1:73:a6:38:
27:4c:69:4f:bf:45:7b:67:d5:cf:9c:fd:e5:d9:16:2e:be:a5:
bd:57:5c:60:0c:d3:f6:12:97:f4:99:9b:9a:4a:cf:87:a1:38:
84:0a:6f:23:f7:a5:48:8b:00:01:3b:de:a0:ce:8c:b1:11:60:
2f:62:24:51:c3:ad:e4:0d:e2:89:c0:be:0a:0b:36:fb:1f:f7:
58:8b:10:37:de:c2:56:b9:cc:21:f3:de:bb:ad:4a:fb:c1:19:
85:50:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:10:38 2025 by rpki-client