Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File: MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier: 6J+V3PFh2Hk0wHrCMBBxMmlMyykSZepHPFK5AGIxT+Y=
Subject key identifier: 10:7C:A1:00:2F:AC:07:1B:5B:D9:9E:A5:D2:E5:2D:3E:86:71:1B:6C
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 01974C68EBED4C571498954D2FB92C5E6214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number: 0B9B
Signing time: Sat 07 Jun 2025 22:00:33 +0000
Manifest this update: Sat 07 Jun 2025 22:00:33 +0000
Manifest next update: Sun 08 Jun 2025 22:00:33 +0000
Files and hashes: 1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=)
2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: 8mAvHYsm11X7fd7cW70VdUJsdViI0Z4Xg4gNm/+4VMM=)
3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=)
4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:eb:ed:4c:57:14:98:95:4d:2f:b9:2c:5e:62:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Jun 7 22:00:33 2025 GMT
Not After : Jun 8 22:00:33 2025 GMT
Subject: CN=107ca1002fac071b5bd99ea5d2e52d3e86711b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:9e:ce:05:c6:26:0d:51:5c:9d:50:0b:4f:
db:2f:55:d1:14:cf:3b:6e:99:c7:df:34:18:6b:a6:
1d:29:b9:d5:3b:f9:53:55:d0:8f:49:82:0a:77:75:
11:9a:c2:a5:70:14:d2:6f:fe:55:3e:2d:ae:d2:76:
9f:16:b2:da:52:cf:0d:ab:22:52:ee:c7:eb:16:47:
97:44:94:b5:23:2e:fa:f9:07:1c:f1:42:77:f9:aa:
22:08:2b:0a:a7:4b:ce:75:9a:c2:6c:38:51:77:e3:
c9:ac:c1:d9:9d:e4:d7:d5:d9:db:79:91:b6:28:11:
f3:8a:1f:3a:e3:83:37:38:88:90:c6:2d:cf:21:2a:
da:9c:d6:21:bb:ea:cc:b6:fe:80:11:22:16:b5:91:
4a:13:8e:fb:25:eb:9e:98:27:f3:0f:be:f7:e8:ea:
bf:59:bc:18:1f:40:fa:b1:8d:39:56:41:c1:ef:00:
2f:80:db:2a:d9:65:a0:7a:fa:71:01:38:02:70:1d:
c9:3a:da:a2:ae:64:b5:97:cd:23:52:09:35:2b:49:
26:74:c7:04:f6:48:7d:36:2a:3a:a2:01:22:ce:a9:
a7:5e:34:f7:ae:08:4f:89:dd:5c:cb:50:f7:8f:6a:
4b:06:e6:84:2a:69:5a:dd:13:d5:75:6f:dd:c8:c5:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7C:A1:00:2F:AC:07:1B:5B:D9:9E:A5:D2:E5:2D:3E:86:71:1B:6C
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:81:07:ce:b8:c3:ad:0e:fd:07:ac:63:62:81:cc:97:c7:8f:
0a:d8:9d:7a:76:c0:fd:d2:b4:0b:eb:62:e3:21:1a:7d:79:bc:
e9:41:29:97:ff:4b:ce:49:e6:d8:13:02:1e:bb:77:00:cc:62:
1a:93:27:8e:26:e0:8c:67:7d:9f:1a:ce:92:ce:48:14:8f:b8:
18:96:a9:0e:40:f3:89:89:1a:bc:25:b8:ee:fd:19:8c:69:85:
4f:e5:43:d0:5f:ca:af:21:59:5e:25:5b:93:37:a3:13:9e:85:
6d:17:55:4e:5f:5e:48:25:5a:b4:a2:68:62:5f:4f:e1:00:25:
80:00:f6:c5:27:82:c4:c9:43:68:8a:c3:f1:5e:e7:c9:8a:ce:
bb:a9:aa:c6:e0:64:d2:31:7f:cf:8d:69:89:58:ad:16:9a:a7:
77:e3:0a:5a:ab:80:e9:7b:47:f8:e7:de:47:f1:9f:17:30:df:
f3:7f:27:cf:e0:a5:5c:22:b5:aa:db:38:28:10:5d:8e:e7:e1:
3f:eb:00:65:d3:36:3d:fa:78:89:69:83:6f:29:25:f6:ba:5f:
4d:0e:24:08:84:d1:6b:1a:8c:66:85:94:07:ff:bd:d2:12:0d:
1b:64:cc:4c:43:64:19:2b:f6:dd:4c:82:70:17:c1:7e:cf:fb:
17:30:ad:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:41 2025 by rpki-client