Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: 7bqP/dFkH287JFAoAjEPn/SOTxFNHbJsqE6FFuvU/ec=
Subject key identifier: F7:23:1A:B8:F6:0F:7A:BF:95:B3:A3:E4:F3:74:FE:87:E2:28:D9:E3
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019745F962E187DE2B97EFE151A67348F06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0BA8
Signing time: Fri 06 Jun 2025 16:01:00 +0000
Manifest this update: Fri 06 Jun 2025 16:01:00 +0000
Manifest next update: Sat 07 Jun 2025 16:01:00 +0000
Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: RjHc7hakS7zS7p+9RvoR71Vljc0EpWugENIxtv7m7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:62:e1:87:de:2b:97:ef:e1:51:a6:73:48:f0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Jun 6 16:01:00 2025 GMT
Not After : Jun 7 16:01:00 2025 GMT
Subject: CN=f7231ab8f60f7abf95b3a3e4f374fe87e228d9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:ff:e6:87:d1:65:9d:a1:36:3e:73:1a:37:
ab:c2:70:fe:d1:23:47:e8:59:97:c9:01:4b:41:12:
2f:fd:19:c7:d8:c3:99:89:cf:c1:3c:bf:e7:c7:f1:
47:07:0d:7c:85:1b:f0:da:34:5e:e1:50:3b:ec:0f:
a3:ee:1a:88:2e:a6:b9:64:2d:63:aa:7e:fe:ee:68:
77:90:eb:f2:cd:93:39:3c:cf:f2:01:2b:0c:c4:fb:
5f:3a:8a:7d:8f:1b:b9:e1:70:1f:d3:06:6f:4a:09:
fa:2c:a2:4f:08:e4:1c:44:fe:c8:ea:8c:02:e8:c7:
87:07:ef:b4:f2:bc:e0:0b:30:85:02:59:81:60:96:
2b:e9:77:13:35:d5:1e:4a:d3:62:f7:3d:3f:3f:7e:
d6:fa:28:b5:fc:da:1b:94:fc:7c:e6:b2:4c:75:7a:
92:d5:a6:38:c0:e1:aa:9a:5b:b7:72:2d:96:11:e4:
22:86:f1:ee:9c:1b:9f:7a:5d:05:f9:63:27:bf:74:
d6:4f:a7:35:02:8b:37:20:49:14:f2:4f:e9:79:56:
c0:2c:1a:43:4e:57:ef:de:ad:f2:17:3c:c7:46:26:
f2:54:7e:64:76:63:02:d8:16:6b:45:35:41:58:65:
a5:31:5d:a5:b5:3e:fc:55:d3:de:9e:e0:8a:15:f5:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:23:1A:B8:F6:0F:7A:BF:95:B3:A3:E4:F3:74:FE:87:E2:28:D9:E3
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:21:2d:1d:82:de:1b:ff:1a:76:2b:d9:6c:3f:20:ec:6d:56:
01:e0:47:23:90:a1:a6:fe:0c:2f:3c:1e:97:fa:8e:37:60:b5:
9b:78:1c:d2:1d:f9:c5:f9:db:59:63:43:96:1a:4d:6c:2d:4e:
52:a7:19:da:86:21:45:08:6b:33:50:c3:7e:2b:ee:85:d1:f5:
76:aa:36:4b:30:27:d2:89:80:2a:78:fc:2f:ea:92:d4:5e:84:
58:4a:45:16:90:4d:b3:03:92:85:4b:c3:f8:5e:53:a8:ea:e9:
d2:8a:80:6e:9d:4e:da:7a:08:7a:01:82:61:cc:d0:56:f7:82:
58:f8:fb:f5:92:b7:44:27:46:94:bf:f8:ff:ad:49:37:f7:d6:
73:b7:5b:e8:8f:93:bb:94:55:f7:fe:67:10:5c:d1:d7:85:20:
df:2e:1e:99:73:91:90:d8:f6:bb:54:6b:f5:ab:34:d4:6b:1d:
f3:6b:55:0b:8b:94:a6:e0:45:92:81:ee:22:0e:4f:94:9d:9a:
04:4f:3d:d0:36:d8:77:7d:b9:9d:7a:4b:de:06:f1:e1:51:a3:
af:06:c4:54:60:18:e2:b8:03:31:5a:fc:51:5e:30:81:98:b7:
7f:97:a2:7e:50:3e:8a:e3:1e:f0:29:2b:f2:cb:6d:8c:12:12:
79:f5:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:48 2025 by rpki-client