Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: tUvqjtIk80sZ6IjMJF/3KLbwk6+pzkFec7Oak7k1YqA=
Subject key identifier: B8:E7:5F:70:40:DD:8B:8B:5B:BC:FB:71:E3:F7:FD:79:E4:32:4D:CB
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 01975BDCB1716066D2F9EA13EE7A84A8AA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 0EA1
Signing time: Tue 10 Jun 2025 22:01:19 +0000
Manifest this update: Tue 10 Jun 2025 22:01:19 +0000
Manifest next update: Wed 11 Jun 2025 22:01:19 +0000
Files and hashes: 1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: 3uspFky7GUbmiQgoDz5dgEmLm2k0AYp/4ky0j8cNTSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:b1:71:60:66:d2:f9:ea:13:ee:7a:84:a8:aa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Jun 10 22:01:19 2025 GMT
Not After : Jun 11 22:01:19 2025 GMT
Subject: CN=b8e75f7040dd8b8b5bbcfb71e3f7fd79e4324dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:b8:3a:78:e6:7a:47:95:ce:46:b4:d3:6f:
5f:8d:1e:8e:18:a3:30:89:e6:71:38:1f:6c:bd:6a:
40:35:2b:a7:c8:09:34:e5:65:0e:25:37:99:cd:9c:
bc:92:af:c9:97:43:e1:8f:98:e4:3f:54:11:ab:76:
66:e8:6b:19:55:72:e9:4c:87:c2:5a:3e:74:ff:ab:
7a:47:08:dd:e5:ba:f8:3c:06:6b:87:25:d0:9f:81:
4c:e9:92:cf:f7:a6:47:16:db:77:6d:52:a4:10:6e:
df:6a:26:ef:f4:a0:c6:e7:25:e7:c6:c4:96:ca:06:
af:de:67:1c:40:18:16:d0:92:12:6a:13:5a:60:9a:
41:6e:ce:a6:e8:db:cf:7c:fa:1c:7f:15:6b:5f:a6:
4a:5d:05:67:81:bc:f0:3e:a7:a5:ef:be:28:91:83:
b9:e0:8d:42:b5:69:1c:ae:5e:ff:77:55:04:fb:b8:
d6:4d:57:95:d5:2e:b5:76:03:cb:19:fb:32:76:bf:
76:f1:00:34:f3:84:87:bb:d8:62:40:6b:b4:79:a0:
b6:76:77:8d:ee:30:78:6c:31:ed:ea:e5:4e:92:47:
67:a1:99:30:02:98:82:97:27:98:aa:82:10:f2:9a:
9e:65:2b:7f:d9:7d:1c:a8:e1:93:ff:ef:da:94:3e:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:5F:70:40:DD:8B:8B:5B:BC:FB:71:E3:F7:FD:79:E4:32:4D:CB
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d7:2e:a4:a2:f9:3b:15:39:fa:5d:02:92:ac:36:7d:65:1e:
27:cd:5e:ce:fd:00:92:53:e3:58:71:71:98:b2:d4:17:2b:37:
d4:2b:43:77:44:b6:4e:f7:71:3e:f0:00:fd:db:15:8e:e5:96:
9b:1c:45:5d:26:a7:fc:37:a7:47:43:e1:02:57:b3:a9:81:5a:
b8:37:e6:e6:a3:e5:12:e4:48:4d:61:2c:ca:7a:c2:e0:26:70:
0e:3a:72:97:20:49:1d:a4:52:a4:4a:1f:c6:63:68:af:12:2e:
a1:8b:b4:48:a5:f5:8a:59:fd:f0:05:bf:d3:9f:b7:a5:e5:42:
ea:43:c0:1c:1a:a3:2c:d6:a4:70:f8:1b:63:95:64:11:90:68:
5c:2e:0d:6f:11:66:16:82:13:61:a1:f4:50:30:86:f6:0d:f3:
2e:b0:22:01:a4:90:9c:e4:83:11:51:27:12:72:74:51:1a:e1:
97:59:a5:e6:96:73:53:18:8b:ab:5d:06:42:6e:a9:8b:86:d2:
6d:41:e3:bd:79:54:c6:20:09:c8:c2:46:83:6a:c5:c4:38:e8:
7d:09:70:be:a9:87:23:a1:46:c1:41:4e:e8:f0:84:b7:5a:8c:
11:61:d4:18:98:1a:7a:63:db:55:4d:91:13:bf:46:a7:f5:7d:
15:0e:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:45:01 2025 by rpki-client