Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File: m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier: lBM2ZIt02eScDzDKqqTGzvaTIB6yuyCCvSJQQ992oMQ=
Subject key identifier: 4D:15:C1:E8:4A:53:36:03:B4:91:2F:B7:0E:B0:69:A0:2F:50:B8:B0
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial: 01974D4516F918D5604DDC64050D0A809483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number: 1115
Signing time: Sun 08 Jun 2025 02:01:02 +0000
Manifest this update: Sun 08 Jun 2025 02:01:02 +0000
Manifest next update: Mon 09 Jun 2025 02:01:02 +0000
Files and hashes: 1: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (hash: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=)
2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: GE/OPbBNnYghvCWKh8ApGWY4c0gvbmtl9i1k+Fb3Va4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:16:f9:18:d5:60:4d:dc:64:05:0d:0a:80:94:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Validity
Not Before: Jun 8 02:01:02 2025 GMT
Not After : Jun 9 02:01:02 2025 GMT
Subject: CN=4d15c1e84a533603b4912fb70eb069a02f50b8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:bf:ab:16:bf:2a:22:fa:b5:10:e7:3b:55:
ec:d2:bd:a6:a0:6e:82:7a:e7:07:c2:0a:79:29:a4:
82:f4:bf:07:90:7b:12:7a:5a:b5:26:fd:df:a3:81:
b5:94:a3:b7:30:97:ff:7a:8b:62:a0:d7:92:69:91:
f5:67:b6:2f:68:d2:a9:ec:d0:49:68:59:94:1b:3c:
54:a6:62:e3:d8:ed:74:29:97:b0:40:bc:25:d6:55:
aa:e0:bf:a2:92:57:3c:61:2b:a4:39:d5:b3:43:e5:
c5:9a:1c:f9:87:9f:17:38:41:a3:3f:56:cc:f1:23:
08:a7:9b:1e:7e:2d:96:13:cc:9c:95:39:10:75:a7:
fc:3d:48:dc:41:81:bb:3f:f5:be:b6:9a:25:fa:e1:
60:86:66:dc:5b:d5:e1:ac:02:19:51:16:f2:ce:b8:
87:f4:b1:03:1f:b7:02:f5:14:1b:ae:8c:99:f9:f5:
31:91:6c:40:e9:92:f3:a5:f7:81:5e:63:00:40:53:
6b:b0:5e:c6:cf:be:de:e9:1a:1b:65:7a:f4:2b:7b:
10:b7:75:a4:4a:f2:97:f5:59:66:c4:d5:55:70:4c:
51:2e:02:04:2a:70:c6:86:2c:fe:3c:b7:ff:e1:b0:
bf:5a:3e:0c:44:84:71:e9:11:55:f1:a3:bd:7a:c3:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:C1:E8:4A:53:36:03:B4:91:2F:B7:0E:B0:69:A0:2F:50:B8:B0
X509v3 Authority Key Identifier:
keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:19:46:82:dc:97:e3:30:ed:e7:c0:c1:3f:1a:73:af:c5:14:
26:9a:dd:d3:41:20:e6:2a:37:e2:8d:b6:6b:7e:40:8e:e4:df:
9c:b7:a4:1a:17:2e:e7:0f:59:4b:cf:e5:f3:71:ee:95:ac:84:
e8:50:54:8d:02:56:e2:d7:b7:1d:68:29:d6:5b:82:49:f5:69:
26:b3:68:78:93:d6:34:74:bc:df:56:7c:12:95:25:2a:94:53:
bf:fc:ba:79:a0:5b:26:80:f2:87:d5:ff:58:87:e5:04:82:0f:
f1:1f:80:82:69:20:49:20:a4:28:9b:0a:00:1b:49:2c:61:a6:
3f:21:93:78:ff:f9:41:c5:d9:59:4e:0e:40:8d:4c:d5:06:c0:
ab:c7:24:d6:1a:38:db:e2:36:05:57:1f:63:30:40:71:2f:d0:
b8:78:ed:71:b3:13:56:ea:26:5e:fe:7b:3f:50:3e:43:cc:8a:
f5:78:6d:41:25:0d:65:68:92:53:91:0f:7b:8d:1c:8d:5c:24:
da:96:cc:b0:79:37:78:77:32:dd:e0:ec:ea:80:2c:83:8a:5c:
ae:bd:66:d8:cd:b1:a7:c4:51:04:60:3d:33:61:73:53:a0:f8:
d4:1b:f3:60:f4:5b:2e:62:fc:5f:2a:7d:34:b3:2b:1b:df:48:
79:b4:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:24:48 2025 by rpki-client