Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: smeJ95c40SLhE/jDNnLxm+9dcCzxETDVdpErpXznpkY=
Subject key identifier: 9F:EA:F6:DC:F1:C0:18:96:4A:04:04:0B:B1:9C:25:CA:28:6E:F4:D0
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 01974D7BE77F0E84BFC5549DBB6F27FB040A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 12AE
Signing time: Sun 08 Jun 2025 03:00:55 +0000
Manifest this update: Sun 08 Jun 2025 03:00:55 +0000
Manifest next update: Mon 09 Jun 2025 03:00:55 +0000
Files and hashes: 1: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: 8UU/iyvpF5y+WckIO/8Brkr+U629qVZnQADzfBcAqP8=)
2: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=)
3: zmcBckUxuKaBoSS2-IE8qAAieFk.roa (hash: zuTF25+EetsvafVF215FiE6HAdQFZXfOVRgob3VxMdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:e7:7f:0e:84:bf:c5:54:9d:bb:6f:27:fb:04:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Jun 8 03:00:55 2025 GMT
Not After : Jun 9 03:00:55 2025 GMT
Subject: CN=9feaf6dcf1c018964a04040bb19c25ca286ef4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:08:7c:ce:18:36:5f:e2:20:ec:05:79:b3:
9e:65:52:a1:b9:e3:73:cc:1b:cb:f3:e3:99:17:0c:
3a:03:b3:1f:e6:91:cf:5e:4d:a6:1f:8f:40:d3:cd:
05:f7:06:33:fa:fe:0c:d1:fd:52:f2:13:38:61:d1:
f4:94:69:a9:f5:2b:af:4d:d9:17:9f:d7:10:d9:14:
df:06:d0:a8:73:07:0d:1e:53:d9:04:ce:08:0d:b9:
bd:7c:cf:70:39:fe:d6:97:84:cb:8e:8e:0e:39:73:
43:29:38:ac:1b:03:73:55:a2:65:13:80:e2:b5:14:
7e:7d:d5:6d:5e:4e:02:58:57:7d:87:d6:4c:83:93:
e7:ef:74:10:e1:66:ca:d6:a6:2d:1a:ae:55:c8:22:
6f:5d:8b:8b:2e:6c:34:e6:53:cf:8b:41:ae:f1:c5:
0f:ee:42:93:9a:51:b9:34:b1:9a:f9:bd:17:d4:c9:
70:7e:e7:47:c7:94:ff:4e:06:d3:c8:9b:9c:e8:af:
42:cb:a4:7b:37:02:89:13:e6:86:cc:84:9a:e0:67:
48:c6:bb:41:ba:ed:9f:22:f1:a1:cb:2f:8c:1c:6b:
7c:45:c5:8a:fa:b5:17:43:1a:86:aa:c7:c5:33:4e:
35:76:43:b2:d3:07:c2:68:78:b8:a1:50:fa:ad:99:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:F6:DC:F1:C0:18:96:4A:04:04:0B:B1:9C:25:CA:28:6E:F4:D0
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:87:3d:f6:57:f8:1a:cd:89:e1:e3:1e:53:7b:18:df:7a:66:
29:9c:58:24:52:d9:d9:32:75:54:3b:f3:36:15:f8:53:50:8e:
90:df:9b:a4:2e:a6:fe:3e:6b:8f:49:00:dd:bb:c1:73:c0:be:
94:00:61:6f:4e:6e:f4:25:c8:4e:73:e7:40:b8:ca:35:ac:a1:
d7:a6:99:b0:0e:98:21:08:d6:04:f3:93:f7:c3:16:8c:db:cd:
b2:a5:64:3b:ff:ff:77:0c:85:66:23:5c:91:ac:3b:fd:eb:4f:
68:94:f1:70:46:11:f6:a8:d9:4b:01:93:47:30:a7:6a:60:c7:
cc:05:68:95:31:c2:99:78:44:fb:9d:0f:f3:fd:49:dc:de:7e:
26:cf:c7:1f:33:91:bf:a8:e6:33:00:6b:86:da:02:99:66:c5:
eb:c7:4b:1f:30:36:b0:59:e5:bf:76:1a:63:81:f8:66:60:27:
0d:da:38:59:f3:77:13:78:b2:1e:8c:e7:2f:81:a2:52:68:66:
b3:99:be:8a:b0:8d:65:d2:4e:3b:6f:bb:92:da:97:8f:95:f0:
7a:f9:cf:cf:0f:3b:2f:dd:dd:70:b4:5c:3b:a7:58:11:03:79:
13:60:fd:ed:e7:d5:e0:9f:02:9a:b2:d8:3d:b2:e2:5e:8e:3e:
91:cf:a4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:24 2025 by rpki-client