Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
File: m7rm4-12beR6umaTu1r4pkiXQxA.mft (raw, json)
Hash identifier: +IHN3LtvOWUBq2/JbPyAKkYRoy+LR8Bp0l5tDcGGZqg=
Subject key identifier: 42:A6:F7:CD:0B:05:2B:9A:3D:47:5C:02:AD:52:ED:89:58:88:73:98
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Certificate issuer: /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial: 01974D0E1D7CB3E9E42D6AEB60B85A5CA02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 01:01:00 +0000
Manifest this update: Sun 08 Jun 2025 01:01:00 +0000
Manifest next update: Mon 09 Jun 2025 01:01:00 +0000
Files and hashes: 1: FNI-KOWU4HvYV7s0S8HSH_MAXKs.roa (hash: SxzdVdUSQKrcckNUFu+lpTFeygIkg6UP1Y+6mqUGLxE=)
2: JEJEXnX60I5Jo-xb1R1lG7VQj0s.roa (hash: l/gL9lI2eMfRXxgl8LBJmFmTtW4VYwoOIblpJwQi6UM=)
3: m7rm4-12beR6umaTu1r4pkiXQxA.crl (hash: /85c0HIcrqA2QAfwvOKDg+oYCBwjEh4E/T3MDtqhmhA=)
4: tKyKZjLEDoku_61jkuUZJsA6mh0.roa (hash: mS9ELNBChswUREefPfJwkVLPPBkzapMb0K1Iwkj0ZXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:1d:7c:b3:e9:e4:2d:6a:eb:60:b8:5a:5c:a0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Validity
Not Before: Jun 8 01:01:00 2025 GMT
Not After : Jun 9 01:01:00 2025 GMT
Subject: CN=42a6f7cd0b052b9a3d475c02ad52ed8958887398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:a1:67:ab:8a:b5:a0:88:23:4a:e0:53:49:
0f:69:4a:16:ca:aa:9c:de:93:6e:12:5a:fa:23:f6:
df:39:78:dd:ca:3a:fe:8a:b4:31:cb:86:c2:09:73:
2b:07:f7:19:85:15:c1:dc:67:83:25:5f:aa:a7:b9:
05:4d:1e:33:76:e1:c5:48:28:f8:aa:73:2b:e8:be:
68:9b:01:68:fa:5d:ea:ec:e6:85:6f:2e:a4:37:ed:
15:07:fe:0e:70:c3:51:e9:41:12:90:9a:af:09:ba:
4f:45:05:01:e2:a8:58:36:14:df:92:8b:9a:02:58:
06:9f:5b:30:0d:b8:ec:9f:5a:93:1e:ea:d9:6a:25:
9e:9b:ff:22:8d:93:e1:4d:0d:77:6c:2d:a2:93:54:
c3:5d:04:22:fe:e6:8a:bc:97:17:80:93:22:87:e9:
ef:8b:f9:1c:60:88:84:e5:2f:a7:45:c0:65:85:85:
18:cd:c2:0c:11:8b:9a:23:d9:d0:ca:42:97:84:7b:
ec:52:3a:94:af:8a:8a:99:8a:b2:62:8c:17:3a:fb:
ce:c8:b2:0c:cd:d6:0e:92:3d:b0:cd:e8:0a:86:42:
cb:40:64:59:0a:96:9f:0e:62:be:b0:c9:11:d3:5c:
9e:7c:de:88:1e:6c:cc:fa:29:14:3b:ff:43:cb:3e:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:F7:CD:0B:05:2B:9A:3D:47:5C:02:AD:52:ED:89:58:88:73:98
X509v3 Authority Key Identifier:
keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:22:e9:20:89:4e:3e:6d:cc:56:b8:70:bd:44:d2:00:78:a2:
4a:6a:66:eb:98:82:ef:59:24:29:3d:ae:27:1c:48:1f:a3:dc:
8e:f6:5d:1b:00:23:1c:3f:32:d8:73:d6:4c:a5:e7:b3:09:fc:
32:e5:e4:04:f4:82:17:ba:91:79:50:4b:d0:11:1c:ca:81:ad:
00:da:57:30:9c:42:d5:8c:6a:35:16:2b:e4:56:7c:46:d3:f6:
c4:66:a5:ad:ed:f9:fa:56:f5:22:de:4b:44:5c:07:6d:79:6b:
76:61:dc:19:62:28:b8:3f:51:e7:21:71:2c:b9:d1:95:07:ca:
11:ec:1d:1a:8f:38:b3:43:9f:30:09:2c:18:9f:1a:74:01:bd:
50:f3:a4:6c:8f:ab:a7:50:4d:0d:29:6b:b9:be:7f:d0:e5:73:
80:f7:5c:1a:a7:1a:52:0c:08:a9:1f:93:0b:59:4d:77:6d:83:
78:72:68:1f:b2:aa:6d:85:c7:ab:73:81:ed:55:17:ef:fa:f9:
b8:f6:37:a9:0c:62:70:85:ca:8e:65:9e:40:5b:a3:02:b8:49:
f6:8b:36:37:45:12:c6:8d:d9:ae:cf:19:df:6f:97:3a:30:40:
82:c5:68:a2:04:6f:27:38:31:49:cb:15:57:80:01:db:5d:6e:
52:b5:6e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:59:46 2025 by rpki-client