Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: M04cWj+p8MD4ZnZMQzFGhRfnU3064nAnWo/MZdY1oNk=
Subject key identifier: 00:6B:69:8B:94:0C:79:71:7B:92:4E:03:BA:7F:00:B7:41:49:26:01
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 0197499EF3CCE552457F9DD679E933769377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0DCC
Signing time: Sat 07 Jun 2025 09:00:43 +0000
Manifest this update: Sat 07 Jun 2025 09:00:43 +0000
Manifest next update: Sun 08 Jun 2025 09:00:43 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: Q+5Q4VoKYRVVP3qWwHMY/K/Lku+rmtz0RDbP7ZXBeYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f3:cc:e5:52:45:7f:9d:d6:79:e9:33:76:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jun 7 09:00:43 2025 GMT
Not After : Jun 8 09:00:43 2025 GMT
Subject: CN=006b698b940c79717b924e03ba7f00b741492601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:ad:49:d9:e8:eb:be:d8:c0:e8:d4:8e:e8:
db:39:b6:1d:d1:75:27:c2:62:d5:9e:1f:d2:ff:2e:
27:01:db:2a:67:0b:e8:ee:98:16:9f:41:f0:6e:9e:
79:0f:af:e3:48:34:e5:d2:84:90:01:ee:eb:cc:2f:
1e:14:2e:ba:d9:f5:bc:7f:83:05:23:53:6c:e7:db:
4b:fa:7a:bd:53:fb:b4:46:8a:0e:96:4f:e7:91:0e:
b0:01:e5:63:dc:64:a7:e9:5c:8d:dc:db:0c:c4:3e:
21:36:c8:be:29:31:1b:3b:d5:e8:6e:b8:d6:02:dc:
ba:30:12:61:b2:72:7d:8b:9c:e6:f1:db:e8:30:48:
d8:45:dc:14:5c:48:25:85:11:1c:1e:ab:2e:28:36:
d7:cb:4f:f3:c8:c0:66:ce:31:25:83:e9:4b:4b:c4:
74:29:4c:f1:2e:4c:e4:35:b4:00:53:32:c6:66:06:
0d:60:54:de:19:34:63:85:2e:29:bf:2b:53:5f:08:
04:f0:2d:f3:14:e1:55:8d:51:c6:68:eb:36:21:1a:
fd:0f:6b:75:ac:44:48:a3:15:d7:8e:b3:2d:66:11:
12:4e:8e:a6:ee:38:fb:07:2f:c7:9d:f6:ba:87:7c:
97:41:c9:de:37:2c:56:14:91:b1:3d:41:3f:b0:70:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6B:69:8B:94:0C:79:71:7B:92:4E:03:BA:7F:00:B7:41:49:26:01
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:32:9d:fc:8c:5e:3a:46:a4:87:38:2b:2f:da:c2:36:c3:27:
2f:d5:2e:86:1a:16:14:0a:b8:53:4d:9c:ef:83:73:96:aa:da:
b9:4c:e6:c5:f7:e9:3b:48:6a:8e:62:32:4c:4e:c1:74:d9:ff:
b0:05:f4:3c:ee:d1:18:0a:33:61:bb:11:37:56:f6:e2:4d:ac:
b3:8e:b3:97:8d:75:ea:d6:8e:f7:c5:54:9a:2b:1b:f7:63:23:
49:ea:8b:2d:b7:7e:13:63:d4:b7:5d:8d:5a:0d:7c:32:e8:60:
73:a2:92:38:3b:f3:5f:d2:77:9a:23:4d:4d:77:7a:3d:8f:64:
94:ec:7f:5a:ca:5a:66:3e:f4:e3:27:96:39:2c:58:34:e0:c2:
8a:9a:da:dd:86:dc:c1:bf:c4:c1:c7:45:83:52:85:c3:55:9b:
a1:63:5b:21:38:c7:b3:70:bd:0c:91:fe:3c:46:cb:b2:34:94:
f6:3d:da:bb:d7:45:b7:52:93:a6:17:99:fd:34:ad:68:bc:29:
7b:c2:96:ff:2a:6f:a5:d5:ec:3b:c8:1e:7a:df:9f:57:07:82:
c4:c0:95:c6:ba:a1:73:01:78:47:fb:e0:d3:7f:51:8e:b7:fb:
8a:f0:7b:83:eb:57:a0:a8:ec:5d:77:08:18:ac:9b:4d:2d:b9:
db:9e:05:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:22 2025 by rpki-client