Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: 1R+uF241vOQZu2u3ZP9MF10OMW0nyFWu2SBxw3CQG/Q=
Subject key identifier: 6B:C5:8A:6C:1D:DE:06:A5:56:F1:D7:C3:65:DC:AC:AF:63:3B:13:1A
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019754C72A757D943F665D4944577A42B5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 0EE8
Signing time: Mon 09 Jun 2025 13:00:28 +0000
Manifest this update: Mon 09 Jun 2025 13:00:28 +0000
Manifest next update: Tue 10 Jun 2025 13:00:28 +0000
Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: Cqf4hw+IoUB2Km6+Tg+nlyT7dL1qEj2fmNEphobopa4=)
2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=)
3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:2a:75:7d:94:3f:66:5d:49:44:57:7a:42:b5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jun 9 13:00:28 2025 GMT
Not After : Jun 10 13:00:28 2025 GMT
Subject: CN=6bc58a6c1dde06a556f1d7c365dcacaf633b131a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:32:9a:ab:b1:30:5b:ca:96:c8:2e:42:88:
0f:77:3a:2b:e3:25:36:44:f6:a9:5f:94:21:de:76:
54:7f:95:37:4f:ef:a5:a6:28:27:a4:bd:a3:c6:e3:
d8:8a:08:97:bb:40:06:43:62:57:0d:f4:03:9e:3e:
1d:90:84:c7:a2:a5:4e:fb:27:5d:b6:3d:58:7b:13:
4f:b6:a2:b7:8e:08:78:7b:a1:6a:4a:14:75:e8:9b:
16:36:4e:f3:94:aa:3a:4f:2b:0a:80:9b:d7:77:fb:
0d:eb:e1:65:8c:49:00:0a:40:b2:a7:25:4c:e0:70:
5c:cd:65:d8:0a:c8:6c:88:27:bd:fa:41:c1:42:32:
ac:1b:b5:bb:d8:29:63:36:0a:ec:4e:58:4a:8c:e5:
6b:64:32:78:54:95:36:07:21:af:a0:96:ed:2e:df:
28:7c:de:88:97:05:e2:16:dd:55:29:46:4c:9f:ec:
0e:c9:a4:ce:2a:56:ac:58:33:09:10:e6:4a:d5:d2:
4d:9e:50:c1:a3:ca:fb:13:d1:60:8f:fe:27:3a:ed:
80:1e:72:58:16:55:81:dd:7d:57:39:b0:82:13:1e:
e5:1d:14:d3:d0:29:9e:10:db:d7:83:23:73:a4:71:
45:d0:b9:a5:7c:95:62:41:7e:d8:45:58:4e:a3:f0:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C5:8A:6C:1D:DE:06:A5:56:F1:D7:C3:65:DC:AC:AF:63:3B:13:1A
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d9:42:3f:35:75:99:43:cb:71:1c:fc:b2:49:67:24:57:0f:
32:c7:0b:81:51:c4:9c:ed:6b:64:5f:c1:26:b7:d9:c6:6b:8b:
20:ea:3a:ad:99:f7:1a:f3:ba:fd:d2:74:e5:ba:84:5e:93:ce:
b0:3b:b7:dc:ed:72:fe:bd:c0:5d:49:b0:8b:b4:ce:7a:75:84:
42:42:3b:69:d7:e8:95:5e:dc:4a:95:85:aa:8d:a4:77:49:d4:
9b:92:d6:b8:36:3c:c2:2a:83:3b:01:91:ae:f2:82:66:bf:c7:
6e:ec:06:b7:6a:bc:d1:bf:5a:48:61:23:07:87:6b:90:fa:d3:
58:5f:d0:ce:d6:d5:1e:b8:56:72:13:af:97:29:2f:99:5f:32:
11:bc:9c:42:c8:4f:e1:c9:ca:22:76:13:2e:0c:0f:f8:e8:99:
b2:07:8f:03:fc:7a:55:b7:30:7e:6d:ee:01:29:07:ce:64:b7:
47:18:be:a9:dc:8b:72:d4:3c:ed:86:fc:b4:6f:ea:0b:f8:b5:
3e:83:56:1f:e2:d1:79:b8:de:3e:ea:05:a2:b4:a5:6b:8f:d5:
ad:3a:40:47:6a:b8:bc:20:2d:99:89:81:8c:b9:64:c1:d7:3c:
6d:9e:c0:a9:4b:a9:84:15:0f:64:f7:54:51:f0:47:ff:cf:da:
78:bb:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:32:14 2025 by rpki-client