Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
File: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json)
Hash identifier: BtTInMnwNfhePc+8nppVFaVco4G27ADAsst8QADPPzc=
Subject key identifier: 0D:0F:7F:48:89:C0:1C:06:67:DC:B5:0A:B0:03:41:B2:7A:46:72:84
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Certificate issuer: /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial: 019751C610F630D785D1C4F433BABB68B2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
Manifest number: 1439
Signing time: Sun 08 Jun 2025 23:00:24 +0000
Manifest this update: Sun 08 Jun 2025 23:00:24 +0000
Manifest next update: Mon 09 Jun 2025 23:00:24 +0000
Files and hashes: 1: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: CSjNnKPLVojdxpKGkLadfs5Cne1ouk8B2BN4BGn5LeA=)
2: l77XDKqfVAj_0QN9hL5E5zPQSwI.roa (hash: JB8S1ZVJbd9P8hIkFLEuRz8lxPAo3SSfvjCCRc2tF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:10:f6:30:d7:85:d1:c4:f4:33:ba:bb:68:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
Validity
Not Before: Jun 8 23:00:24 2025 GMT
Not After : Jun 9 23:00:24 2025 GMT
Subject: CN=0d0f7f4889c01c0667dcb50ab00341b27a467284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:55:8f:29:43:e6:67:50:e4:81:20:df:ae:
b8:98:ce:fc:49:48:d9:85:9e:07:33:6e:2f:4e:ca:
08:4f:ff:d6:20:62:93:c2:37:b2:a7:f0:25:d3:72:
f4:87:03:1b:3a:74:5d:75:03:1f:0d:a8:1f:e3:0d:
5f:c4:97:41:1b:83:36:b3:7b:59:4d:78:5c:d8:67:
20:e8:9d:03:25:43:18:44:f6:2d:28:43:c0:34:4c:
6b:17:c5:da:2d:17:ad:56:8c:e2:e4:9c:b1:e8:e6:
f1:41:06:39:33:74:e6:b4:af:fc:af:e7:d4:a2:03:
73:39:97:81:34:53:ca:d9:80:8c:23:38:ae:c2:1f:
23:bb:9e:55:e1:01:fc:fd:eb:4e:1b:3a:ae:87:45:
6b:b4:de:74:0b:f0:4c:69:70:29:8a:03:15:e4:4b:
ef:80:75:15:3e:30:e5:68:83:46:70:ad:b3:31:fa:
fa:54:46:69:9f:12:c9:85:d5:a6:8d:f9:0a:28:82:
aa:1f:92:2e:24:23:89:82:4d:fb:46:9b:2e:ec:7e:
5e:7b:39:49:8b:9f:df:7f:0f:dd:e4:c0:65:08:35:
8c:12:3c:4b:bd:6d:84:a1:1b:e0:97:b3:88:91:d3:
2c:8b:62:cd:4a:ae:dc:e9:c5:24:10:b5:0b:3b:c0:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0F:7F:48:89:C0:1C:06:67:DC:B5:0A:B0:03:41:B2:7A:46:72:84
X509v3 Authority Key Identifier:
keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ef:a7:5a:37:b1:22:1b:2d:ed:ee:48:18:97:9f:89:fb:e8:
b6:3b:5c:4e:55:a2:01:bb:4c:26:64:b9:5c:7e:74:42:28:0f:
34:9f:6d:c8:1b:81:7b:71:51:43:68:5a:20:ef:68:7e:be:e1:
28:36:f6:e4:b6:ef:ef:b8:99:cd:9b:df:87:9e:8d:58:99:0a:
99:5b:3a:48:84:41:9c:ad:ae:41:25:a3:34:1c:88:e6:9e:23:
34:27:58:5b:11:68:c6:61:b2:de:8b:a5:37:89:2e:04:a1:db:
7d:00:cd:ac:5d:76:de:ee:11:0a:5f:17:52:da:bd:0d:c8:e0:
57:fb:a4:43:46:3c:a3:0c:24:22:c4:58:5d:b6:2b:ed:b7:93:
cd:9a:58:90:e3:99:19:e0:8e:b0:c2:43:05:71:32:0a:a2:90:
77:17:2b:da:7b:29:90:9e:c2:03:70:6e:fa:c8:6f:f7:46:a4:
7b:7c:cb:4c:e7:06:a3:90:0f:97:43:e0:68:a3:f1:26:07:27:
17:70:fe:c7:a7:52:b7:31:41:c9:45:47:93:75:a8:f0:a1:e9:
ef:63:31:b0:56:1a:f4:2a:bc:f7:9a:4c:6f:71:d8:22:c9:30:
ea:3a:17:4d:73:61:4e:5b:77:6f:b3:8d:49:69:3d:9c:99:4d:
7e:1a:ec:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:26:05 2025 by rpki-client