Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: 0FrOAtpvM8WlC1RPDBBwRiw4BTP3TxZKgpWVoCvDGK0=
Subject key identifier: B4:57:60:45:7D:6D:87:07:4C:DD:29:7D:AE:46:34:FE:AA:86:CE:9A
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 019752D92F3DBA50D890252B3A1E95FD4603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 1513
Signing time: Mon 09 Jun 2025 04:00:54 +0000
Manifest this update: Mon 09 Jun 2025 04:00:54 +0000
Manifest next update: Tue 10 Jun 2025 04:00:54 +0000
Files and hashes: 1: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (hash: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: G/aczA4BQMY/mI8T0Ie7rf2dN0HERnegDnqMtmOGJVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:2f:3d:ba:50:d8:90:25:2b:3a:1e:95:fd:46:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Jun 9 04:00:54 2025 GMT
Not After : Jun 10 04:00:54 2025 GMT
Subject: CN=b45760457d6d87074cdd297dae4634feaa86ce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:48:49:94:27:32:7b:50:a4:ff:3b:9c:e2:
03:6c:46:cf:dd:e0:6c:c1:64:11:83:50:29:d2:6c:
b8:fa:cb:ac:56:ec:b4:39:34:14:c9:75:9b:3a:e8:
29:ac:fb:a0:0e:d1:7f:89:73:24:ba:8b:d1:92:b8:
03:49:9f:e9:bd:6f:56:1e:2f:ce:0f:55:36:18:13:
9c:e8:41:2a:bc:01:98:40:a7:6f:1a:28:8e:48:64:
b1:72:ce:f8:94:68:79:b8:ee:c2:51:86:03:72:34:
12:52:9c:7e:0a:7d:b9:85:a8:0f:84:d7:e1:81:44:
bd:df:4a:70:66:f8:38:24:dd:7f:a7:e3:0b:73:c0:
c3:4d:e7:be:38:17:c1:a9:90:f6:9e:2d:fb:b8:18:
c9:eb:ac:46:7b:17:e3:d9:d8:2c:dd:e2:18:cd:c0:
39:7d:4c:ea:3b:7e:e0:08:7a:8f:b5:c7:fe:2c:20:
a4:52:77:68:10:92:02:61:03:39:b7:7c:be:e0:63:
6a:d8:21:a9:4b:ca:8a:9b:8c:71:73:71:a9:6a:2b:
cd:95:d6:88:cb:bb:9d:f9:0b:86:75:a5:08:6f:bd:
2b:ff:da:f7:5f:ae:46:80:47:5e:3f:cb:b8:a1:f4:
86:c5:63:62:dc:31:32:51:6c:f3:80:26:b9:a5:e0:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:57:60:45:7D:6D:87:07:4C:DD:29:7D:AE:46:34:FE:AA:86:CE:9A
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:95:f1:05:5d:72:38:df:5a:9c:19:f1:9e:b8:57:c2:2e:aa:
c4:31:12:52:52:d9:a8:b1:2a:00:81:fa:f3:b2:6d:ac:c5:c1:
aa:53:5b:58:32:ef:b2:65:35:73:e8:46:d9:79:db:80:fb:b3:
8c:34:8b:dd:f5:74:41:7e:b3:4a:ae:bf:8e:22:62:be:0a:8c:
58:59:42:9f:07:ef:7f:8c:38:22:73:da:b5:51:1b:9f:b9:23:
79:f7:03:5e:d9:9c:ad:5f:4b:5b:da:21:ea:5e:11:98:c1:21:
0e:24:4d:8f:f6:53:bf:6c:b6:9c:4f:c5:ba:5b:46:64:34:40:
e7:bf:40:72:32:a9:8a:0c:35:31:a9:38:ec:9e:1f:c3:09:d3:
e1:6c:0c:11:34:ec:02:04:69:08:3f:1b:e5:0f:16:67:65:19:
90:b4:70:b7:3c:b6:30:34:9b:dd:98:ed:25:69:d0:d0:bd:d4:
98:ab:2f:d6:c2:96:5b:72:e2:8e:68:d7:51:34:86:21:a1:e1:
9d:35:9d:f5:31:ab:57:5d:f5:d8:f5:7b:55:f0:2b:68:52:c2:
2c:33:9d:a7:f0:cf:f8:3e:ac:ad:20:7c:0d:ae:f3:c7:0d:42:
1a:7c:f8:25:4f:90:9c:b1:af:83:ad:cc:89:c8:b9:29:f3:9d:
5a:d3:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:16:13 2025 by rpki-client