Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier: h3TMIbPT40gcY/gaYxS6bVxUJsh2lVnIl2eVzizTl1c=
Subject key identifier: 91:70:99:8D:23:76:C4:82:02:B2:AE:02:21:01:60:ED:86:FC:49:A5
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial: 01965011C2862DB0F4023C81C6E3F73FF70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number: 0561
Signing time: Sat 19 Apr 2025 22:01:03 +0000
Manifest this update: Sat 19 Apr 2025 22:01:03 +0000
Manifest next update: Sun 20 Apr 2025 22:01:03 +0000
Files and hashes: 1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: sKmUpk8ag7o9b+wIFE7JaLaYawtFSyPLDLSMutmf948=)
2: gVZpy_aU2P0Pr-2EJHA1HwKJhRU.roa (hash: P5u1LpZGGtQaGv/FeFmSXhXnEGgm7B33JQ+aoyUNOOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:c2:86:2d:b0:f4:02:3c:81:c6:e3:f7:3f:f7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Validity
Not Before: Apr 19 22:01:03 2025 GMT
Not After : Apr 20 22:01:03 2025 GMT
Subject: CN=9170998d2376c48202b2ae02210160ed86fc49a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:16:4e:ef:77:02:62:0c:10:46:9c:b0:10:
6e:c1:7d:9f:fb:6f:67:4c:94:6a:55:7e:bb:b8:da:
ba:06:00:ff:ab:de:4e:23:2d:5c:85:0c:9a:40:cd:
0f:92:e2:5c:76:38:f9:48:e1:dd:cf:3b:dd:72:9b:
46:71:b4:4b:7f:13:5a:60:12:30:43:3b:57:97:8e:
8c:95:58:16:77:f9:f6:02:8c:80:9d:c9:cb:fa:55:
b7:8e:7f:8f:eb:63:a0:3a:73:e4:a2:69:3e:95:85:
c5:28:82:9b:42:3c:1b:e7:99:90:be:86:40:41:9f:
32:30:18:61:0b:67:15:29:19:cf:f4:ff:53:f8:bc:
3b:72:9b:b0:f4:ea:78:3d:49:5e:88:9e:55:60:23:
cc:33:36:4c:46:a4:4e:97:69:6d:4d:4c:54:bb:20:
11:b0:f9:57:3d:cf:9b:69:cf:ef:d4:52:74:fd:9f:
72:81:8b:a7:fb:77:3f:49:85:43:0e:94:e9:2e:00:
19:3e:c0:09:f7:6c:0d:27:7d:67:06:b9:62:23:30:
4e:2d:10:b9:b3:bb:a8:69:fb:ac:69:bf:82:47:a4:
0f:0b:78:59:89:37:df:d5:a7:3f:66:f0:25:30:d1:
fa:60:7a:e7:39:44:06:c9:f6:10:62:77:6a:23:19:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:70:99:8D:23:76:C4:82:02:B2:AE:02:21:01:60:ED:86:FC:49:A5
X509v3 Authority Key Identifier:
keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:15:1b:42:30:3d:e7:7b:b1:a2:1d:c7:2b:15:fc:7e:12:cf:
1d:a6:41:34:b3:eb:4f:cb:5c:a5:3d:08:87:17:96:f5:f9:77:
90:9f:a6:20:90:a8:c8:cd:1a:bc:a7:c9:c7:64:5e:7a:33:93:
66:c4:1f:da:8e:94:2f:51:5d:dc:9c:6f:23:c3:ed:ee:42:f4:
ed:4c:98:ba:e9:f7:1d:7b:bf:89:92:61:3f:54:09:42:da:8c:
90:8e:3d:97:a0:f0:4d:21:58:01:7a:06:db:63:f0:ad:58:77:
5e:dc:ac:53:bd:8c:02:3b:30:a3:f2:4b:b2:03:ea:84:91:99:
ce:84:16:1b:43:9b:21:48:83:63:d0:28:88:d6:81:6b:f0:8d:
65:29:6c:99:e2:54:e8:9b:4f:17:b8:c3:af:5a:6e:d0:d3:8c:
d8:5a:d1:90:5b:7e:dd:20:f1:27:87:db:3c:9a:bb:e1:5b:7d:
dd:d7:5e:85:69:d7:0a:99:86:e3:dc:9f:2d:e9:33:b4:4f:9d:
e4:da:6d:a1:c5:5f:a7:0a:1b:ce:d4:1e:4e:6c:8b:20:66:ac:
1e:70:d0:c3:73:b2:5f:d6:d4:2c:8e:be:05:84:91:76:af:26:
57:cf:fe:ec:1c:b4:cf:9c:69:41:e0:9e:c5:20:66:10:74:68:
dd:1d:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:21 2025 by rpki-client