Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: 6AfbGPSeCd5YOI9f9SZh1k7s4Ri4XEB19/SePrJG98M=
Subject key identifier: 26:AC:CD:D7:D8:64:D5:1B:3B:12:45:E0:9E:63:FA:55:B5:B5:28:B4
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 019747E7A6B1A517F6C617097CA43C08362B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 01:00:53 +0000
Manifest this update: Sat 07 Jun 2025 01:00:53 +0000
Manifest next update: Sun 08 Jun 2025 01:00:53 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: iJ+AksFQVFr1SnqspLUFPFih7orQsiZuInHuq7V8qQ4=)
2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:a6:b1:a5:17:f6:c6:17:09:7c:a4:3c:08:36:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Jun 7 01:00:53 2025 GMT
Not After : Jun 8 01:00:53 2025 GMT
Subject: CN=26accdd7d864d51b3b1245e09e63fa55b5b528b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:82:03:f7:fd:fe:41:bd:ad:1b:81:be:2f:
e0:a7:86:95:36:15:e9:5e:56:3c:63:a9:a6:f5:3c:
88:c4:21:c0:20:b5:09:e3:6a:c2:fa:17:cc:97:43:
1d:63:b0:de:cd:b6:03:e2:b0:ae:56:35:9b:e5:76:
7f:b5:3b:9d:63:8e:78:6d:9b:a9:88:b8:d3:a8:9d:
06:a8:3b:84:37:b4:39:a6:f6:ac:ea:11:3d:88:2c:
4a:13:4a:6a:7e:bb:94:2c:4d:60:a8:58:fc:be:c8:
ca:29:cd:2d:d4:32:0c:e7:ed:8c:75:cd:8a:ba:16:
2e:93:bf:fb:45:07:db:a1:7f:2e:44:33:11:52:16:
59:09:74:2e:40:b5:87:6d:e9:e2:47:f0:18:99:05:
e7:d2:63:bb:12:22:49:82:da:ce:e3:fb:97:3c:2b:
15:f6:ac:bb:82:2e:5b:b7:60:2e:9e:7d:1d:31:74:
8b:b5:7c:1b:69:b0:ba:63:91:77:83:ac:f5:cb:de:
a2:08:a1:2e:f0:94:ef:c1:35:42:2b:ef:b1:e8:47:
10:78:0b:c1:b3:77:a7:f7:1d:ee:60:d8:41:ad:7f:
75:ec:a6:fc:a3:23:3e:e6:37:42:0d:bc:85:57:ee:
13:2e:84:d8:22:8c:48:07:95:61:df:29:9f:83:f8:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AC:CD:D7:D8:64:D5:1B:3B:12:45:E0:9E:63:FA:55:B5:B5:28:B4
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f4:83:f7:98:18:75:df:5e:24:23:11:a7:31:b7:68:3b:8f:
1a:b5:3b:6a:d9:e3:e9:0c:c9:65:e4:77:71:15:ce:b9:72:cd:
00:cc:84:ed:b6:77:03:0d:72:c8:14:6e:07:a1:e8:64:83:38:
a4:ca:c2:7e:bb:98:80:18:ab:2d:fe:c1:72:4b:85:66:54:7b:
4d:26:a0:66:b9:b2:56:53:e2:19:05:91:08:6e:90:05:2d:9e:
66:7f:38:dc:d0:b8:83:9e:1f:2a:df:86:a6:da:d4:23:95:46:
74:d4:3d:73:b7:be:6c:26:b5:c3:c1:5c:d0:10:c5:f1:60:e3:
14:7a:bd:61:2b:b7:f4:dc:3e:32:b8:4b:bb:70:e3:d0:0e:86:
d0:1d:ed:5f:f2:92:9f:18:08:d3:d2:37:85:a0:68:66:4f:03:
2d:22:ec:89:b3:e0:31:6e:39:ab:c7:1d:4a:a2:f0:da:d7:6b:
08:40:04:b4:c4:c9:46:e9:0d:17:1a:8d:71:31:83:01:9d:10:
cf:ce:5b:90:e4:4c:75:f0:5e:04:3a:5b:f4:7c:93:a5:5b:88:
08:d8:a6:4e:41:b2:c4:12:05:99:fe:b2:2c:9e:91:98:a1:4d:
4a:67:7b:30:a1:70:23:0e:ac:94:2e:28:ae:8a:3c:18:70:ee:
7d:f2:21:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:28 2025 by rpki-client