Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: JRsVA5xL5VOTPV6+1C1te1m+doblGIBEKLReMEJmBz4=
Subject key identifier: BA:03:A7:C4:D0:89:F3:C9:96:F9:67:EE:CC:3B:8D:07:7C:F6:77:11
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 01976094B0DA65C9DB6590C97A0254E2CDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 20:00:46 +0000
Manifest this update: Wed 11 Jun 2025 20:00:46 +0000
Manifest next update: Thu 12 Jun 2025 20:00:46 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: p9G4KAZnTCAciyyqvPrSXG83WsXjtWZqkUC6DPkZulw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:b0:da:65:c9:db:65:90:c9:7a:02:54:e2:cd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jun 11 20:00:46 2025 GMT
Not After : Jun 12 20:00:46 2025 GMT
Subject: CN=ba03a7c4d089f3c996f967eecc3b8d077cf67711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:28:e5:b2:b6:0e:4b:92:46:10:18:6c:35:
51:6e:16:8d:dd:65:9e:b0:ea:de:a8:13:78:14:4a:
72:38:e5:37:0a:7a:6e:4d:90:c2:d0:67:6a:fb:c9:
bd:7d:4f:6b:b2:6a:8a:26:74:47:6a:c4:4d:8c:78:
31:3a:db:06:30:96:c0:b7:64:9b:48:86:e5:d5:2b:
d4:f2:ac:c5:12:96:b6:c5:50:8f:e7:a3:72:ee:bd:
78:00:6f:74:80:d7:42:ce:3e:34:3b:a9:06:54:5d:
2c:33:ec:58:42:dc:33:2e:ab:68:92:33:04:34:13:
27:b3:01:63:0f:88:ce:f3:00:72:84:6f:6f:fd:7a:
18:95:f9:f8:28:29:f5:65:c3:83:63:80:97:57:09:
e1:3a:c3:41:56:d2:d7:f7:90:40:41:d5:b5:13:33:
1e:71:72:50:69:9d:90:c1:ba:9e:bf:7c:60:1a:13:
f2:00:64:ec:33:3c:9b:df:c4:fa:c5:34:39:55:6c:
f8:f4:f2:ae:d8:43:bf:21:f1:7c:89:e4:9b:04:2a:
7e:09:8e:3e:6c:2b:be:f7:52:95:2e:9a:4b:db:25:
c2:2c:7f:82:ac:0a:53:af:51:5a:e2:19:ab:fd:44:
1a:8b:ef:fd:69:cf:44:80:93:89:94:2b:af:e8:64:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:03:A7:C4:D0:89:F3:C9:96:F9:67:EE:CC:3B:8D:07:7C:F6:77:11
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a5:91:92:18:dc:f2:d2:46:e6:ad:a5:35:69:2a:19:60:8c:
cf:08:8e:fd:1a:7d:f0:13:78:fb:06:7f:73:f7:92:fa:87:e2:
ff:4d:0f:d2:15:7f:d9:ff:8e:c0:d8:cb:5e:40:0d:84:a4:c5:
67:de:3b:e0:ed:aa:b2:b5:91:89:f3:bb:e9:08:2c:d3:5d:17:
88:4c:6c:6e:f4:1a:49:b1:23:38:45:fc:9b:be:a1:87:0f:84:
04:1b:4b:12:59:f6:e0:9d:c1:e7:12:03:f1:36:d8:61:9d:55:
26:7f:93:07:4d:cf:b6:f4:c5:3d:88:d6:a6:02:37:2a:03:f1:
ca:7b:96:37:81:06:91:36:f7:a5:e4:88:af:b7:27:61:48:d1:
1f:9e:ff:a7:9e:1e:cc:22:87:74:30:4f:4d:7f:59:d1:19:90:
34:b7:3b:27:7c:1a:a0:aa:4e:a6:ce:d8:5e:ff:f4:f0:ed:cc:
a5:9c:06:29:b2:5f:6f:b2:f9:c6:48:ad:45:00:36:10:d7:40:
96:6e:d4:2c:7b:63:b3:b0:b3:94:0c:83:fe:0f:36:c7:84:d9:
80:7d:2d:26:6e:27:85:f9:fc:fc:6d:ee:6f:8b:f5:47:be:89:
86:4a:2d:18:56:8f:6b:e1:72:06:7e:38:a1:04:93:f3:f2:61:
12:15:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:07:07 2025 by rpki-client