Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: zNVXRy9Uobd8w1G+SdhojETHVYZBvAzIscyNPEbx464=
Subject key identifier: 9D:1F:4D:19:33:12:6D:6B:57:CD:DF:BD:CA:03:DC:8A:47:83:A9:4C
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 0197398764C7FC2D0CD5A7FF037E8D078709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 0EF9
Signing time: Wed 04 Jun 2025 06:01:03 +0000
Manifest this update: Wed 04 Jun 2025 06:01:03 +0000
Manifest next update: Thu 05 Jun 2025 06:01:03 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: ZKbtBgezJj3sYw7aRNSbKwUzPrZY4yFhYT1yTuVSplw=)
2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=)
3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=)
4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:87:64:c7:fc:2d:0c:d5:a7:ff:03:7e:8d:07:87:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Jun 4 06:01:03 2025 GMT
Not After : Jun 5 06:01:03 2025 GMT
Subject: CN=9d1f4d1933126d6b57cddfbdca03dc8a4783a94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:2a:d9:18:7b:e4:9c:cc:0b:28:d1:ad:d3:
e5:73:a8:fb:b4:8a:a4:91:2e:5f:33:4b:7d:f8:95:
7e:28:ba:af:c1:eb:0c:b7:5a:69:9e:fa:9b:6d:22:
d8:09:53:1e:e3:c0:44:1e:09:fc:ba:27:20:1c:ea:
f9:7b:71:4d:2e:99:23:dc:7b:3c:fd:45:eb:17:59:
f7:b9:a1:0c:7d:ca:5f:e7:f9:b0:54:27:8b:c5:78:
80:9d:75:f5:1c:f0:90:9b:1b:b6:8a:47:51:21:e3:
36:88:d9:55:a2:f6:7b:5d:71:d5:53:1f:9f:81:d1:
af:6d:a0:91:51:9c:33:e2:8f:8c:7a:8a:cb:b1:bc:
b7:19:00:ab:d1:df:4c:15:b8:0f:8a:f4:16:e0:71:
10:5a:bd:f8:2f:4d:6e:32:22:85:84:e2:c3:84:a0:
c7:a1:1f:6b:5a:80:50:18:56:fd:3e:7b:e1:b3:97:
9a:f6:47:ad:f1:bd:8c:09:54:0e:56:45:ca:92:87:
1e:02:64:d3:f9:f3:8d:5f:0a:72:ff:21:8e:89:a3:
96:25:ae:d2:9f:08:00:bc:cd:3b:52:77:5e:ea:fe:
28:1f:3a:aa:03:31:02:23:7d:e7:ec:56:55:21:e2:
17:4d:bc:4d:fb:29:07:89:7b:91:28:a3:da:32:40:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1F:4D:19:33:12:6D:6B:57:CD:DF:BD:CA:03:DC:8A:47:83:A9:4C
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1b:4e:16:01:3b:d8:29:99:3b:1e:20:2e:45:2c:17:43:08:
2e:d2:0b:51:03:38:72:12:cc:9e:84:61:2e:3e:1d:e1:8d:85:
ee:19:a7:a7:19:68:ab:b3:5a:68:16:d2:be:c4:90:8f:15:95:
93:04:21:42:c8:e3:c0:28:2b:a4:19:9f:7e:e7:4c:6d:85:a1:
9f:59:5a:18:5b:fa:d8:82:f4:20:b5:b3:69:14:ed:58:e3:a3:
b2:2a:a3:cb:30:9a:60:f9:23:45:67:d1:a5:06:0e:b8:78:00:
7b:af:d9:0a:02:8b:72:ca:ca:00:e0:4c:2f:e4:a0:85:c4:fd:
01:5a:70:24:46:32:86:90:fc:f8:ba:af:b6:e8:f4:4c:06:6f:
47:bf:4d:3b:d1:02:56:96:07:69:f0:a2:bd:46:88:87:ff:fb:
9d:d3:a8:68:36:63:fc:35:0d:03:b8:76:9c:af:7c:c7:3e:08:
28:a0:38:7e:80:73:57:81:49:d9:65:2a:c9:29:cc:61:d4:c3:
1c:72:fc:3d:bb:5e:cd:fa:fa:0c:47:1c:30:d0:1c:ce:36:57:
e7:2c:c8:34:ea:c4:66:72:25:01:e5:b2:8e:7e:5a:0b:2a:f1:
68:36:6a:f3:7e:c9:35:92:65:b8:1b:24:c6:54:8a:60:d9:e8:
84:89:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:07:57 2025 by rpki-client