Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
File: MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft (raw, json)
Hash identifier: RIGwX0MCEru4M9CrtG7R/ejV8f2vbI9UpaocsFTIZnQ=
Subject key identifier: A5:B6:05:3B:E6:E8:24:0A:97:84:CF:0E:F2:7E:6D:6F:01:1F:B4:32
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 0197470C0982BF7E677DABE5C58081F6FC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 21:01:00 +0000
Manifest this update: Fri 06 Jun 2025 21:01:00 +0000
Manifest next update: Sat 07 Jun 2025 21:01:00 +0000
Files and hashes: 1: FhZSLFV8-vM046QI8Vb33R1E0e8.roa (hash: f3eqnqdq9rWk7n9nPOwGunFqubODgfs5rafbqH5/HQw=)
2: MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl (hash: ChN74oFrFBm32yuMv1FN6ZddF9tqAl3KNIfyQ3rB2Eo=)
3: X-ClDjMzAtgNyKBr2k9TMrqu3vE.roa (hash: 7Ip8LVyEIhcWLOz6eWH0cRFN5zErMvUCRSSMLokd5pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:09:82:bf:7e:67:7d:ab:e5:c5:80:81:f6:fc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Jun 6 21:01:00 2025 GMT
Not After : Jun 7 21:01:00 2025 GMT
Subject: CN=a5b6053be6e8240a9784cf0ef27e6d6f011fb432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:a7:5c:0f:0e:a6:ff:b4:95:f5:3c:44:af:
be:f3:f0:bc:9a:d8:7c:54:3d:ba:8d:82:56:62:22:
17:12:2e:76:81:a3:cd:e8:4c:90:af:ab:81:46:c9:
8b:42:38:06:41:b3:dc:1b:2b:9b:28:a5:d3:ad:0a:
05:c1:8d:07:85:fb:99:09:c1:48:1d:7b:cd:04:56:
a6:17:f5:de:68:c9:36:8a:53:3f:0a:4e:ba:44:27:
25:98:05:b6:94:a3:52:63:30:85:fd:44:8e:a2:f4:
5d:8f:46:8d:2a:d6:47:c5:f5:ea:31:66:f6:57:fd:
2b:8c:a0:23:07:a3:8f:55:ff:21:4e:75:40:66:1e:
22:7c:ef:5d:72:a8:70:65:e5:d6:ed:bb:24:e5:c0:
e1:73:7d:c8:7a:cd:2e:ed:5b:78:eb:f6:06:a5:8d:
ff:38:f1:24:1f:fa:5e:2d:85:b4:b8:76:eb:86:11:
81:a6:30:77:d7:27:d0:c0:07:73:8f:d7:4e:ad:a9:
bd:08:c1:bb:e6:0a:99:a2:66:0e:0c:1e:6a:5c:da:
c2:b7:7d:05:b7:9d:4a:12:b8:0e:ef:15:e1:76:4f:
45:fd:97:02:10:cc:04:1e:d4:77:5d:18:4f:04:9a:
b0:57:a8:43:86:7a:15:22:aa:0b:a9:7d:aa:93:00:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:05:3B:E6:E8:24:0A:97:84:CF:0E:F2:7E:6D:6F:01:1F:B4:32
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ff:25:14:77:db:91:9e:54:9b:64:03:84:45:28:50:29:f0:
d4:da:17:d5:a9:c8:8a:f4:06:85:1c:26:7f:57:17:57:8f:70:
45:26:89:6a:c0:e4:fe:2a:52:48:63:bd:52:4c:b4:73:5c:bc:
01:db:78:44:9a:a1:59:99:1a:7f:1f:db:0e:2f:b1:68:e8:ce:
58:32:92:a4:dd:41:4e:72:34:53:d6:4b:76:53:2e:9c:8f:ea:
aa:13:cf:52:fb:63:2a:4d:26:8a:c5:e8:08:c3:3f:56:bf:fd:
3d:b2:7b:5a:48:52:20:44:6f:d5:e5:bc:de:5a:84:fb:14:71:
4e:74:b0:63:3e:19:71:d3:e2:0b:e0:ad:68:ed:d1:54:97:a0:
ec:c7:37:a1:88:79:f8:34:e9:62:e5:ee:83:ab:c1:57:0e:7d:
01:b0:19:96:28:42:cc:25:79:8e:93:84:d7:69:47:e7:1b:82:
b5:59:93:f2:80:b4:a9:73:0b:f6:7b:ea:1f:ba:63:13:f7:51:
f3:bc:01:2e:21:e6:cb:6e:f4:99:66:8f:7d:ac:09:c5:c9:16:
be:9a:bc:d7:3a:f4:6f:17:6e:9f:e4:dc:ed:ab:1b:1d:12:62:
86:32:03:71:a2:a0:01:14:b8:a6:ca:50:9b:e0:ad:78:71:62:
b4:a9:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:32 2025 by rpki-client