
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
File: MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json)
Hash identifier: xkbl9NpSYWWUJpfMga+Xyoa7hg+PpWz65/HpJuTbihY=
Subject key identifier: 53:9D:10:A4:23:15:0A:47:F1:66:60:7D:0B:78:B9:16:98:77:5F:06
Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Certificate issuer: /CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Certificate serial: 019750463864799162B884DF6AB7F11049BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
Manifest number: 04EA
Signing time: Sun 08 Jun 2025 16:01:08 +0000
Manifest this update: Sun 08 Jun 2025 16:01:08 +0000
Manifest next update: Mon 09 Jun 2025 16:01:08 +0000
Files and hashes: 1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: pOgxVXTE5ntBhYqh17xKnXw9RYeT3kzpIPbi6otDOcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:38:64:79:91:62:b8:84:df:6a:b7:f1:10:49:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Validity
Not Before: Jun 8 16:01:08 2025 GMT
Not After : Jun 9 16:01:08 2025 GMT
Subject: CN=539d10a423150a47f166607d0b78b91698775f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:7a:da:56:98:fb:d0:7d:19:11:32:c9:69:
7d:1b:07:6b:bc:6e:45:55:ab:7d:cc:b8:d0:96:24:
d7:22:e6:1d:68:ae:e3:96:e7:07:1f:bf:87:c0:e5:
f4:a8:08:43:40:8a:41:70:04:61:4f:74:0c:fc:e8:
cd:d6:9f:bc:ea:89:3f:51:cc:9e:18:d6:9c:24:2f:
fb:5f:40:2f:a8:73:c1:e8:93:c7:51:0d:f7:60:06:
1a:04:ed:18:58:a5:ca:49:b9:08:2c:b1:e3:ef:19:
4e:59:1f:a3:47:2a:8c:f0:63:95:fa:79:59:70:70:
3b:be:2f:3f:9e:d0:04:f4:98:76:33:7c:27:b3:60:
bf:e9:9c:2e:ab:6e:11:0d:fb:f9:5a:ba:f0:c5:dc:
9a:01:13:d6:c4:61:0c:42:4c:d3:83:f9:9f:38:7e:
62:27:68:c0:28:e9:05:14:ef:6a:36:ae:94:5f:ff:
35:d6:67:13:0d:2f:87:bd:5f:57:68:5c:24:bc:95:
af:97:ff:f3:4f:46:43:80:ab:07:d1:36:1e:04:cf:
e3:6e:00:f2:cf:0e:d2:de:65:76:00:a8:ef:1a:8f:
8c:6b:47:3f:64:b7:44:66:b4:c1:af:7c:91:dd:48:
50:89:15:1b:38:1c:07:c5:b7:2f:a2:26:c7:12:a2:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:10:A4:23:15:0A:47:F1:66:60:7D:0B:78:B9:16:98:77:5F:06
X509v3 Authority Key Identifier:
keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ca:7e:1b:bc:20:78:fd:3d:91:99:99:c1:8b:90:58:51:ab:
f2:29:52:b5:5c:22:f4:13:b9:c9:38:88:4f:48:5d:f5:b5:26:
cf:d5:68:56:25:70:87:fd:53:77:d7:b6:d1:8f:be:d9:b4:78:
33:c6:8a:10:1c:a3:1e:02:20:f4:61:c6:7c:5d:42:31:db:39:
59:e6:75:4c:5b:f0:b1:01:0b:8d:a2:c5:c5:95:fc:51:bf:13:
08:8a:12:6e:54:f3:e7:df:60:4c:28:54:76:54:de:fd:f6:0b:
e1:c3:53:95:f7:db:d5:ac:84:a8:02:d0:34:19:c6:f0:59:93:
11:b6:1a:1f:11:08:57:44:2b:bc:40:b5:f0:02:7b:89:77:66:
dc:fa:70:48:00:c6:78:91:72:c7:36:bf:73:0c:f3:8f:78:3f:
be:4f:8b:59:2a:ff:c5:22:25:9f:23:91:19:28:4a:d9:85:90:
81:ea:34:61:06:53:50:1c:56:83:ae:5f:89:73:11:bb:1b:c5:
43:8a:a3:92:a7:b8:51:7c:19:6a:6c:59:d2:08:22:45:4c:bf:
95:96:a3:87:fe:0b:dd:2c:ff:67:f1:9e:69:81:52:b8:97:27:
6a:3b:ba:af:4a:ad:55:0d:ed:80:8b:5e:e3:64:5d:f6:79:7f:
cc:b9:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:52:56 2025 by rpki-client