Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File: mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier: mTi7YxIhAQiVJ7hKI2LDSOGCgVqFtwZtiiv3mNb7gGM=
Subject key identifier: 22:F0:86:A8:BF:99:85:E2:F5:FA:AB:80:5F:45:1C:C3:C7:7A:E1:55
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer: /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial: 019748FA1D84BDDAC6C2238112251F3DCB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number: 0571
Signing time: Sat 07 Jun 2025 06:00:40 +0000
Manifest this update: Sat 07 Jun 2025 06:00:40 +0000
Manifest next update: Sun 08 Jun 2025 06:00:40 +0000
Files and hashes: 1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: wdg8fK8HB4v+Y4u7iq+LDan6+XipnO1pv01BmNCZv64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:1d:84:bd:da:c6:c2:23:81:12:25:1f:3d:cb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
Validity
Not Before: Jun 7 06:00:40 2025 GMT
Not After : Jun 8 06:00:40 2025 GMT
Subject: CN=22f086a8bf9985e2f5faab805f451cc3c77ae155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:d5:4a:5c:86:b6:eb:e8:d0:3a:34:9d:f5:
48:b8:b2:92:b3:64:b4:1e:5c:48:62:48:0e:44:ce:
6e:b7:c2:de:3a:ad:a3:46:b8:73:48:ee:fa:ce:04:
ea:05:06:6d:f7:0f:91:6b:a8:6d:73:f5:21:a0:d1:
16:62:33:2c:42:7e:04:87:74:90:ae:a4:c8:ca:b7:
56:e6:5f:c1:95:09:e3:20:4f:e1:8b:89:4d:d5:b0:
1e:56:be:97:d6:07:32:09:24:bb:2c:da:1a:62:32:
6d:a5:0d:f6:7b:a4:4c:f6:2e:e6:db:05:16:e4:a2:
81:1f:b2:c1:9b:2e:7a:d2:bc:98:19:38:ae:d9:70:
3c:b7:34:89:19:27:52:52:69:a5:89:82:44:ed:05:
22:d9:cb:12:e4:5a:a5:cd:32:ac:4b:fd:b4:7d:c0:
72:d7:58:e8:64:bc:41:0b:b4:10:0b:67:19:3b:ca:
0b:2e:18:b6:fb:01:11:43:1c:f5:b7:4c:5d:c6:e7:
55:ea:1d:84:9f:1a:73:92:19:f8:54:d6:76:a4:ca:
e6:10:21:4c:ca:b4:fb:2a:7b:72:98:24:1e:30:3d:
10:5c:cf:64:bc:f8:30:3c:87:3c:89:a4:2b:a4:76:
13:fb:35:48:a7:31:fc:6b:bb:5b:a5:28:58:cc:2e:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F0:86:A8:BF:99:85:E2:F5:FA:AB:80:5F:45:1C:C3:C7:7A:E1:55
X509v3 Authority Key Identifier:
keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:19:0b:3c:1f:ca:9f:7c:36:fe:b1:17:0a:06:f4:a8:78:
ab:f7:7f:3d:38:bd:07:26:80:ef:89:4a:49:40:27:46:79:44:
28:34:92:2f:29:d2:12:28:1c:6f:f3:01:ef:b8:72:5b:17:ec:
9a:69:87:e2:e2:a6:ec:18:4e:4e:f9:60:97:4e:d7:76:16:cd:
84:4d:82:18:76:4d:22:b7:a5:a1:8c:06:5e:59:40:76:4f:d8:
f8:39:47:4a:d9:f1:28:a5:e5:4b:2d:85:b0:64:43:5a:ae:21:
3d:e2:42:f3:b4:0b:67:8f:99:3c:05:a7:98:19:c0:df:7e:10:
ed:f6:60:b4:24:d2:51:d1:a6:dc:99:dc:1a:cb:ae:a0:3d:8b:
58:18:8b:dd:b2:11:5a:79:a4:90:c9:a6:0c:c2:f5:1d:99:b4:
9e:bf:39:37:f5:0f:5c:a2:4e:a2:55:4a:f4:1c:b8:dc:fc:22:
9c:03:09:c9:17:ed:92:be:d4:88:37:f0:00:bd:50:d9:82:79:
f8:2c:72:b9:f5:e6:68:76:90:30:19:d0:e9:82:67:55:80:52:
35:80:e9:9d:9a:91:eb:fa:88:d2:75:aa:0d:9e:4f:48:66:4c:
7a:72:f8:80:f7:83:d1:1c:35:eb:01:bf:73:90:64:34:cf:1e:
80:25:f4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:34 2025 by rpki-client