Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: 9YCvgkpZNA50H4IlZ9geC6eket8BjYh+alfKM95Kqlk=
Subject key identifier: 9B:B3:3D:BD:88:FD:82:E0:0F:E6:A7:15:2D:C3:E5:8B:9D:DC:29:A3
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 01975E6F708CAF5FEEDA55D3F09397E6FC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 1519
Signing time: Wed 11 Jun 2025 10:00:50 +0000
Manifest this update: Wed 11 Jun 2025 10:00:50 +0000
Manifest next update: Thu 12 Jun 2025 10:00:50 +0000
Files and hashes: 1: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (hash: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: wRqsKCDwPhhuKM2SFQSl5xk0IfMm5BXNwOd/hJnF20M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:70:8c:af:5f:ee:da:55:d3:f0:93:97:e6:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Jun 11 10:00:50 2025 GMT
Not After : Jun 12 10:00:50 2025 GMT
Subject: CN=9bb33dbd88fd82e00fe6a7152dc3e58b9ddc29a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:b3:9f:7f:ff:49:10:61:1c:ed:b7:bc:7e:
1a:d8:15:1c:4e:4b:11:32:bb:f0:2c:38:8d:07:a7:
ea:16:83:63:9d:86:fb:22:c9:63:22:9b:92:46:7a:
6a:e2:91:12:be:91:8d:5f:9b:e7:54:dd:64:5f:e5:
fb:3d:ed:af:46:6c:4b:2d:c5:c2:af:66:4b:ef:09:
17:0a:14:c3:62:23:22:a0:ac:e2:ab:38:e8:1a:0c:
48:25:75:79:2b:df:01:1e:2c:3e:07:bd:eb:2c:c3:
2b:f4:85:f9:27:1d:d0:08:2e:7f:d5:c7:55:7e:bb:
a1:f0:33:37:72:05:6b:f9:3a:21:44:42:35:a3:e1:
c8:80:98:43:a5:21:d8:a7:dc:2d:c0:c7:d1:fe:63:
e4:7c:68:a7:a7:e7:34:8b:93:ad:d0:cc:d0:74:29:
3c:00:8e:97:f6:82:9c:48:13:82:33:a3:11:af:6d:
5d:a0:3b:11:ff:4a:a7:1b:9f:9a:fe:11:24:be:29:
63:5f:2f:aa:77:39:a7:d2:5c:e5:07:08:ed:7b:c4:
ca:c7:76:f8:4d:0a:a0:b7:46:85:b3:93:e7:67:b3:
09:08:e5:f2:52:90:2e:2c:97:f7:10:b7:b4:e1:ec:
cc:62:df:0b:5c:43:e0:67:0a:65:c1:90:3c:d2:45:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:3D:BD:88:FD:82:E0:0F:E6:A7:15:2D:C3:E5:8B:9D:DC:29:A3
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0d:1d:8f:1f:51:72:3c:df:30:fd:ad:3f:f8:30:d2:c8:36:
6c:e8:61:3b:e1:19:4d:75:22:9a:55:63:fb:18:87:99:49:45:
5a:db:19:c6:63:2f:71:a0:5a:37:d4:33:16:be:42:34:4f:ab:
14:f2:44:9b:60:5c:2d:17:c2:78:d9:b0:d2:22:ab:7a:3a:4f:
d6:1e:8b:13:ae:13:3d:06:bd:7a:8c:1e:7d:21:5e:27:d0:f6:
56:8e:a1:85:e0:8e:53:62:6b:f2:69:f6:65:ca:40:19:f6:09:
94:62:fd:13:54:b8:99:ac:9c:dd:91:62:ca:dd:98:53:2e:fe:
9a:ac:43:a5:7f:48:88:70:d3:4f:e4:e0:27:77:00:db:a1:e8:
29:bd:3d:6d:de:3e:a6:fc:92:dc:6a:fb:d8:1e:e9:39:23:0d:
07:11:df:67:95:c2:4c:1d:78:10:21:7b:3e:8c:08:86:dc:b0:
9e:e8:90:5f:10:8a:c5:f9:39:08:be:cd:0f:62:e6:c8:34:e1:
9a:13:78:fe:da:f8:7b:74:54:5c:d9:27:78:f2:b3:09:2d:b2:
95:84:ea:38:d1:a4:ee:0a:66:23:5b:c4:78:0d:e6:43:61:83:
f1:4c:e1:20:8a:68:75:0d:d6:3a:df:18:70:54:f1:8a:b3:87:
a0:29:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:20:11 2025 by rpki-client