Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: PWz8FwQcT3jS8ELXgYs8/8bAIB8IYWL6pmPtWDEiNUA=
Subject key identifier: 85:FB:CB:13:20:0A:5E:93:92:7E:28:1E:76:CF:AE:39:53:93:BE:70
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 01975BDCE13364708DA890CE409318F077AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 22:01:31 +0000
Manifest this update: Tue 10 Jun 2025 22:01:31 +0000
Manifest next update: Wed 11 Jun 2025 22:01:31 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: mfUgDjxasOwsuO5BBCOzbhuX7KxKLNgOFt0Uk7qhJJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:e1:33:64:70:8d:a8:90:ce:40:93:18:f0:77:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Jun 10 22:01:31 2025 GMT
Not After : Jun 11 22:01:31 2025 GMT
Subject: CN=85fbcb13200a5e93927e281e76cfae395393be70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:6c:d2:9f:d4:e3:9e:94:59:d2:57:e7:9c:
30:e6:5f:ad:29:4b:55:7d:16:3c:d3:fb:e9:2a:4b:
7a:b1:05:e1:f0:55:bf:06:7e:97:a8:9f:25:5f:28:
bd:27:7a:80:bd:31:1b:7d:af:95:27:05:d2:7a:fe:
e8:42:ad:28:e6:1b:ea:cb:46:f7:82:0f:e7:4d:26:
a6:d5:3b:1b:d8:00:36:6e:5a:d1:19:67:98:a1:8f:
6f:b7:ad:e1:26:8b:65:d1:04:b6:37:c4:6b:a9:f6:
44:da:d7:95:84:1f:25:03:6d:8d:f3:81:e7:94:81:
8c:6a:0f:e7:2b:e5:31:58:70:7a:19:8f:96:99:4b:
d6:68:b1:99:8a:dc:8b:bb:01:c0:f2:d3:62:23:38:
f9:bf:65:b2:f7:c0:4f:27:60:d9:94:b2:d3:e3:5d:
6b:1c:55:b6:4b:77:c0:8d:59:f1:72:e8:44:27:71:
d4:4d:a5:b7:8e:df:1a:1a:df:22:fb:88:64:60:59:
67:9a:d1:a6:c6:d8:09:79:8c:a7:ef:bc:cc:35:4c:
6d:54:4e:79:01:8c:02:9a:00:81:1d:db:38:47:3c:
f1:a1:d2:30:23:a7:b5:a8:ea:51:11:4c:4c:4c:93:
fc:b7:77:83:9e:dc:f5:bd:e9:50:08:72:9a:ed:be:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FB:CB:13:20:0A:5E:93:92:7E:28:1E:76:CF:AE:39:53:93:BE:70
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7f:70:36:a3:77:71:f1:d7:0f:7b:c0:be:65:db:b6:63:de:
f3:ac:8d:ad:e0:85:2f:38:71:37:54:ce:aa:1c:2a:ef:97:29:
f8:ae:77:f6:bd:f5:04:fc:4f:87:36:fe:5e:0d:7d:23:61:50:
99:86:af:1b:84:64:db:85:09:07:77:49:e5:dc:25:b2:9e:d3:
e6:2e:60:21:ee:52:0a:1d:d6:43:e2:7e:9c:8c:e4:85:a8:e1:
18:4d:0e:dc:2f:0b:0b:6b:50:b4:94:bb:13:48:87:55:36:aa:
f0:ba:f4:32:01:dc:5d:7f:c3:2a:fd:cf:69:92:15:2d:a5:3b:
6b:f5:4a:54:9c:b6:d1:a7:09:87:c7:bc:e8:34:f1:9c:a6:94:
4c:27:c5:37:e0:e1:4a:19:c5:8d:11:e8:a5:86:22:04:ee:ce:
37:ad:43:57:40:19:27:d2:61:59:6b:e7:0a:fb:cc:da:15:c0:
45:65:5f:3d:42:29:cd:a5:ce:1b:0d:95:56:76:40:b1:4b:72:
1f:93:e4:9e:7c:33:28:ee:91:0f:16:de:ea:2d:c1:19:04:08:
61:9a:01:fc:c6:54:d7:b9:96:7f:40:c0:5f:12:fe:9c:c9:49:
a7:9d:df:e5:b4:dc:9d:c4:4a:bc:f3:72:c7:42:71:92:99:71:
e5:9e:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:40:55 2025 by rpki-client