Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: ArDeEceN3fKVD4p15wCLQOPi4QzWmWdCEcouzatDKJU=
Subject key identifier: 3C:0D:6C:D5:73:EC:52:C7:90:9D:19:5A:09:10:EB:55:4C:9E:DF:4F
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 019758DAD9F32896759071F7165B721C78F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: 0141
Signing time: Tue 10 Jun 2025 08:00:26 +0000
Manifest this update: Tue 10 Jun 2025 08:00:26 +0000
Manifest next update: Wed 11 Jun 2025 08:00:26 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: lXU6ZppujVYGMxz264PX99XcFhPq/fW9U9hwUboRy8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:d9:f3:28:96:75:90:71:f7:16:5b:72:1c:78:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: Jun 10 08:00:26 2025 GMT
Not After : Jun 11 08:00:26 2025 GMT
Subject: CN=3c0d6cd573ec52c7909d195a0910eb554c9edf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:aa:a1:c8:b6:aa:7d:99:cf:91:80:68:48:
34:38:5f:e4:7d:16:dd:ea:72:9e:2e:48:c7:ee:02:
bf:e8:02:45:79:27:8f:56:3b:e4:d8:3e:d0:28:ed:
21:7e:39:60:bb:71:e7:0c:ab:b4:f5:05:51:e5:33:
85:2f:f5:16:28:51:93:d8:a2:19:1e:8e:84:87:0e:
25:66:f1:43:3b:c0:01:98:c6:fb:c7:0e:0a:5f:38:
0a:36:a4:18:18:97:a5:23:41:f7:00:91:8f:32:1e:
1b:2f:35:2a:da:64:52:3d:1c:15:98:39:17:7e:a6:
9a:2a:1f:01:aa:64:0f:73:fe:83:fc:a0:a5:b0:e1:
e7:82:72:4b:2a:e9:3f:08:5e:c1:79:ce:8d:6d:3d:
e9:3e:e4:f6:64:2f:e1:f6:94:f9:7d:69:87:6c:12:
fd:40:88:87:cc:ea:71:be:70:34:f8:92:c4:ea:3e:
02:08:8b:24:64:4f:b7:a3:5c:e7:79:92:9d:ac:16:
2f:c9:b5:84:e9:fe:b0:b3:37:e2:c2:d2:3d:46:46:
0e:6d:ee:cc:cf:54:64:0a:08:ed:71:89:95:81:df:
72:45:04:fe:dd:b1:1c:16:29:2d:52:b5:68:ff:c5:
32:4d:0e:af:02:21:13:5c:dc:24:33:b0:84:8d:e7:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0D:6C:D5:73:EC:52:C7:90:9D:19:5A:09:10:EB:55:4C:9E:DF:4F
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e6:c0:55:98:ee:cc:88:c5:93:52:21:94:1d:2b:59:fe:ef:
5e:1a:fa:ec:4f:50:c2:31:0f:4d:d6:78:0a:f9:d2:c1:10:a5:
c8:64:90:db:38:e8:ad:d7:42:a2:fd:7f:0b:50:8d:1a:52:6e:
53:08:90:60:40:66:0a:01:64:78:61:e9:13:c8:33:f7:df:08:
cd:01:37:75:a7:9a:ce:6a:1f:92:63:75:f3:05:dd:80:58:81:
c5:e8:db:42:bf:d3:85:3c:4d:ce:19:28:0f:92:a7:95:8c:8c:
7a:a6:82:49:be:e8:49:c6:ed:30:5f:b9:d7:61:f4:c7:4b:f1:
03:e9:68:1c:41:5d:4c:00:4e:a7:52:57:69:17:31:fa:5e:eb:
aa:e9:07:8d:f9:fa:b1:e4:08:39:5c:59:38:d2:af:f1:61:f7:
35:98:16:54:c2:a8:94:d2:7e:b6:e0:46:f5:7d:cf:98:7e:36:
bf:56:b3:d2:32:57:a5:54:b6:5c:32:b2:28:84:9b:2b:fc:f8:
82:61:47:93:00:40:fb:17:2d:bf:3b:09:2f:17:a8:54:59:35:
e1:b7:01:c2:84:47:f3:6d:b3:bd:37:47:7f:93:83:13:56:dd:
b2:be:76:5e:48:25:cf:ac:3e:9f:c2:4e:9b:cb:48:ee:75:1f:
60:89:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:21:12 2025 by rpki-client