Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File: Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier: euQExRPLPJsb8x2GzdQJrnTKpdTQses4zuZlB74HZAc=
Subject key identifier: 07:F9:EF:3D:08:55:C6:66:BA:EC:BA:CF:99:48:59:94:B7:27:26:EA
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer: /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial: 019748FAC2DB5FD34602F1F0D3CCE3BC3EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number: 11DB
Signing time: Sat 07 Jun 2025 06:01:22 +0000
Manifest this update: Sat 07 Jun 2025 06:01:22 +0000
Manifest next update: Sun 08 Jun 2025 06:01:22 +0000
Files and hashes: 1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: yE3TDaoouF3NeI9oC5zZZ/3ILjxnCJh1mIh3lJH2xS0=)
2: Ws-3to11mYQT65QlLPSv_a64Aow.roa (hash: bLLs3zCR6QgpvfFD4PT4W3Xh5DmPnAizoHMgUfONgYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:c2:db:5f:d3:46:02:f1:f0:d3:cc:e3:bc:3e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Validity
Not Before: Jun 7 06:01:22 2025 GMT
Not After : Jun 8 06:01:22 2025 GMT
Subject: CN=07f9ef3d0855c666baecbacf99485994b72726ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:ad:51:0a:c6:46:8f:29:24:ea:83:4d:f7:
16:45:a2:a6:bd:3a:ef:0d:47:77:f0:34:79:94:df:
77:e5:e3:a2:06:d2:5b:55:60:ac:a3:f6:8c:3f:b3:
27:c5:7e:7b:52:68:e9:aa:6b:68:8d:61:c0:11:55:
ff:16:b7:07:4a:a5:b7:8a:6d:9a:5b:50:25:72:da:
97:65:94:31:06:c7:b8:2b:9e:48:f7:62:a3:d3:96:
96:3c:3b:59:93:83:36:82:f8:7a:b5:d8:b9:26:03:
b1:9f:e6:b8:2c:96:a3:2f:ed:cd:ba:d7:42:d0:d7:
8e:f0:22:a9:0e:99:03:dd:cd:9c:a5:6e:97:38:72:
a8:dc:e9:0e:4b:5f:12:2a:71:95:41:cc:1c:da:e3:
19:4b:ee:ce:3e:06:6b:d5:80:f8:13:cb:b6:c3:35:
e7:dc:31:13:af:f8:8f:cd:a7:60:f8:51:15:4a:8c:
3e:63:18:50:a3:1a:cf:8c:8d:cd:f2:8b:65:d7:b9:
da:93:04:96:38:1a:c8:97:f6:ba:77:6c:a6:da:b4:
27:38:fa:a4:9a:18:c7:56:bf:4e:a6:ab:21:8f:bc:
e8:91:55:23:fe:95:a6:9d:05:dc:36:bb:62:83:48:
c7:ef:b2:de:99:85:f7:3b:77:0e:a2:c5:be:e8:a6:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:EF:3D:08:55:C6:66:BA:EC:BA:CF:99:48:59:94:B7:27:26:EA
X509v3 Authority Key Identifier:
keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:35:67:b0:85:3e:a0:42:2c:1a:85:be:72:7a:e2:86:64:
32:b1:b9:4e:ce:82:4b:83:74:e5:ad:53:5f:ef:84:23:c0:55:
7e:47:57:4c:bf:39:55:ee:ad:09:3f:9c:b2:97:83:ec:bb:b5:
a2:5b:9a:23:07:00:32:26:ae:b7:5d:06:68:a2:06:14:55:8f:
1a:50:e3:69:cd:6f:d6:68:4b:e9:25:9a:11:7d:8d:01:e4:c3:
b3:85:4e:f5:61:2a:f6:58:17:b3:bd:1c:46:75:7a:bb:b1:90:
3f:ae:2b:fe:e7:73:41:01:43:d0:5d:c8:18:58:33:6e:9a:f9:
93:e5:9c:8b:01:df:e5:e4:0c:e1:47:79:6d:f5:a9:02:f7:33:
27:91:16:45:97:22:36:91:7b:23:e7:e7:6f:4f:17:e6:87:7d:
b8:d4:df:7e:df:e4:bf:18:73:c4:21:5c:f4:85:a6:b6:14:5b:
74:24:6c:f9:49:b5:80:80:77:28:c8:db:3b:bd:49:d8:53:94:
93:c3:a2:34:8f:e7:3e:08:c7:36:fd:13:c6:ee:fe:04:49:ea:
83:8e:57:89:fe:ab:57:eb:4a:e3:db:0f:c1:bb:ca:4f:f3:a3:
a7:fd:88:24:20:ea:e8:4e:b9:98:e3:c3:bd:7e:b7:7c:40:d1:
29:83:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:11 2025 by rpki-client