
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
File: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json)
Hash identifier: k2PIViAqsBsJoroM4LxknZClGmzFqT8sxXXRnFtKVh8=
Subject key identifier: 3D:D6:C2:2A:D5:9E:B7:DE:E9:35:FD:53:C3:5D:3B:FE:5F:B4:2A:C5
Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
Certificate issuer: /CN=307a4415bad40b643e10bec4d282cd3072ba56da
Certificate serial: 019759EDF9A753DB2DC8894833A506A0BDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
Manifest number: 1582
Signing time: Tue 10 Jun 2025 13:00:57 +0000
Manifest this update: Tue 10 Jun 2025 13:00:57 +0000
Manifest next update: Wed 11 Jun 2025 13:00:57 +0000
Files and hashes: 1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: 6vbDmSLcHxMFVnEgxW5u6+K+HwmsMkxcbGOb+Hynl7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:f9:a7:53:db:2d:c8:89:48:33:a5:06:a0:bd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da
Validity
Not Before: Jun 10 13:00:57 2025 GMT
Not After : Jun 11 13:00:57 2025 GMT
Subject: CN=3dd6c22ad59eb7dee935fd53c35d3bfe5fb42ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:6e:ab:df:ec:76:d7:b0:95:bf:cc:d6:2a:
2c:37:f4:df:13:41:e8:5a:e3:1f:ac:7e:f4:09:40:
9d:18:37:38:44:ce:5b:55:5e:02:62:60:46:79:e9:
c6:eb:e7:62:a4:f6:86:c8:ec:82:27:99:f0:ab:cd:
d4:ff:85:2a:65:6f:67:fa:13:44:71:a3:08:6b:61:
b1:d5:53:e9:05:ec:1e:78:ec:7c:b0:68:49:6e:dd:
32:10:ce:88:7a:5e:5f:47:91:bc:4b:ae:8f:c7:5e:
6d:2b:6d:a9:38:40:48:0e:a1:a3:1b:cb:a0:6a:c5:
50:45:b9:73:0a:ca:af:f0:c5:93:c7:50:3e:91:ec:
b1:0c:48:10:09:1d:e1:6f:88:fe:57:6d:d5:98:fe:
38:be:a3:df:ae:52:2c:8b:d3:ab:a2:f8:dc:a0:87:
b5:fe:6a:2e:ec:c5:dc:81:83:0b:e5:48:5c:08:21:
a9:91:3f:1f:7f:59:02:8a:73:82:a9:6d:bf:11:d4:
b4:ab:70:97:d5:4e:53:46:4e:05:0c:01:f7:90:6c:
50:b6:4e:ce:ff:15:f0:40:1a:04:77:65:74:08:8a:
22:f4:86:68:42:2b:02:89:bd:01:24:fe:c5:d2:dc:
f8:cb:0d:3c:61:65:28:3e:26:56:66:e3:d9:cb:9e:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D6:C2:2A:D5:9E:B7:DE:E9:35:FD:53:C3:5D:3B:FE:5F:B4:2A:C5
X509v3 Authority Key Identifier:
keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6e:9d:ac:b4:3b:2a:a7:d4:9d:61:66:e6:3d:6e:cb:d0:30:
88:1f:a6:b3:67:70:f4:93:48:a9:26:1e:74:f3:5b:b7:5c:da:
06:77:97:ed:84:02:38:d8:2a:b7:cd:3d:17:b3:5c:15:77:c5:
1b:19:2c:50:41:60:bd:0f:ed:ba:d1:aa:df:d6:9a:06:b1:94:
87:f8:e9:2f:32:72:4f:88:2e:34:55:f7:95:87:16:60:6f:06:
a3:48:b5:62:33:28:3f:98:78:78:ec:76:55:3f:54:a4:de:9e:
8d:8e:23:b8:33:e8:0d:3d:1d:85:60:a7:8b:02:fe:8d:3c:90:
3b:cb:93:43:b6:b9:62:68:a7:a9:f3:95:98:5a:a5:d7:8d:2a:
cc:5f:69:5d:74:7b:6b:90:3f:1d:e9:45:b5:2b:83:d8:19:fd:
b8:68:7e:97:f3:c0:23:ba:f8:74:8d:ac:8e:f4:7c:bf:d7:99:
52:af:fa:79:dd:68:90:25:7e:e0:85:f3:a5:1e:f7:c1:f3:cf:
ff:56:27:3b:bc:3c:5e:43:6f:b0:71:c4:2a:f9:4e:aa:65:f6:
51:b1:a9:8a:fa:62:23:4c:89:6f:1f:47:c5:aa:b9:8a:7f:23:
3f:bc:f1:57:a1:ab:44:a5:ab:a5:f5:75:46:39:35:62:c7:56:
df:e3:7c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:50:01 2025 by rpki-client