Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: g7/Tgt/mZPLC+0oxior5h3wIegbQfpcFauhi/0TNNK0=
Subject key identifier: 33:03:1A:88:DB:AC:CF:E4:BA:F2:3A:60:14:2F:DC:35:EE:7D:78:04
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 019761A7BB111F063826FF24C39CCC0DC385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 01:01:11 +0000
Manifest this update: Thu 12 Jun 2025 01:01:11 +0000
Manifest next update: Fri 13 Jun 2025 01:01:11 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: r++2DXYMK5chgBgf3eFxOePEUGWi8XVn/72J9SkoThs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a7:bb:11:1f:06:38:26:ff:24:c3:9c:cc:0d:c3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Jun 12 01:01:11 2025 GMT
Not After : Jun 13 01:01:11 2025 GMT
Subject: CN=33031a88dbaccfe4baf23a60142fdc35ee7d7804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:48:31:4a:92:2c:ad:c5:3b:53:a0:e0:4a:
8f:d2:a3:6b:3b:4a:34:9f:00:ac:dd:6d:90:ea:03:
7b:cc:18:a6:4e:7c:8e:d1:18:e2:2f:d3:59:1e:06:
52:d4:65:97:b2:5f:5e:0d:a7:45:c1:ae:e2:b0:90:
e0:a3:5e:ed:41:81:d4:2d:b6:46:92:9c:5b:d9:75:
0f:be:1b:d0:d3:3c:83:9e:f8:7f:4c:41:70:e8:a1:
2d:ff:47:ae:31:5b:39:a7:cc:6a:d6:a1:37:30:ea:
51:8d:b6:5b:a5:91:35:ab:80:35:e4:b0:dd:c9:82:
40:c3:ed:d3:59:45:f7:6a:be:b7:65:b0:9c:79:66:
e0:99:2d:f5:53:5d:de:ba:30:4e:09:0e:ca:b7:85:
f6:30:7a:a0:59:4c:9d:73:37:8b:c6:9e:85:ff:f0:
07:ec:a6:5d:50:eb:fe:83:bb:30:44:97:df:81:b6:
55:a8:f1:5b:c7:7d:32:34:25:3c:95:89:9b:c0:2d:
26:13:74:50:df:84:d1:8b:75:34:db:56:b1:5e:ec:
64:b2:41:c2:03:e9:4d:db:d2:07:90:10:29:f0:f5:
91:25:08:ff:94:6b:40:af:e8:c3:86:97:03:38:98:
73:33:a8:02:5f:11:08:b1:86:df:05:51:83:b7:8f:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:1A:88:DB:AC:CF:E4:BA:F2:3A:60:14:2F:DC:35:EE:7D:78:04
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ea:3b:6d:e6:9f:13:39:15:17:e7:04:7f:94:da:76:f4:18:
f0:a6:e1:74:1c:b2:92:0c:14:0e:cd:ec:8a:70:83:ac:0d:41:
87:a2:61:7f:6b:33:fb:d5:78:72:dc:76:98:2e:9f:b5:41:8f:
31:2f:2c:a6:86:63:bf:c2:3b:ce:66:c6:c3:2f:b4:85:cd:a2:
be:3d:67:23:98:9c:aa:dc:02:1c:08:8b:11:cb:15:50:47:83:
13:b5:67:f2:43:21:2a:74:a1:4a:44:ef:4d:af:b1:5a:6f:db:
14:09:0b:8a:d9:fe:6d:7b:d8:5f:0c:c6:41:e3:3e:07:f9:66:
1c:6a:10:c0:b7:e0:3d:9a:f1:c1:21:56:c0:a4:20:cb:b7:86:
a3:63:a3:62:35:27:df:4a:21:06:eb:6e:64:6e:f6:60:52:c8:
f6:2a:31:ce:0d:59:d0:b3:d1:61:88:fe:01:88:d5:b8:5c:eb:
18:be:5e:a5:86:dc:cb:4a:e7:f3:b4:44:61:d2:0d:2b:44:c6:
f1:9a:ef:18:71:f5:cc:c6:6b:ac:e0:7f:64:1b:69:a7:48:ea:
78:72:65:65:cb:5c:e1:2f:9b:cc:06:1a:7b:ac:58:b6:ae:94:
00:e8:a8:25:a3:05:cb:c3:78:fb:09:9c:2c:90:72:aa:42:c8:
d6:73:30:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:15:23 2025 by rpki-client