Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: sdxPywzVIr8kN0qM06n37BZM2oFD9FkH0Y4KR1jQQVY=
Subject key identifier: 9A:84:07:85:8B:55:C1:CA:1C:F0:22:99:F9:F3:61:1D:DE:FF:93:56
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 019748FA752EF1C285F9D594EEF435552183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 0557
Signing time: Sat 07 Jun 2025 06:01:02 +0000
Manifest this update: Sat 07 Jun 2025 06:01:02 +0000
Manifest next update: Sun 08 Jun 2025 06:01:02 +0000
Files and hashes: 1: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (hash: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: nc1Pc/zetIyZbD3rsPwnia6PWmi2QqOD+VV9qg+IjHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:75:2e:f1:c2:85:f9:d5:94:ee:f4:35:55:21:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Jun 7 06:01:02 2025 GMT
Not After : Jun 8 06:01:02 2025 GMT
Subject: CN=9a8407858b55c1ca1cf02299f9f3611ddeff9356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:61:f8:ce:c1:be:29:50:52:6b:fe:67:b5:
91:5e:30:6c:2e:c8:98:0a:a7:e1:c5:4a:4c:bd:9d:
da:08:70:b1:db:0e:a1:0a:10:52:bf:3b:6e:1f:1e:
b9:26:65:1e:a7:fa:92:b6:ed:da:a2:f8:c5:1b:2f:
3e:81:82:6a:87:4f:3a:7d:4c:4f:cc:17:4b:4e:2c:
69:6e:87:40:92:a9:d9:1b:7d:3e:b7:a4:6f:47:4e:
cd:a5:44:66:ae:27:bf:26:39:7c:10:8e:d4:14:60:
09:2d:40:49:e7:0b:01:ee:02:35:25:61:f4:d2:9f:
bf:72:43:61:11:2b:ab:66:3c:9b:df:9d:33:b4:5d:
8f:7a:9e:d5:26:3c:12:da:bf:c3:07:e0:bc:96:7b:
5f:03:39:4b:17:1a:44:1d:1d:78:23:6e:be:42:16:
c2:bd:87:9c:1c:8b:88:9a:38:6e:99:c5:61:b0:95:
3d:55:cb:14:f2:9a:15:6e:2c:b4:8b:8a:ca:2b:12:
36:4d:54:b0:79:a0:49:3b:75:a7:60:af:da:7c:fa:
33:d0:14:21:26:ab:17:88:ef:2f:9a:b7:80:a4:99:
24:da:c1:4b:91:6a:37:6f:20:f0:0d:1b:3e:9b:2e:
13:8d:96:58:d7:5b:78:e6:7a:35:16:14:b5:6a:94:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:84:07:85:8B:55:C1:CA:1C:F0:22:99:F9:F3:61:1D:DE:FF:93:56
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2f:03:25:bd:a2:44:7b:a2:cd:b5:a9:54:ec:9a:30:33:17:
5b:15:1a:0a:65:c3:49:1f:59:fe:8e:b5:9a:14:e0:99:d9:76:
5a:52:ba:dd:93:5d:e6:86:43:d9:b4:82:92:a8:ae:65:33:ca:
ee:50:6d:5d:b1:81:90:97:bd:40:5b:db:13:92:60:c2:d8:f0:
5c:bd:ae:20:ef:1a:05:f9:e4:11:7d:ab:ba:c1:e9:37:c1:0c:
1a:ce:6e:33:91:60:61:23:f2:91:dc:d8:f9:83:3c:3a:1f:da:
4a:a0:a6:13:2a:65:e9:e8:67:3c:08:ef:6d:14:ba:64:96:99:
3e:dc:c4:b2:a8:93:75:43:66:98:e9:1d:4f:ca:ee:06:3c:a8:
c0:35:7e:d4:dd:b4:68:af:15:db:68:7e:25:9f:8c:c2:df:a7:
ac:e7:62:57:74:fc:7f:70:5c:be:72:ac:d6:8c:22:c6:fd:49:
07:7a:97:91:e3:f4:c6:72:28:23:f9:f7:50:54:49:a5:0b:16:
ac:4f:3e:b6:22:a7:3f:69:7f:83:b7:04:39:48:ff:0c:a8:b3:
25:07:f1:d1:af:0c:81:60:53:4a:37:ce:a3:fb:0f:a5:46:d6:
3c:b8:63:a0:b2:c6:28:58:02:36:65:d5:c7:ef:99:45:92:96:
c2:7e:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:43:34 2025 by rpki-client