Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
File: MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json)
Hash identifier: O4oA6umsEF37e9huJJndwVkdTnzUUeKpU8Xph02tPFg=
Subject key identifier: 79:67:4C:1A:C6:90:BC:5F:CD:D6:FA:56:66:CB:4A:96:CA:FA:13:54
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Certificate issuer: /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial: 0197507CF39F9CC12642F4CEAF0A3E7BE532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
Manifest number: 1095
Signing time: Sun 08 Jun 2025 17:00:55 +0000
Manifest this update: Sun 08 Jun 2025 17:00:55 +0000
Manifest next update: Mon 09 Jun 2025 17:00:55 +0000
Files and hashes: 1: DfvtpBc-nvqHEzH62KyAmVwM6wc.roa (hash: vQtE9Py9eSZNLr1/cVugAFwNdN9RtLbpzhnSE7YveL8=)
2: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: klORoWgYNdgPnaONofJiIhXxTrdm111Egh9neqdEl7k=)
3: pckV3Ny46TaKVnOLD2SsKXbY_nE.roa (hash: wXkkeRI/oAjuXh/YFmny+LydKMS24wNW7vGV6jYr8h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:f3:9f:9c:c1:26:42:f4:ce:af:0a:3e:7b:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Validity
Not Before: Jun 8 17:00:55 2025 GMT
Not After : Jun 9 17:00:55 2025 GMT
Subject: CN=79674c1ac690bc5fcdd6fa5666cb4a96cafa1354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:9e:0d:c5:b2:e5:3b:80:bf:c7:56:23:2e:
36:d2:72:0a:8e:c1:93:32:a3:9f:ae:e7:b2:8b:64:
42:6d:52:8f:04:69:a1:a6:68:43:8f:6b:64:16:46:
3f:6e:10:e6:ab:20:a8:45:c9:cd:4c:fb:76:5d:af:
cd:f6:04:dd:bb:c7:7f:41:73:32:7f:5a:9f:28:ea:
e5:75:a1:5d:76:f5:70:9c:b8:06:93:bf:e3:8a:6c:
13:85:d4:32:06:1d:3a:ff:12:e3:46:1f:b6:10:a2:
40:11:56:d4:61:0d:56:0c:85:eb:c3:66:d9:43:16:
8b:5e:a6:84:76:4f:83:16:ac:36:b9:1e:88:df:2d:
78:35:9e:71:a7:f2:4a:01:5d:19:b4:8e:e4:ba:ba:
d2:79:62:4d:1e:47:4d:6c:f6:91:69:ab:93:61:27:
f4:be:37:d6:e5:25:3f:38:78:c4:f8:75:6b:bb:54:
08:c3:18:cd:b3:ff:bb:85:5c:b8:da:e1:fe:3d:14:
df:ff:20:82:0a:52:6c:10:4a:e4:5e:ad:96:3a:a7:
38:0f:80:8c:d5:20:3c:78:71:9e:f9:75:a8:cf:58:
5a:68:0a:0e:07:27:dd:51:8f:d1:b4:53:b1:6a:cb:
c1:78:1c:16:88:c2:8b:9a:f0:f2:f7:69:a1:85:9a:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:67:4C:1A:C6:90:BC:5F:CD:D6:FA:56:66:CB:4A:96:CA:FA:13:54
X509v3 Authority Key Identifier:
keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:dd:3e:17:04:bb:89:4e:3b:bc:99:d3:39:82:82:95:c1:20:
48:ef:34:00:ff:b3:9f:1c:73:4b:c4:86:d3:89:ee:d8:03:72:
3e:af:63:d8:a3:a1:bc:85:de:23:0b:a8:2e:b9:95:f8:25:3d:
0f:af:46:48:86:71:31:bc:c9:51:e4:5e:3d:8e:03:b1:af:f9:
d9:a2:1c:f4:82:a6:1b:b8:97:b8:85:bd:28:48:1b:4f:22:b8:
05:e6:51:0b:31:46:c7:d9:c1:8a:96:f7:f1:60:17:14:98:bf:
fa:27:fb:b5:55:0c:ad:09:f0:c1:ba:5f:77:01:94:25:1d:96:
a2:73:14:34:d5:ef:d0:d2:c5:07:1a:e6:36:95:bf:f4:69:6c:
69:fe:3f:b6:20:4a:cd:1d:c9:3e:f7:40:b4:5e:6a:df:fd:93:
10:57:e9:33:1a:3b:4b:02:e9:e8:6a:3f:9c:1e:51:29:6d:da:
d1:98:2d:42:51:66:86:35:74:31:d9:8e:ce:09:f5:9a:c8:16:
c5:25:63:00:87:0f:47:83:17:89:22:fa:cc:72:e2:35:57:49:
bc:c1:0d:5b:db:b2:57:55:a2:60:50:f5:75:92:80:d6:0d:a7:
a1:1d:5d:17:6f:e8:ff:0c:9f:6a:0a:4b:eb:6e:0b:a9:fd:a9:
86:10:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:43:03 2025 by rpki-client