Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: Ezm3Np8HqHwiSXk5/cU1Gv9icOAmi4LPjDQFJDGNDoc=
Subject key identifier: 4B:26:BC:4F:29:90:BB:4B:7C:64:87:59:C9:07:7A:0E:28:1E:0A:53
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 01974FA123C02B3FCC099FF8E4C42678BEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 0503
Signing time: Sun 08 Jun 2025 13:00:49 +0000
Manifest this update: Sun 08 Jun 2025 13:00:49 +0000
Manifest next update: Mon 09 Jun 2025 13:00:49 +0000
Files and hashes: 1: 0bSnoMCDjomKjH9l20xWi3AzK8U.roa (hash: w7ylFdvDoXCXnQ/NKrVCZ3HeQ1sG0SNLXLUNJWq26Aw=)
2: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
3: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
4: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: oMUcWt8Afipt9PgTGsDZaZLWEi/9asmdOyH3RmoSHgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:23:c0:2b:3f:cc:09:9f:f8:e4:c4:26:78:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Jun 8 13:00:49 2025 GMT
Not After : Jun 9 13:00:49 2025 GMT
Subject: CN=4b26bc4f2990bb4b7c648759c9077a0e281e0a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:d3:02:71:51:b8:92:91:43:2d:7f:7c:b0:
8a:a9:1b:82:eb:c5:fd:19:99:85:ea:08:1f:07:04:
0b:1b:ca:5f:6b:e6:45:fd:f8:a0:fe:b9:d9:56:05:
d8:03:fc:70:cf:a2:b8:ea:49:f8:0b:fa:bd:6e:47:
49:76:f9:1c:47:67:e2:b2:f9:2d:a0:87:54:17:65:
f2:e5:fa:dc:1e:5b:4f:1a:c2:1d:ac:7e:1d:f6:80:
61:6c:f0:13:51:7d:43:42:cd:99:53:76:45:b7:f2:
8c:e3:b9:9e:6a:59:c0:8c:ac:fb:6b:56:66:ce:14:
48:64:fd:e2:d1:2d:24:7e:09:5a:79:e0:03:bd:92:
4e:55:39:ea:d5:1b:cd:4a:4c:98:ca:f8:95:96:9e:
cb:e4:b2:c1:ea:e9:a9:63:4e:f7:7b:95:8f:22:52:
af:56:b0:e5:fa:86:82:91:0d:28:a3:9a:a5:f2:93:
05:d6:08:14:ae:26:11:34:a9:66:d1:6a:bb:68:1a:
1c:89:3a:31:16:2a:b7:3e:c7:ca:90:1c:45:6d:25:
3b:92:10:e2:55:14:35:48:fe:6b:8d:47:82:7e:e6:
cd:9b:df:e2:2e:e9:ef:e8:bb:81:8b:3f:40:34:d8:
58:84:b7:e0:f4:88:f3:14:88:c1:66:88:4b:b3:29:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:26:BC:4F:29:90:BB:4B:7C:64:87:59:C9:07:7A:0E:28:1E:0A:53
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:31:b9:3e:1a:3b:ee:e0:ed:cb:b2:ef:d7:0a:e7:b9:24:09:
1b:ef:08:a1:2a:89:79:27:46:03:e4:a4:da:d6:f3:da:eb:21:
b8:69:d2:ab:c2:c9:86:d1:ff:13:25:25:3e:fc:b4:13:bb:55:
73:c6:a4:fd:1c:c4:6e:b1:ce:e7:c2:2b:22:ee:17:15:79:2b:
4b:84:10:30:50:f1:39:98:7c:4c:2e:da:c1:25:4f:ef:55:5e:
f7:3b:63:a1:12:63:34:09:46:25:d9:c0:3f:fa:de:c7:05:a7:
17:b9:d0:69:3c:94:37:02:36:24:a3:64:d2:f9:e1:68:73:5e:
eb:23:50:ec:47:18:32:7d:af:f6:cd:12:56:4f:e1:22:ab:fe:
29:05:7d:9b:c6:3a:e6:1d:32:a2:b4:96:fa:c3:4d:ab:57:a1:
a3:01:90:c1:66:b6:25:8a:b6:d1:f8:62:f2:04:28:44:6a:83:
9e:6e:b4:6c:e1:07:22:42:97:dc:16:72:ce:51:8e:29:75:f8:
4a:10:ad:f8:d6:da:16:22:5b:73:6b:8a:01:f6:0b:00:8f:f7:
cc:aa:ad:c4:f5:ef:f0:d4:94:ea:c7:ba:74:2d:e4:82:ea:a4:
15:bf:b7:cb:9e:89:11:c3:18:39:53:f0:90:37:8c:b2:5e:d5:
d3:9f:c6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:53:01 2025 by rpki-client