Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: M2iSrARmCaVGUPP40kcVlREGB/jQ5rArZ4vES67lJlU=
Subject key identifier: 96:36:F0:79:D9:0C:26:53:8F:90:4F:58:C8:DB:64:1B:27:A0:DA:02
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 019747B108350AF197F9F94EF1388E3DB984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 0526
Signing time: Sat 07 Jun 2025 00:01:13 +0000
Manifest this update: Sat 07 Jun 2025 00:01:13 +0000
Manifest next update: Sun 08 Jun 2025 00:01:13 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: 5EpQh6rO+bTvWvD93+8FO1pRqhiEJSIu3Ao/qiT9lBU=)
2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:08:35:0a:f1:97:f9:f9:4e:f1:38:8e:3d:b9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Jun 7 00:01:13 2025 GMT
Not After : Jun 8 00:01:13 2025 GMT
Subject: CN=9636f079d90c26538f904f58c8db641b27a0da02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:c3:57:63:19:bd:cd:f7:d0:fc:5f:cc:13:
25:81:0c:56:30:de:a9:7e:51:05:44:3b:cf:7c:fd:
73:77:90:db:88:53:6d:45:00:5f:17:54:7c:ce:f1:
e7:a1:c9:05:fa:e6:7a:c3:22:e3:ef:a1:57:f8:d9:
90:60:aa:db:e4:d2:eb:1d:04:65:14:66:70:79:df:
0b:49:15:88:04:4c:86:27:0b:8b:6a:6f:72:fa:f9:
67:1f:45:4f:38:a7:df:f7:71:17:10:ad:ec:b9:42:
e7:58:a9:d3:6a:89:85:05:f9:c3:00:d0:1e:53:d4:
2b:8e:4b:62:a8:e7:83:13:2b:cc:e1:f3:99:d2:5d:
d4:34:0d:53:f0:b3:4c:fa:4b:b4:29:d0:c9:ff:56:
4a:ad:ed:df:4c:65:0a:39:bf:b5:58:f8:89:e5:ae:
ea:ef:48:03:35:4b:d6:1e:b3:88:3b:cf:06:49:24:
79:7a:84:49:12:2c:f3:c2:7b:d1:77:0b:2a:ce:a7:
05:98:be:56:56:24:21:af:aa:de:ce:1f:41:f0:55:
ab:f2:b7:c2:79:6b:e1:c2:c2:04:29:0d:9e:54:fe:
f2:b7:5f:f5:8d:e7:3a:25:6e:c2:5d:d7:e4:16:e8:
0f:46:de:05:70:2a:ea:a7:0b:52:63:8f:a6:84:7a:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:F0:79:D9:0C:26:53:8F:90:4F:58:C8:DB:64:1B:27:A0:DA:02
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0b:0d:ce:2f:d5:b2:3d:f0:26:72:8f:3c:fd:c3:4d:cc:9c:
38:91:0f:e2:ab:71:40:dd:f2:02:2a:cd:e9:82:02:b5:18:3d:
fa:6a:d3:9e:72:47:5c:d1:7d:35:fd:70:8e:fc:61:3d:51:13:
6f:16:4f:95:1a:e1:ee:06:cf:59:06:98:06:21:44:d7:62:00:
1b:39:a0:c7:78:10:af:a5:07:90:46:2b:96:0f:f1:ec:05:c6:
71:9f:06:9a:4d:99:c9:04:87:67:f8:1c:e6:1c:57:09:27:54:
41:47:6b:a4:61:2f:eb:8c:92:f3:12:d5:69:97:d7:e2:11:e5:
9a:ac:ae:8e:5e:62:98:c6:c3:70:54:c2:b4:cf:2b:56:ae:a3:
ae:64:35:8b:57:90:ad:9e:95:02:47:bb:4c:a3:ab:37:6a:70:
dd:f1:60:40:07:53:bb:d8:1b:1b:a3:fc:45:aa:4a:a7:e5:a5:
d8:0b:91:49:89:24:70:3c:94:ea:55:32:9b:bb:b5:05:b1:f6:
5e:1f:94:94:31:34:2c:cf:7a:d5:b2:24:4f:18:62:00:61:f4:
c4:05:f2:5d:eb:de:d5:59:1b:e9:ab:d3:0e:ac:86:d7:5a:09:
52:3e:50:68:d2:60:3e:7c:cb:1f:59:d3:5a:68:09:c5:5a:b4:
de:20:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:47 2025 by rpki-client