Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
File: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json)
Hash identifier: lrB9TwrVgDedJdh/OmbYe7lkdCz9IdQ4smfYe840g9I=
Subject key identifier: 3F:D6:58:47:97:1C:74:48:9E:70:08:4E:D9:E0:1A:50:B1:AD:C6:E4
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial: 01982711127C951B7B6CD7856906BB2D3BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
Manifest number: 42
Signing time: Sun 20 Jul 2025 09:01:26 +0000
Manifest this update: Sun 20 Jul 2025 09:01:26 +0000
Manifest next update: Mon 21 Jul 2025 09:01:26 +0000
Files and hashes: 1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: //yYoALz8K2yjq6oqOGM98WVEe0vrTznEp6m5kY4P/A=)
2: oidQOFv_T3t4hgPCm6h_UreADsw.roa (hash: y9QfSR0j2NSF/2jSZyP0tv3TDh1rVPF+ZeadaUNAaYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:11:12:7c:95:1b:7b:6c:d7:85:69:06:bb:2d:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Validity
Not Before: Jul 20 09:01:26 2025 GMT
Not After : Jul 21 09:01:26 2025 GMT
Subject: CN=3fd65847971c74489e70084ed9e01a50b1adc6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:fb:68:7e:98:6b:6d:ef:af:c6:b8:c3:f1:
48:2c:cf:63:10:e1:c2:53:af:c1:4d:a1:07:ef:9e:
8b:cc:12:ef:f1:71:14:f9:27:fa:37:ae:b0:f6:fe:
8c:34:a2:28:d3:36:1e:7c:7c:f9:6a:63:73:cc:43:
56:ac:7b:59:6d:8c:ad:2a:33:0d:c8:bf:8d:46:3e:
90:87:4a:c1:d4:6d:1e:e1:33:fa:ab:f8:fc:29:65:
53:a6:86:a0:e4:50:6e:14:98:45:2a:23:ef:ef:98:
d5:ef:1a:c5:ca:3a:c6:0e:98:36:ec:ec:d9:1f:8b:
55:d9:06:bf:69:53:b9:56:06:25:b7:c6:69:51:39:
4e:43:7e:43:07:9a:29:0f:3d:a6:30:55:de:63:a9:
60:c9:42:45:be:8c:02:84:13:18:de:c3:3f:00:f5:
0b:f7:31:f0:a8:15:72:2b:f2:be:58:41:45:e2:95:
e0:ee:f9:1b:a6:a8:ae:b9:bc:5a:fe:35:47:ef:69:
b5:cf:1f:39:10:b3:8e:b8:ad:b3:e7:00:93:8a:f4:
26:b8:2f:e6:7b:a7:2c:1c:22:c5:32:2a:0a:d6:59:
c2:f5:fc:07:06:02:4b:25:ff:d7:6e:c6:c2:7d:2e:
94:74:a7:1b:4b:bf:a0:17:f1:61:9b:c4:0c:b3:85:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D6:58:47:97:1C:74:48:9E:70:08:4E:D9:E0:1A:50:B1:AD:C6:E4
X509v3 Authority Key Identifier:
keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:19:5a:c3:98:cd:bc:4e:b3:d5:9d:7d:62:1a:f5:d6:c5:39:
72:9b:27:39:57:52:74:80:c3:01:1a:dc:48:7a:96:0e:70:ad:
8b:a3:c6:06:54:3f:6a:94:4d:59:37:01:9e:5c:e9:4f:e7:f0:
df:e2:be:42:48:18:cd:42:6d:f0:f6:7f:eb:d3:69:3a:02:ff:
ea:31:a9:46:53:8d:96:5b:86:fe:cf:cc:34:49:0c:52:64:6c:
3f:36:f4:6a:fd:46:b5:e9:ca:a2:63:06:dc:03:56:df:a1:76:
f9:32:0a:62:9f:89:eb:03:4c:e1:d2:aa:20:bb:76:f1:a9:c0:
63:47:b4:65:27:4b:11:16:b8:53:aa:69:1c:89:4f:a3:07:b6:
d2:54:85:03:50:a7:a6:66:f4:0b:4c:90:6c:b8:f8:2b:29:62:
86:89:7f:69:60:24:67:e6:44:80:b1:de:8c:32:f7:68:0d:2c:
15:8e:ce:7d:c9:23:83:10:0c:82:e4:63:82:98:3f:ee:67:9e:
20:f3:63:0d:d9:1c:f4:95:8c:6e:9d:1e:5e:e1:d2:0d:18:ef:
d6:b6:df:8d:91:d9:ed:b8:1e:25:b2:5d:a0:8d:16:7a:a7:5c:
dd:41:87:82:d1:03:dd:0d:e0:41:4b:81:9b:e2:d2:bb:9f:d4:
42:fd:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:26:03 2025 by rpki-client