Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: ycetlP9iosrY8mNO4G67+00CNk6BceFyTyffgVv0TUM=
Subject key identifier: 38:DF:08:69:60:B8:5B:2D:1C:68:8A:0D:B8:00:A2:A6:95:FA:CC:A8
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 019748FA45096129DB70F0488FF6B4671D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 12B7
Signing time: Sat 07 Jun 2025 06:00:50 +0000
Manifest this update: Sat 07 Jun 2025 06:00:50 +0000
Manifest next update: Sun 08 Jun 2025 06:00:50 +0000
Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: Esi8zL5pAiIOTxSeRJZBehCcQVV4kM2+KmU/+Gl90pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:45:09:61:29:db:70:f0:48:8f:f6:b4:67:1d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Jun 7 06:00:50 2025 GMT
Not After : Jun 8 06:00:50 2025 GMT
Subject: CN=38df086960b85b2d1c688a0db800a2a695facca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1a:83:9b:eb:f4:40:03:29:03:7c:5a:d9:40:
2f:d6:f9:e6:2f:4b:69:45:9b:ec:c5:a6:2f:78:b2:
68:e4:e0:63:51:23:d9:d0:56:8c:3f:ef:63:8a:0c:
3c:1f:58:e3:95:03:78:ea:ab:22:69:25:a4:1b:c2:
33:ed:92:f5:32:af:5a:e1:41:51:29:ea:62:75:d6:
2e:bc:ea:e6:0c:a0:a7:e0:81:1c:ae:ff:ad:75:a1:
3e:54:fd:ba:b3:6d:3e:8d:f0:07:4a:85:82:28:da:
2c:4c:96:fa:ce:36:1e:62:41:86:e1:6b:23:3e:27:
88:bc:31:74:43:11:36:47:06:a8:1f:92:1d:48:ca:
d5:79:30:8c:0f:14:78:cb:ad:b8:4a:ae:ad:03:bc:
ee:e1:d8:b1:36:81:7c:66:6d:61:59:68:ce:ae:ba:
88:79:0e:78:40:4b:f2:d2:c6:59:7d:cd:44:55:9d:
bf:1f:dd:ad:59:b0:3e:74:47:76:41:4e:61:c6:59:
e1:02:a2:1f:61:88:3b:8b:88:60:2c:8e:43:58:fe:
80:10:4f:2d:47:51:be:39:96:bc:08:df:53:4d:0d:
4e:eb:6d:bf:8c:ed:30:f1:a2:4f:5a:43:ff:f5:d3:
08:59:77:f4:e5:65:e5:3e:4a:6f:6a:bd:7c:3c:95:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DF:08:69:60:B8:5B:2D:1C:68:8A:0D:B8:00:A2:A6:95:FA:CC:A8
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a1:a9:84:a5:98:a9:0e:65:d8:c7:e0:ee:0a:f3:33:2e:f8:
cc:9a:e8:0a:f1:6d:a0:b1:e2:50:b9:6b:d2:8e:40:ac:3a:df:
96:c7:3d:8e:6e:fa:11:b6:3e:b6:b3:f8:26:e3:cf:66:cb:48:
6e:41:bf:c3:fc:97:ff:fd:41:9f:bd:50:14:db:b1:5a:38:22:
25:82:76:54:eb:d0:3e:53:58:ca:90:ba:01:8e:03:aa:ec:9d:
1e:8d:69:72:3e:2a:95:9d:be:79:b0:63:b9:b6:f3:3b:bd:6e:
46:05:62:dc:7a:8c:b3:81:f7:3f:90:e3:ad:b5:da:76:28:4b:
f4:17:41:fb:64:94:c2:00:88:64:3d:83:27:71:9c:48:be:09:
d5:a4:7b:21:3e:4c:0f:01:82:4c:98:d7:a1:1a:72:f1:79:00:
da:28:84:8a:3b:60:50:c6:ed:3e:43:0f:75:d6:00:12:09:f5:
ef:d0:f4:c4:cb:ca:56:ef:e5:a8:0b:81:b8:6c:ea:54:44:7d:
b1:9d:92:eb:2f:b5:40:a4:9f:d1:75:be:7f:b7:6b:79:1b:d4:
d3:85:5e:0f:c3:24:68:da:7f:f3:6d:1c:88:13:da:3a:9d:b0:
52:c3:37:35:9c:3f:d0:f7:38:1e:c9:87:19:4a:4a:3c:96:66:
fd:1f:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:16 2025 by rpki-client