Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: in5521UeYphKJZVXuwXNpUqAczRYdBTo3/zdQZ4FV0U=
Subject key identifier: 43:36:06:97:BD:6F:2C:C4:20:60:93:C9:5E:32:0E:78:32:E7:2C:FC
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 0197466745BEB81FB0C3609CED18A6311AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0BFD
Signing time: Fri 06 Jun 2025 18:01:02 +0000
Manifest this update: Fri 06 Jun 2025 18:01:02 +0000
Manifest next update: Sat 07 Jun 2025 18:01:02 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: un9JX1LJq3UwG7yhywjlNk+l4NNLj2ytEzivWZK6xLk=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:45:be:b8:1f:b0:c3:60:9c:ed:18:a6:31:1a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jun 6 18:01:02 2025 GMT
Not After : Jun 7 18:01:02 2025 GMT
Subject: CN=43360697bd6f2cc4206093c95e320e7832e72cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:6a:b1:92:cb:f1:94:43:ef:c1:05:0c:a2:
b4:40:64:39:bf:48:33:10:50:df:05:a5:37:a0:a9:
4c:b2:a1:4b:b3:1f:56:7d:4e:7b:24:32:3e:25:06:
4e:b8:c6:e5:db:54:23:a5:81:cb:0b:3e:60:0a:8a:
93:f9:5f:85:e1:ce:32:02:ba:1c:84:e6:69:e0:56:
8c:6a:d7:fd:0d:1e:f2:58:59:25:0a:e3:dc:19:26:
ae:a4:bc:1e:aa:ac:3b:06:2a:1d:2c:20:07:d9:2f:
a6:27:9f:89:fe:b9:53:51:fd:54:2d:d3:bf:69:b3:
fa:4c:02:2d:8d:64:bd:b2:62:8c:4f:26:2f:63:e1:
c6:fa:26:0e:a0:d5:a2:5e:d4:bb:65:c0:26:dd:a6:
5f:c8:c8:9b:0b:dd:48:45:8c:e6:f0:3d:5b:0a:10:
22:9b:43:89:5c:ef:16:10:28:89:c5:3a:2d:3e:4b:
23:f6:d4:f9:3f:47:3b:57:10:a7:24:fd:93:9a:94:
28:61:3a:93:1c:21:a2:78:39:38:83:3a:bf:a6:a2:
14:d0:b3:62:c7:60:66:29:db:69:60:5a:c0:da:f9:
c7:6a:4b:9a:70:f7:94:99:f4:63:5f:c7:82:bf:93:
ba:17:fd:05:1d:04:2b:9d:01:9f:84:36:46:20:9b:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:36:06:97:BD:6F:2C:C4:20:60:93:C9:5E:32:0E:78:32:E7:2C:FC
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ac:de:fd:a3:c4:e3:3a:8f:41:64:08:88:3b:b6:48:94:36:
c4:66:b6:0e:b9:b5:00:cd:5f:cb:54:c2:9e:d4:ce:97:44:c1:
4c:8a:bd:b2:ba:7b:a1:5c:76:3d:bb:b2:7f:14:96:04:ce:cd:
cd:74:3f:c9:01:a0:bc:04:71:76:e7:23:6b:a0:08:a3:19:a9:
35:b8:d5:7a:b7:f3:a6:38:d9:62:18:4c:98:9c:a4:57:12:12:
5d:2b:1d:c4:92:94:ec:db:f2:66:fd:80:b8:04:cb:f8:c2:97:
82:b3:f0:e2:85:ad:08:31:b6:e3:f7:4c:8b:64:a1:ad:39:7a:
e0:a2:f3:47:b4:16:f8:d7:b0:ba:3a:60:69:f3:e2:c9:20:9c:
64:df:5b:64:99:12:2f:76:39:f9:de:34:1f:c7:74:15:54:ba:
fb:be:bf:77:15:ac:da:42:b9:4e:bb:0a:f2:ff:75:f6:11:98:
82:77:17:55:3a:fc:b3:e7:2d:64:0d:76:9e:41:d4:2c:98:2e:
a0:32:9b:d4:6c:90:00:39:c9:5c:0c:79:c9:54:6d:76:e1:02:
a3:89:33:db:24:7a:80:08:db:dc:b0:80:df:de:e0:30:28:e1:
1b:a7:0b:16:41:9f:b0:5f:3a:b8:9d:e8:a0:38:5e:bd:6d:02:
9c:5a:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:43 2025 by rpki-client