Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: q4D9DLkVQSdz5YeRLW+IwFr33scjUrYcWmrqDY7Zv6c=
Subject key identifier: E2:EC:82:DB:D6:51:8D:CD:05:05:18:33:88:34:9A:A1:CF:28:5B:89
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 0197462FB9B05564657EE019C132B2EED5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 0571
Signing time: Fri 06 Jun 2025 17:00:22 +0000
Manifest this update: Fri 06 Jun 2025 17:00:22 +0000
Manifest next update: Sat 07 Jun 2025 17:00:22 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: Zh8yll5XRJRClPqMkZPPKnncsavemXD1CrtFYXR/YgA=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:b9:b0:55:64:65:7e:e0:19:c1:32:b2:ee:d5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Jun 6 17:00:22 2025 GMT
Not After : Jun 7 17:00:22 2025 GMT
Subject: CN=e2ec82dbd6518dcd0505183388349aa1cf285b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:3d:db:83:50:51:f1:3b:29:fb:4d:82:d1:37:
f8:8b:ba:5d:98:e3:ef:41:b6:8b:bf:1a:4e:e2:a8:
9a:a9:b3:d6:9c:12:41:b7:e6:f3:23:2d:ac:0c:aa:
38:f3:8f:e1:df:bf:6c:04:97:13:c2:8d:24:10:e6:
c4:36:2a:5b:8b:a4:ae:37:0e:ea:4d:d8:bb:f4:35:
a9:be:d9:85:79:c9:1c:e7:36:e5:40:ec:60:6a:29:
74:6e:64:30:46:27:c5:cd:b0:ff:f8:a4:ec:59:65:
e1:fd:bf:3c:6f:1a:59:fa:4a:6e:b1:f6:31:33:08:
1b:4a:8d:f9:fc:85:d6:19:a4:5a:10:d1:21:47:0d:
c9:d3:90:43:b1:e5:e9:9d:58:d2:47:b4:dc:1d:3d:
fc:fc:46:4a:66:de:10:91:f2:c6:1b:80:97:6a:39:
fc:bc:8f:f9:70:f6:22:d7:a5:57:e6:f2:f0:04:9a:
d3:7c:be:fa:8d:1f:1e:70:dd:c8:7c:5d:a8:b6:1f:
fa:f0:07:37:56:38:46:5c:0a:06:12:45:fd:5f:4d:
a3:26:b4:85:7b:83:0e:bc:00:43:ac:a9:45:8b:19:
b0:81:e5:bd:d7:90:50:51:97:7f:77:ec:0f:59:0e:
48:97:6f:88:70:20:20:fb:4f:02:64:33:9e:f3:4c:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EC:82:DB:D6:51:8D:CD:05:05:18:33:88:34:9A:A1:CF:28:5B:89
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:25:88:33:8b:26:7c:9b:38:10:0f:f3:5f:8c:d3:ad:db:ed:
99:c1:f1:c7:9e:17:7e:d6:66:c8:ed:9a:79:52:bd:13:f9:a5:
88:11:e6:28:29:54:24:65:a9:8b:46:8a:03:e1:8d:65:b0:ea:
24:67:47:31:9c:9c:dc:58:6f:47:d1:87:8a:96:35:88:df:19:
30:09:93:49:5e:88:36:16:11:94:43:e3:d5:f7:b7:cb:cf:7b:
30:cb:d0:74:e6:5b:a3:ca:1e:33:2b:41:bb:f3:bd:9c:db:25:
4e:56:4d:e4:c0:6f:15:8b:c6:ed:5b:9b:93:78:82:01:ed:c9:
64:b1:9f:bf:7c:ec:a5:9a:ca:12:13:26:29:f6:24:86:88:bf:
39:a3:9b:c6:fa:a6:88:db:ac:03:7b:e8:20:1c:86:e1:98:25:
75:2c:66:6f:82:d8:a8:b4:f2:26:ff:1c:b1:0a:a0:de:5a:0f:
d8:28:a9:c8:39:f9:98:dc:23:49:a7:73:f6:7d:6c:41:ed:a3:
5e:28:ab:a9:dd:30:73:32:b2:69:55:af:00:2d:fd:33:97:26:
6c:44:51:5b:3a:fa:e0:50:85:7d:08:16:36:1e:dc:02:ba:0b:
3d:16:01:ca:67:bb:b6:26:8e:06:57:3e:46:1d:56:e3:51:09:
96:b4:8e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:12:41 2025 by rpki-client