
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: uQtoYJ71ptsQWdQ3Ax15cGH6n/aGZ7eDaA2A9wj7BJ0=
Subject key identifier: DC:24:E8:25:D9:F0:48:56:55:19:5D:5E:B1:E9:BE:74:1F:71:76:57
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 0197597F9834F951C9467DCD308D2CECB0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 158D
Signing time: Tue 10 Jun 2025 11:00:23 +0000
Manifest this update: Tue 10 Jun 2025 11:00:23 +0000
Manifest next update: Wed 11 Jun 2025 11:00:23 +0000
Files and hashes: 1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
2: 4XJYPiN1fgyY_K6wVqkzO9GGpIo.roa (hash: HslWaDijgsXRLbUJY37P5SIKUX/YCI1vBK/fp1leFRU=)
3: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
4: ATev8_uhunQc5j7herGHoXGBx0s.roa (hash: raqWEdHQFWUAKbr4xna0wvj80ivdH8FgqZZk8a2xIoc=)
5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: IiB2nF+NnfFVK78dDQQwHoP98CGT0Cyn8hdl0S0IDjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:98:34:f9:51:c9:46:7d:cd:30:8d:2c:ec:b0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Jun 10 11:00:23 2025 GMT
Not After : Jun 11 11:00:23 2025 GMT
Subject: CN=dc24e825d9f0485655195d5eb1e9be741f717657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:49:4c:82:14:57:ce:37:90:54:84:b5:6e:
ff:ef:fc:29:d2:e3:ef:59:f0:41:e7:ae:dd:f8:16:
4d:e5:5a:8b:d2:64:db:e0:22:70:ec:92:43:3e:1a:
ae:58:22:f3:52:f0:16:32:ba:3c:14:14:cd:75:36:
ab:11:97:30:85:45:69:9f:52:cb:73:50:a5:7a:f1:
81:32:1b:3e:31:05:1b:3f:f7:24:fe:42:74:1f:0d:
df:7f:cc:34:17:a0:46:91:b7:87:44:35:5b:d7:50:
5d:f2:23:4a:fc:43:7c:1b:57:21:6c:9c:e3:4e:97:
1b:18:35:7e:75:d6:6c:7d:5d:9f:fa:31:0a:16:37:
ee:4f:7b:d4:65:a3:ed:d1:cd:13:2e:45:7c:be:9c:
7c:70:bd:0e:3e:94:ff:94:d8:f8:79:69:23:68:a0:
98:bd:c5:60:a1:1f:4c:26:89:71:97:0d:cf:fd:d4:
f3:14:42:ab:2b:62:8d:28:58:79:67:5e:48:fe:8c:
2e:4f:0a:52:6e:f6:b5:99:41:17:4c:27:84:0b:58:
94:70:fb:31:ed:be:0a:22:5d:2f:b7:9b:77:73:ca:
2a:69:5c:fa:58:3f:b7:c6:b4:58:8e:eb:bd:09:4b:
f5:08:25:f1:91:99:a4:e4:0f:d9:7a:58:2e:09:46:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:E8:25:D9:F0:48:56:55:19:5D:5E:B1:E9:BE:74:1F:71:76:57
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:21:37:4d:d9:8f:2e:c9:96:46:81:ab:5e:e7:0b:33:54:aa:
1d:66:94:5d:6e:e1:41:49:e5:e9:71:bd:4d:97:93:9d:5e:49:
9a:5c:26:a1:55:67:48:a9:4a:85:f2:fb:f4:ce:55:18:7b:7f:
b4:43:1e:27:e9:09:a5:30:dc:34:9d:8d:03:27:61:71:38:b1:
df:f7:9c:c1:06:f8:4f:8e:7a:d9:67:ab:18:47:5b:dd:17:27:
83:80:3a:aa:a3:84:00:52:9c:f0:41:c5:38:8f:3c:60:92:f4:
86:64:f2:b7:39:75:23:8a:96:d4:ef:a2:ee:e9:f5:b5:61:2f:
28:06:10:4f:63:bf:d7:04:15:cd:9f:b3:12:a3:0d:c7:29:ca:
08:b0:eb:9c:84:89:63:b5:9b:d0:33:17:a8:7a:77:05:60:a0:
a8:5a:f3:86:66:cf:9c:92:c2:49:d7:61:f6:01:52:05:77:5e:
ec:27:60:77:a6:59:97:fd:18:43:44:0c:04:9a:6d:5c:49:3b:
3d:ca:6b:b4:71:a8:64:43:80:07:e9:be:29:e9:f0:f1:2d:19:
5f:12:7e:7b:46:ec:76:32:ae:5b:09:a4:fe:e5:c6:6a:62:f6:
b1:fb:59:35:78:2b:c8:87:de:ec:51:3f:2d:75:19:bd:b0:52:
58:79:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:27:23 2025 by rpki-client