Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: mWOId9RZuPP+Hin1BX3NUMQ9v5mxOMd/4iUWb+cPRPw=
Subject key identifier: D6:66:16:5A:FE:95:2E:72:71:12:7B:B7:32:AF:C0:0C:BA:01:B5:8A
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 01975DCB67B4D469EA3205CB9D371483CC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 0EA2
Signing time: Wed 11 Jun 2025 07:01:40 +0000
Manifest this update: Wed 11 Jun 2025 07:01:40 +0000
Manifest next update: Thu 12 Jun 2025 07:01:40 +0000
Files and hashes: 1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: L6PDQTmk6lA3GHMU3ouG55bjOqY5Z2zkIXLC6/mfGe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:67:b4:d4:69:ea:32:05:cb:9d:37:14:83:cc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Jun 11 07:01:40 2025 GMT
Not After : Jun 12 07:01:40 2025 GMT
Subject: CN=d666165afe952e7271127bb732afc00cba01b58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:30:0d:dd:f5:b4:7e:1d:32:1b:90:e3:37:
8a:f2:a4:0a:60:b1:7a:25:b7:79:c6:a6:2f:ed:38:
7d:fb:68:d9:d8:d2:54:b3:b7:26:eb:56:e3:de:3f:
44:ca:1a:bb:e9:ef:bd:cd:f3:9e:a3:48:ca:43:ae:
f2:de:3d:6e:e8:7b:8e:e9:da:ba:e9:a5:96:cd:2c:
03:57:32:4f:48:01:9c:c7:90:3e:37:07:1e:bb:d4:
37:1c:61:ca:37:bd:7f:85:ca:3d:e4:ea:50:42:b2:
f3:ef:a1:2e:61:22:b1:59:cd:a8:19:20:6e:61:b6:
09:53:31:95:36:49:01:4c:48:4b:83:d2:37:d0:e4:
e3:56:80:f1:e1:63:b5:b7:cf:cc:4a:30:f2:dc:e4:
55:ae:73:7a:34:32:3b:f9:b4:a5:2f:b7:05:b3:cf:
48:76:d4:32:b9:c2:b5:97:de:31:50:78:bc:de:17:
6d:d9:f7:73:49:31:94:16:32:65:51:e9:64:f4:d9:
2a:59:ac:2e:14:15:74:d8:a2:8c:2d:50:68:3a:84:
c7:46:e1:a8:bd:1c:5f:43:7d:de:72:81:d4:72:97:
96:84:fb:f8:ea:90:d4:54:15:64:c6:87:25:d9:0d:
9b:9a:d9:60:a5:bb:0d:51:13:be:50:08:f1:89:4c:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:16:5A:FE:95:2E:72:71:12:7B:B7:32:AF:C0:0C:BA:01:B5:8A
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:63:72:3c:ca:a5:e2:48:df:67:bc:f0:cc:cb:42:d4:43:7b:
5c:c0:ed:09:1f:47:5e:39:60:27:c1:f7:11:12:98:49:25:fa:
69:3e:bc:be:eb:59:19:8f:f0:34:c7:f9:0f:3c:35:c6:4c:c9:
1f:af:c1:5b:bf:a5:d7:fc:e2:3c:5d:8f:86:0f:6c:a5:41:a1:
f0:81:f4:42:a6:93:eb:bc:e5:18:b2:5e:79:c3:f9:ad:1d:f9:
dd:7f:fe:24:1a:15:0c:30:3e:c5:00:36:c4:ec:a2:be:74:04:
75:ef:e5:38:25:69:d0:b7:59:c3:a8:e3:f0:3e:c2:08:24:a3:
c3:ab:37:37:48:57:29:15:59:ec:b5:97:1c:48:63:cf:aa:31:
19:e8:72:46:9a:f1:f3:8a:13:a7:63:81:9c:19:76:19:c3:08:
3a:41:9c:a4:06:0d:99:42:3b:f7:fe:1e:f5:fa:09:f6:a1:23:
f5:31:1f:8d:45:89:7f:77:0e:a6:6f:8f:48:a5:31:d2:10:ed:
de:f2:7e:2f:93:08:9e:46:26:fb:2e:e2:53:b3:f4:da:84:18:
6b:66:7b:58:21:cd:64:dd:16:26:e5:15:7e:c1:2d:91:af:8d:
09:26:f3:e7:6d:17:df:8f:ed:ac:82:91:4b:56:63:04:47:b1:
69:b7:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:57:24 2025 by rpki-client