Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: 7RA+msZKnjF77DYj723ybWJYcBhkZBvmB7oJ/Ul9bTQ=
Subject key identifier: D2:7A:9D:E9:60:3E:19:FE:4A:48:9E:2C:A6:EF:DC:3E:9F:91:9A:86
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 01974A43ADCD675DF465A91192EB9A499DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 0437
Signing time: Sat 07 Jun 2025 12:00:38 +0000
Manifest this update: Sat 07 Jun 2025 12:00:38 +0000
Manifest next update: Sun 08 Jun 2025 12:00:38 +0000
Files and hashes: 1: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (hash: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=)
2: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: 5aQi7czJUIoF9e9HTfTbQParEq+LU8lVEmTA16sPlUQ=)
3: N16JeWvOmOgFnFHegC3uE95HfCM.roa (hash: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ad:cd:67:5d:f4:65:a9:11:92:eb:9a:49:9d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Jun 7 12:00:38 2025 GMT
Not After : Jun 8 12:00:38 2025 GMT
Subject: CN=d27a9de9603e19fe4a489e2ca6efdc3e9f919a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:0d:49:86:33:c8:31:f1:db:41:78:64:e5:
c1:32:36:a9:57:29:76:43:c3:e3:e0:b0:7e:70:cd:
48:9b:c6:a8:cf:22:9d:c8:46:50:5e:6e:62:a4:06:
37:ca:90:25:9a:ba:72:65:88:2f:7e:92:e9:a1:98:
01:1a:a5:06:d0:49:c5:5e:74:2c:b2:18:2b:79:f4:
cb:f9:69:aa:e4:39:f1:9a:fe:ba:1e:ef:dc:0e:a4:
3a:7f:9c:51:89:3e:5b:4b:0b:f7:fb:12:3f:da:f3:
ee:5f:f5:4b:29:c7:88:51:86:ce:9c:f4:94:45:fd:
d9:59:69:f5:ea:4c:64:b0:d9:7f:b3:fd:d5:5b:6b:
5e:d3:c8:ef:96:07:02:17:63:c4:53:0a:d6:0e:ab:
13:c9:82:e5:56:75:a7:11:e9:89:99:0d:ff:6b:e9:
75:51:6a:c5:82:4a:c5:98:37:bf:7a:e9:73:c6:2f:
d8:32:05:1e:9a:f2:97:e0:57:b9:8f:20:f2:6a:cc:
7b:90:69:e4:b6:f0:89:9b:6d:72:44:48:c1:bf:f1:
76:42:44:b3:4d:11:d3:2d:03:bb:d4:ce:5a:26:52:
cd:bf:f5:fd:25:fb:56:1e:eb:7f:af:6c:06:65:a8:
9e:ed:d5:08:67:ba:d7:fe:e3:a6:12:14:9b:c6:86:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:9D:E9:60:3E:19:FE:4A:48:9E:2C:A6:EF:DC:3E:9F:91:9A:86
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e4:ec:0c:88:47:f6:66:0f:db:90:17:1e:d6:95:2e:69:01:
5e:14:c1:02:1d:0b:88:f0:d0:d0:c6:3b:f4:ac:86:57:6b:3d:
dd:fc:f8:a8:74:a0:55:b7:75:ab:ec:e3:15:79:71:68:08:23:
80:a8:51:1c:b4:15:0c:53:cb:fc:8d:29:00:d1:cc:32:13:71:
ca:80:84:c8:56:34:b3:0d:e8:c5:1e:c3:7d:d0:58:67:a0:e1:
ce:d3:51:f1:38:36:42:67:bf:65:63:07:85:19:eb:45:15:6b:
c1:0c:ed:8c:6a:bf:17:17:e3:ae:6d:73:e4:83:5a:41:fa:b1:
a0:24:ca:ff:63:2b:6c:bf:80:2b:d2:5d:a9:9e:af:fa:ef:57:
39:29:7c:75:42:96:2a:88:f3:60:70:89:23:36:f3:d3:bc:5e:
29:8f:10:66:49:19:79:83:60:7f:48:9c:9c:e1:8a:6b:99:cb:
8e:83:f7:eb:b5:b9:35:ed:2f:26:d4:04:01:8b:6e:32:b3:a6:
f0:24:18:82:d0:57:6a:f5:7b:a3:b2:b9:9d:88:76:21:a1:66:
fc:9e:ee:93:8b:b9:a8:32:e7:d6:fd:c5:30:5f:93:f9:f1:23:
92:bf:4d:47:dc:92:1f:67:93:f1:81:4f:82:6b:0b:89:32:46:
6f:7d:1b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:42 2025 by rpki-client