Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: wl7+9nJ3suVGjit50OuhD+aEx67kXMRg5mQFI2oLISs=
Subject key identifier: AD:1E:DC:50:1D:40:8E:F5:77:03:F5:32:AA:52:48:89:D2:D7:62:EF
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 019747E7DFBACED548C6ABB7D5EAAF2EEA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 04A9
Signing time: Sat 07 Jun 2025 01:01:07 +0000
Manifest this update: Sat 07 Jun 2025 01:01:07 +0000
Manifest next update: Sun 08 Jun 2025 01:01:07 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: qEd3VZR63kFXdFpr0KYDaAM5LBpSou+tS+Y+w2kvMlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:df:ba:ce:d5:48:c6:ab:b7:d5:ea:af:2e:ea:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Jun 7 01:01:07 2025 GMT
Not After : Jun 8 01:01:07 2025 GMT
Subject: CN=ad1edc501d408ef57703f532aa524889d2d762ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:4f:0a:18:44:1b:80:b2:65:43:61:41:72:
5d:b1:a3:45:f6:5d:4d:3f:3a:60:9e:2b:be:23:b2:
53:b3:9c:c3:7c:23:c5:33:b4:76:a8:73:54:52:62:
6e:aa:ab:72:ae:d3:5f:79:29:1c:70:05:08:68:69:
33:77:ad:ad:07:92:10:27:b6:15:b9:38:90:5f:25:
21:67:e8:25:54:67:91:f4:7f:8e:85:f4:03:84:ce:
30:5a:ea:37:b9:dc:47:61:6c:4f:82:22:7c:ef:6f:
50:bc:cf:7f:c8:d8:13:f0:2d:8c:55:01:8a:7b:00:
5c:9a:e7:e1:bf:66:c9:29:66:77:e8:11:a9:31:1a:
00:76:9b:ce:69:04:ec:eb:5d:e3:15:35:ce:c2:bc:
c7:65:3b:af:e8:79:62:d1:43:f7:cc:bf:75:8f:a6:
4e:8d:c1:1e:13:1d:01:e1:c3:81:84:f4:bc:6b:35:
f2:51:6c:41:53:06:fa:c0:34:66:e7:5a:04:39:48:
3c:51:e9:7f:64:39:61:6e:65:94:4f:3d:7d:e0:b3:
7c:9a:a0:e9:16:dd:2a:42:31:68:b0:f6:51:1b:a3:
5f:5c:95:80:79:4e:8c:52:d4:a6:d1:18:48:74:c4:
04:b2:65:5c:61:68:22:b3:de:96:9b:8c:b1:da:9e:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:DC:50:1D:40:8E:F5:77:03:F5:32:AA:52:48:89:D2:D7:62:EF
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:87:00:c3:bc:3c:3b:cc:90:ad:0d:30:14:57:3c:a5:ba:c1:
3d:53:a9:62:67:03:da:cd:ac:0c:fc:5e:e4:e4:88:24:d5:da:
c7:92:e8:cd:8a:09:35:2e:d3:b6:61:78:69:1b:cc:4f:0e:4f:
1a:8c:dc:cf:5c:e4:7f:eb:cc:51:51:2b:9e:57:dc:1f:ba:e6:
2b:66:e5:b1:93:74:06:6f:f7:31:f9:68:2c:00:3a:f4:f4:46:
96:16:48:f2:42:34:ec:0c:78:40:51:1f:dd:be:e7:0c:ab:b7:
af:4c:0b:99:04:16:bb:72:72:ac:39:bb:73:20:03:54:4d:d5:
0f:3b:3f:a0:8b:03:a0:08:9e:dc:59:f7:c5:f4:52:fe:f1:0f:
24:24:35:83:94:73:13:81:20:de:dd:38:e4:89:6d:60:a0:e7:
b3:f5:a5:97:7d:4d:9a:17:88:a8:4c:61:99:44:67:29:17:95:
49:12:47:50:53:0f:41:39:64:21:9c:52:5f:3a:26:1b:5c:a4:
8a:6e:ac:3e:b2:95:39:19:88:1c:53:41:87:d3:2b:90:3e:a2:
bb:16:48:9e:14:d5:ed:b3:3f:3d:b1:e8:cb:a3:f8:5d:98:04:
d8:a0:47:44:53:3b:fd:1e:b9:38:5d:26:6f:91:69:6f:f4:75:
95:de:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:33:41 2025 by rpki-client