Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: Z5FPWl30/qPQ5GjzQP6MDg5mFsuQORkkVgFfP8c830Y=
Subject key identifier: 8E:EF:FF:D2:B1:80:6C:14:76:11:78:EC:9B:16:86:80:E2:A9:8E:CD
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 019748557265977B06C60A713FF3D4E3BE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 03C5
Signing time: Sat 07 Jun 2025 03:00:48 +0000
Manifest this update: Sat 07 Jun 2025 03:00:48 +0000
Manifest next update: Sun 08 Jun 2025 03:00:48 +0000
Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=)
2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: AhSkoxdRelAaM7H70eN3QWRSiC5ifrYlzaUbzl0XqkM=)
3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:72:65:97:7b:06:c6:0a:71:3f:f3:d4:e3:be:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Jun 7 03:00:48 2025 GMT
Not After : Jun 8 03:00:48 2025 GMT
Subject: CN=8eefffd2b1806c14761178ec9b168680e2a98ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:61:f4:08:b4:cc:b0:fa:7d:e4:d7:19:01:
a0:7a:3b:46:c6:d7:36:5e:a4:37:68:cb:58:eb:73:
dd:85:fa:7b:d0:b0:4c:8d:66:64:68:e5:f5:2e:0b:
c5:54:82:db:97:07:4f:49:6c:02:13:ce:14:b5:1d:
0a:86:97:97:99:be:8b:cc:d3:6d:74:80:69:77:be:
87:f9:34:5e:70:1a:f2:e1:6a:85:52:33:ec:68:a2:
32:a4:0e:39:29:29:a3:bc:0b:86:2a:bb:47:ba:3d:
c3:27:30:6c:0c:f8:b5:6b:23:d7:9c:cd:43:b9:15:
38:bb:27:08:df:b1:64:5d:fc:14:fa:1d:7b:e8:9b:
68:f1:e8:ff:6f:04:da:e7:dd:c9:33:65:1c:d8:f2:
74:26:54:db:e3:77:dc:b9:6e:89:1a:24:15:44:b4:
50:cb:73:4c:c4:a4:1c:62:3b:e3:bd:c1:f6:84:34:
86:75:33:62:06:96:e8:a1:55:ee:4d:77:6b:7e:4f:
7b:67:ba:7f:49:7e:2e:a7:ed:a9:cf:67:05:15:7b:
3c:4e:0a:b2:a3:a6:ae:72:4b:49:4d:57:31:08:1f:
b2:45:31:52:82:69:7f:5f:59:cc:a8:83:86:b2:d8:
00:bd:09:70:ed:d9:2a:e9:a8:e8:95:c8:35:0a:27:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:FF:D2:B1:80:6C:14:76:11:78:EC:9B:16:86:80:E2:A9:8E:CD
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b4:3e:2c:d6:5c:71:a9:d0:ff:1a:10:37:c0:33:00:3d:14:
2d:26:da:3d:01:3b:32:5f:8a:87:0d:7b:8a:82:52:be:76:92:
75:07:89:6e:7f:32:9f:72:5c:af:7b:41:51:78:2b:97:e9:24:
ff:a2:ba:5a:e5:f7:43:14:e3:26:eb:4c:48:63:1b:88:ba:db:
3c:7f:4a:e1:68:0c:df:8a:b9:b5:f5:c4:59:59:35:69:3f:de:
86:b8:49:e2:d0:17:32:8f:3d:ce:f3:03:02:15:7b:c1:05:a6:
d1:10:c3:c1:22:55:a0:d3:0c:72:a6:78:4c:68:18:cd:6f:9f:
68:41:c3:89:8c:72:b4:51:95:a1:44:7d:ea:0e:54:f1:64:bc:
07:c8:1e:7c:eb:ae:13:b0:16:7f:ae:94:ad:94:7e:e4:2b:56:
f3:7b:37:79:bc:21:a1:d2:25:cb:d5:d5:cd:58:29:31:4f:e5:
e7:56:bb:6b:45:e5:f0:8a:b9:0f:74:c5:7b:85:96:ea:18:ea:
59:a6:c8:4c:7e:27:7a:36:0f:33:4c:61:0c:f4:a4:86:30:cd:
73:19:2f:ef:9e:cd:28:49:b9:cc:a2:51:cf:45:cf:81:61:8c:
5c:de:60:43:09:b5:01:cc:c9:50:13:55:70:a3:7d:92:31:72:
f8:1b:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:55 2025 by rpki-client