Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
File: MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft (raw, json)
Hash identifier: Sw2/EA2hsTo6+6QEdrFg0pAUrRe98Y2HASlD2BeIoHE=
Subject key identifier: 48:C7:E2:E5:DD:56:D0:A2:B6:EB:DD:40:9A:02:86:EF:DB:8F:CD:26
Authority key identifier: 32:A3:B1:F1:B5:91:26:86:97:C1:04:4F:B9:75:84:53:9A:A7:86:85
Certificate issuer: /CN=32a3b1f1b591268697c1044fb97584539aa78685
Certificate serial: 01964D7EC4339FDBE258F4E528DAA03CEF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
Manifest number: 0FAE
Signing time: Sat 19 Apr 2025 10:01:15 +0000
Manifest this update: Sat 19 Apr 2025 10:01:15 +0000
Manifest next update: Sun 20 Apr 2025 10:01:15 +0000
Files and hashes: 1: MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl (hash: s/HJ+SdnqMC62EdUrx3y01yKtZktv/vG6f55sK8N1NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:c4:33:9f:db:e2:58:f4:e5:28:da:a0:3c:ef:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a3b1f1b591268697c1044fb97584539aa78685
Validity
Not Before: Apr 19 10:01:15 2025 GMT
Not After : Apr 20 10:01:15 2025 GMT
Subject: CN=48c7e2e5dd56d0a2b6ebdd409a0286efdb8fcd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:d4:25:fa:92:03:a2:55:de:d2:0c:94:9f:
ce:d6:28:e7:7f:76:71:7c:aa:e4:12:8b:45:34:03:
cc:52:b1:3f:0e:df:05:89:09:48:4b:67:cc:78:93:
c4:bb:c6:df:9f:5f:0d:9b:47:3e:1d:18:f6:e5:48:
df:3d:8a:e9:77:37:4b:f1:ef:79:d6:8c:79:9a:12:
da:b5:50:99:20:98:7e:94:b8:6b:5e:4e:27:94:cd:
fd:f0:1e:75:44:02:7d:4a:53:3b:17:11:bc:5e:38:
8e:0a:5e:a9:fb:93:77:8a:ef:f5:f8:df:f8:4c:91:
6c:11:1d:bd:d0:8e:43:1d:f9:d2:0f:23:02:70:a2:
2b:ea:8a:20:00:5d:02:8e:18:4a:75:90:76:93:e7:
11:cb:85:af:51:f5:0d:da:d6:88:21:ba:93:3d:de:
27:95:3f:49:ba:ad:a1:c2:8e:58:3e:f4:91:a8:66:
3a:7a:10:a5:ea:b6:ef:8e:ed:6a:af:57:69:a9:02:
f7:90:9c:6d:8a:25:da:07:e8:4e:62:0b:3f:1b:db:
56:42:95:9a:c5:72:9c:2e:d3:b7:38:40:21:ca:9f:
3b:98:37:63:0b:04:dd:bb:cd:b8:42:36:c9:e5:ae:
cf:70:5b:56:1e:df:f6:ab:83:ff:bd:d9:c3:a8:da:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C7:E2:E5:DD:56:D0:A2:B6:EB:DD:40:9A:02:86:EF:DB:8F:CD:26
X509v3 Authority Key Identifier:
keyid:32:A3:B1:F1:B5:91:26:86:97:C1:04:4F:B9:75:84:53:9A:A7:86:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqOx8bWRJoaXwQRPuXWEU5qnhoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9f944-0b7d-4729-8567-c1b9e1c312e2/1/MqOx8bWRJoaXwQRPuXWEU5qnhoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ab:c4:0c:ee:de:83:a5:a0:09:34:cc:0c:3b:b2:95:93:05:
4d:19:a6:e7:75:fc:c2:f4:b7:d2:eb:cf:66:80:81:6b:e9:b3:
67:2d:f5:a4:cd:1a:db:95:05:aa:e6:11:4a:85:8b:85:cf:92:
d5:7a:24:79:ce:3f:18:06:be:bc:88:2c:9c:3c:ff:4f:0e:67:
47:90:26:46:06:9e:1a:65:40:10:02:5f:9a:4a:ea:08:45:c9:
1f:35:5e:68:81:35:df:0c:62:bb:96:e2:4b:33:64:63:9d:79:
cf:37:31:97:29:1b:32:93:17:2b:74:86:f5:45:56:06:db:9b:
0f:b5:3d:db:64:37:1d:3e:3f:33:9d:b6:4b:ad:be:44:b9:51:
a9:99:68:e0:13:4b:84:08:83:97:2a:cd:d4:11:64:ba:4f:93:
f0:75:45:b3:69:1a:22:c3:19:53:fa:3b:73:ef:6c:8e:62:92:
6a:45:39:bb:2e:a8:09:9b:36:f7:0a:28:1f:0b:ee:75:29:41:
5c:91:40:55:02:ec:a5:ac:bb:84:ad:83:78:55:97:96:df:98:
f2:db:7c:70:d2:25:9d:cf:23:81:47:a0:22:7e:fe:37:ca:5c:
47:f8:21:57:77:75:5c:0f:1e:ec:1c:02:9a:a3:41:59:13:ad:
b1:bc:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:23 2025 by rpki-client