Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: cmGmAWbJr0tz45ZWJeeglyfYXReiv7j++sgDJymCWnI=
Subject key identifier: 56:7E:6F:9A:E1:B9:EC:D2:87:39:E5:C2:27:AF:B4:F2:DE:AC:27:B7
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 01975FB9A636F7604B101FD246BCE7F40F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 16:01:31 +0000
Manifest this update: Wed 11 Jun 2025 16:01:31 +0000
Manifest next update: Thu 12 Jun 2025 16:01:31 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: i7OtcmDuYka3BBEEF1fOTKJDqN4DMoE1p7xhAg8iYDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b9:a6:36:f7:60:4b:10:1f:d2:46:bc:e7:f4:0f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Jun 11 16:01:31 2025 GMT
Not After : Jun 12 16:01:31 2025 GMT
Subject: CN=567e6f9ae1b9ecd28739e5c227afb4f2deac27b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:26:c6:ef:64:53:9c:be:af:60:4d:85:22:
53:bd:c1:f7:17:ce:f2:dc:bd:c6:93:91:f1:22:d1:
29:ff:b9:80:c2:6e:c1:08:9f:e0:ee:5a:44:29:d4:
62:53:c5:50:2e:58:d7:74:47:ae:0e:e0:91:42:b1:
c7:a7:9d:e3:ac:f4:43:26:3f:28:8f:ae:de:40:f4:
34:1a:92:eb:3a:b0:44:bd:87:c9:23:c9:fc:3d:d1:
2e:55:84:c0:64:fd:41:00:bd:cd:93:a1:34:ca:12:
ee:62:9c:a0:1a:0b:c0:12:37:05:0c:00:73:1d:a5:
b9:38:9c:f3:6c:cc:98:f8:5f:b3:dc:70:4e:97:f5:
72:26:54:f0:7e:5a:f7:43:8b:b2:a7:55:a6:39:94:
01:64:36:fc:02:d8:49:37:fc:df:b4:cc:78:6c:c7:
c0:8f:c8:27:4f:79:5e:a3:91:bf:5e:c9:4b:54:28:
6a:12:0d:0f:0e:37:9a:b5:7b:c9:ba:73:e0:3a:8e:
71:b4:a0:70:19:d6:b7:e3:ba:7a:d7:e3:bd:2a:24:
b2:69:55:b0:ab:21:7d:0a:bb:7c:c4:48:55:09:5b:
7a:04:c5:93:6f:bc:93:f9:ab:b3:f3:83:8d:5a:c1:
61:c2:cd:f3:96:cd:5f:89:48:b8:aa:86:aa:0b:f4:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7E:6F:9A:E1:B9:EC:D2:87:39:E5:C2:27:AF:B4:F2:DE:AC:27:B7
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:18:59:5b:97:2f:61:da:6d:9d:dc:7e:0a:e8:ce:76:e0:28:
9c:1c:85:4e:74:78:ca:5c:0b:95:e0:fc:36:01:e5:23:c3:5f:
cd:c6:e8:6f:a3:6e:a9:e8:ee:54:e1:13:5d:09:6f:1a:e1:e9:
94:e5:bb:71:78:97:0a:20:7e:a3:00:dd:8a:03:03:f5:c4:46:
07:ae:06:16:01:f9:98:d1:44:05:be:bd:11:ee:b6:4e:6e:8a:
f9:d5:80:5b:f4:8a:08:1a:d3:f8:4c:4f:77:f8:95:c8:6f:b0:
7a:c0:90:b3:3d:d6:cd:47:14:6d:b1:99:f0:ff:48:89:ea:1a:
82:df:d0:58:0e:13:66:a2:8d:d7:a5:7f:3b:63:a2:0c:fd:8a:
20:ba:35:78:0c:d5:ef:3c:99:73:75:65:5f:32:aa:e3:1c:e9:
42:ee:1f:1a:cd:ef:22:a3:64:2a:8b:a4:54:bc:f9:d9:85:72:
12:84:ad:e8:56:b5:e8:b4:9f:e3:67:7b:88:0e:cc:d9:b1:28:
7e:3a:6a:e6:13:64:17:85:9d:42:80:f9:db:b1:92:12:e8:99:
79:98:91:c7:57:e9:82:f2:46:b7:4a:f4:d2:32:51:82:a4:6f:
e6:da:ed:4f:41:b1:a3:75:fc:27:28:8a:0a:55:9f:ef:54:2a:
a7:fc:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:28:59 2025 by rpki-client