Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: nnF0c2sO9GRQ6u8W8ZfpFGM9s7coMcLdtME0adJwsLs=
Subject key identifier: 9C:25:68:DA:CE:FE:76:DC:35:D1:88:F1:AC:81:B1:43:A8:99:13:A5
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 01974C693A9698D4B45065818321FA57A559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 0B7F
Signing time: Sat 07 Jun 2025 22:00:54 +0000
Manifest this update: Sat 07 Jun 2025 22:00:54 +0000
Manifest next update: Sun 08 Jun 2025 22:00:54 +0000
Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: Kd0aWnXaPJT3aajRrXYxNsz0pm3MfRWSpKU56MTwGwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:3a:96:98:d4:b4:50:65:81:83:21:fa:57:a5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Jun 7 22:00:54 2025 GMT
Not After : Jun 8 22:00:54 2025 GMT
Subject: CN=9c2568dacefe76dc35d188f1ac81b143a89913a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:3a:70:e7:6a:20:53:b8:53:b0:4a:d4:a2:
91:bf:35:c3:56:92:27:3b:a3:6a:6b:44:4a:33:ef:
fd:e0:a1:ba:e5:75:93:c2:a6:ff:9a:3e:8a:b1:cd:
d7:6a:cd:4d:bb:c4:12:5a:fa:d2:86:9f:a3:23:b1:
dd:77:05:b4:0c:ee:57:8c:92:1c:72:aa:93:20:82:
52:72:6f:92:e8:fe:0f:7c:1c:49:96:c9:82:e5:bb:
59:83:ee:c7:10:fc:bf:6d:1c:d6:cd:58:0a:ab:c8:
5e:cb:6a:b2:80:f6:86:5f:d8:e1:04:f1:85:bf:9c:
1a:1b:1a:26:6d:4d:27:2b:1c:75:c9:ad:48:25:5a:
bf:1e:8f:ec:d9:ef:e8:4c:b0:d8:49:32:6b:97:04:
f1:04:9a:18:68:5e:f8:fd:76:1f:21:dd:0c:d3:9f:
b1:4c:52:cb:16:0d:9e:5b:50:cb:bf:40:5f:28:83:
72:8e:1a:78:ae:f4:0e:87:cd:9f:35:c5:2e:f3:96:
6a:7a:13:8e:2b:15:12:8e:33:66:ee:7e:09:f8:66:
6b:b1:a3:56:a9:c7:88:65:13:66:5c:1f:b5:72:6b:
0c:a1:8a:8b:80:9c:76:8b:38:59:6b:ff:96:c7:d7:
d6:b8:d3:cb:3e:e9:46:49:72:2a:4a:ef:45:4b:3e:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:25:68:DA:CE:FE:76:DC:35:D1:88:F1:AC:81:B1:43:A8:99:13:A5
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3d:35:d4:de:8a:6c:1b:8b:22:7c:ac:9d:8a:1c:ee:34:7c:
28:81:06:41:f1:49:27:c0:78:db:52:7f:2a:9b:8c:3c:47:a5:
67:df:58:a4:d1:5f:48:42:54:25:84:67:b0:a4:d2:77:ec:fe:
6a:ce:3f:d1:cb:8d:27:6d:78:1c:d9:76:25:f1:3e:74:e7:8a:
db:66:59:d9:49:06:13:48:81:31:e7:3d:cf:b3:df:c0:06:59:
24:89:e7:b5:59:dc:20:a1:2d:f6:e7:e3:f5:3d:d4:58:ab:29:
bc:22:ea:26:8e:71:f4:ae:2b:37:e6:f3:46:b1:08:20:e1:cf:
ea:be:91:45:ff:d0:54:89:c2:e5:0d:75:c9:81:9e:65:86:49:
1e:08:8b:03:9c:50:6b:74:74:8f:1d:7f:e5:21:fb:97:6d:b4:
e0:1a:2f:de:22:43:63:04:3b:ca:1e:84:8a:f0:59:55:b9:3a:
1d:66:96:78:ca:c0:00:ce:88:fd:37:2f:4d:24:f2:0d:97:dd:
12:d9:3c:d5:e4:2c:a7:3f:93:42:e3:c5:da:81:b2:74:cb:a4:
09:bb:68:a0:02:c8:57:f4:43:c4:f1:f8:e9:4b:d1:7e:34:04:
2b:7f:0d:2e:b4:71:8b:18:92:9b:06:a1:d1:75:b4:c2:6d:f5:
df:68:3f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:28:06 2025 by rpki-client