Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: JPGMmu3QRMy8S4gExMWyooov/xQZzZv6UTaY0igSpPY=
Subject key identifier: 02:6B:75:BD:DE:A3:50:5A:86:EB:46:16:DC:B2:37:47:E0:72:9C:68
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 01974FD7FB9E90282336E573304DFFDBFC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 11FA
Signing time: Sun 08 Jun 2025 14:00:44 +0000
Manifest this update: Sun 08 Jun 2025 14:00:44 +0000
Manifest next update: Mon 09 Jun 2025 14:00:44 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: k3iRq1PGurUTehDaaVGlIqDtXaHTlc2I4lapePbVXrQ=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:fb:9e:90:28:23:36:e5:73:30:4d:ff:db:fc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Jun 8 14:00:44 2025 GMT
Not After : Jun 9 14:00:44 2025 GMT
Subject: CN=026b75bddea3505a86eb4616dcb23747e0729c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:90:c1:4a:b6:23:94:70:d5:9f:b7:68:09:ec:
5e:d4:67:b2:d6:f1:54:5c:27:f8:d8:8c:3b:71:ab:
da:25:dd:3c:1d:5e:41:22:b8:51:e3:33:ab:10:3b:
2a:0e:94:ed:e6:42:ce:be:3f:d0:3d:8b:5f:96:c7:
33:23:f1:1f:2f:0d:ab:46:1a:c9:c0:b2:54:ef:e6:
be:32:da:7d:68:ff:c5:9c:52:24:fa:93:90:fc:b2:
a5:62:bd:de:a5:e3:f2:60:ad:04:c1:6e:63:13:ba:
80:6d:5e:5f:3e:ee:a6:b1:36:76:fa:e8:53:ad:14:
55:d5:d2:81:a3:ed:8f:d9:a7:a3:cf:03:76:98:25:
29:19:e4:30:eb:b3:c5:97:a8:2d:01:3a:96:26:a6:
ef:ad:e3:44:06:59:d1:79:ea:fe:b9:2d:cb:18:ba:
bb:8f:43:5f:bd:02:44:31:80:6a:55:89:23:d2:32:
ba:ce:f7:a9:23:84:e7:77:4a:d1:6b:20:3f:c9:be:
d2:df:47:c1:f9:d7:04:06:ea:93:87:62:25:87:66:
1a:30:d3:cd:b2:cd:73:15:17:12:65:1b:93:39:e7:
a3:ea:55:b3:a0:0b:c4:2e:1d:ba:2e:f1:47:9d:9b:
bb:8d:84:11:81:c0:48:76:cf:70:47:da:19:0d:a2:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6B:75:BD:DE:A3:50:5A:86:EB:46:16:DC:B2:37:47:E0:72:9C:68
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:90:26:a2:9a:9d:6c:f4:a5:0c:dc:bf:9d:d2:f5:64:cd:6c:
ae:ed:2e:d6:3e:b9:79:c0:5b:f9:9f:d2:33:15:e4:b7:04:c8:
bd:69:3a:46:20:4d:6a:46:5e:c7:f9:c0:14:78:38:99:ba:f0:
bf:cc:72:fe:a0:c6:0d:94:fb:bb:7b:60:e3:87:c3:ba:6c:43:
d6:e4:b2:42:33:46:ac:6e:34:dd:df:69:a0:1c:0d:22:5c:92:
a9:87:9e:6b:cd:87:ce:02:ab:60:5c:fc:3b:d8:cd:ea:41:ea:
3b:a2:1a:e9:0b:58:d1:6a:19:9d:d0:85:ce:49:de:6f:ca:ca:
00:f8:06:80:d8:b5:ca:5a:9c:ef:5d:23:03:7c:8c:be:6d:2d:
1c:aa:22:60:2b:31:ad:5a:2a:55:9b:a6:53:58:4e:22:bd:18:
68:d5:db:31:78:6a:f2:78:45:98:78:6d:0a:39:4a:ea:61:b8:
9f:d6:6c:db:af:f0:7c:0a:92:a6:55:69:96:fd:a4:86:ce:09:
5a:ca:3b:44:f1:d8:45:ab:e6:b2:2e:53:46:4e:eb:af:3f:85:
ff:70:84:f1:77:58:c9:16:4e:13:05:36:49:0d:02:d6:2d:93:
e6:d1:d8:23:bb:05:a8:6c:c1:33:78:5f:65:4c:44:3d:c0:ba:
07:7f:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:05:55 2025 by rpki-client