Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json)
Hash identifier: GQekBEPcGyLuTeaCm6GcJV0KwOcW+BTW0fMBReQpDOk=
Subject key identifier: 7D:0A:EF:91:52:74:03:29:10:1A:CB:A3:CE:F7:DA:B5:ED:D0:B7:84
Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67
Certificate serial: 0197499F645924B49E2ACC7DF08289886A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:01:11 +0000
Manifest this update: Sat 07 Jun 2025 09:01:11 +0000
Manifest next update: Sun 08 Jun 2025 09:01:11 +0000
Files and hashes: 1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=)
2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: qoFo7QF1DglPsSu/NJndYSTql56HHDKNlO7SX8NNG3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:64:59:24:b4:9e:2a:cc:7d:f0:82:89:88:6a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67
Validity
Not Before: Jun 7 09:01:11 2025 GMT
Not After : Jun 8 09:01:11 2025 GMT
Subject: CN=7d0aef9152740329101acba3cef7dab5edd0b784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:62:8f:76:6a:34:1e:79:07:93:c7:05:f7:
c1:61:11:93:2c:09:14:44:01:93:0b:a0:a0:54:2c:
6a:a9:7f:1f:f8:ee:38:9a:05:ab:54:c4:c3:b7:42:
a0:14:18:aa:fd:47:39:1d:2f:d9:13:6c:55:29:22:
ff:5f:7f:92:47:70:c1:4f:8a:ac:4c:ec:8d:fd:21:
9f:f1:33:50:77:25:2c:21:de:4c:0e:6c:74:be:68:
1c:88:1a:ee:4d:60:b1:37:8e:9b:29:5c:4b:d1:00:
6e:aa:3e:3e:83:87:8c:c3:07:e5:59:20:5d:bc:ba:
35:16:1f:e7:a9:93:d7:88:e7:34:ff:b1:9d:6f:07:
1c:c5:4f:3f:ea:58:24:fa:91:55:50:d7:87:1f:02:
da:c5:be:5c:ae:8b:10:99:21:d8:4f:7b:3a:81:99:
d4:02:df:af:06:c5:54:a5:93:81:28:10:c3:3b:56:
69:0b:c7:0c:1f:ee:5a:2f:66:24:a2:6c:fb:71:7e:
b4:7e:e2:5f:1e:66:43:e0:1b:11:5a:9e:2e:61:2a:
56:e6:b8:1a:40:5f:af:3f:19:de:80:49:14:3d:9c:
53:91:2d:f0:7a:2d:2b:1d:30:d4:a5:26:15:16:fb:
2d:b7:6c:90:27:28:8f:34:f4:7c:04:7b:08:e5:c3:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:EF:91:52:74:03:29:10:1A:CB:A3:CE:F7:DA:B5:ED:D0:B7:84
X509v3 Authority Key Identifier:
keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:db:9b:49:96:b4:09:a0:b5:13:17:85:9d:66:83:b6:dc:43:
bc:c0:31:d0:b6:bb:ca:47:57:40:c7:52:35:81:f5:67:f8:08:
c1:b2:e3:06:55:95:95:ae:74:f7:e1:11:b8:c3:61:91:48:0c:
d5:22:9a:6b:a6:4d:34:b0:36:c8:04:5d:e3:86:96:88:0a:ac:
95:97:a7:84:fa:3c:6c:8f:51:ad:06:f8:f1:d6:a5:59:8f:b6:
22:fe:b2:03:f3:b0:8d:f7:07:ae:e9:55:d4:cf:df:8e:62:dc:
61:aa:ce:9c:01:96:2f:c4:99:02:1d:9d:f7:fa:3b:e8:44:d6:
8d:2b:64:54:a6:3a:31:52:db:94:60:a2:26:dc:5a:5b:94:d2:
bf:43:f1:85:16:04:48:61:db:5c:2f:b5:1b:30:58:bd:39:ff:
a2:16:de:88:db:4c:5f:cc:77:c6:3e:29:6d:27:28:06:d7:f5:
3e:1e:2e:0d:5b:a0:3a:5b:3b:b8:67:8c:a0:64:51:c7:bb:f0:
63:20:f8:2c:64:d2:5a:be:87:cf:05:70:66:76:f8:25:52:54:
95:3f:c7:38:f0:5b:0d:62:b1:43:54:01:dc:b6:4e:0e:b5:65:
fb:69:ac:03:25:6c:fb:81:1a:0e:d9:33:d4:b7:74:32:0d:54:
82:ea:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:57 2025 by rpki-client