Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File: Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier: npXXEYTsV917FEPDfMR1MdkSHB6OJMpMVK8jyu5Yq+w=
Subject key identifier: 37:1D:D1:F2:7C:C8:04:A1:45:93:D9:F4:11:A5:C3:10:95:C7:EB:04
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer: /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial: 019749D60B7BA688295FDEFA51E4FC7F9F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number: 1411
Signing time: Sat 07 Jun 2025 10:00:53 +0000
Manifest this update: Sat 07 Jun 2025 10:00:53 +0000
Manifest next update: Sun 08 Jun 2025 10:00:53 +0000
Files and hashes: 1: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (hash: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=)
2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: HO4VYFZoJqDH6YeAMdtvwtj60SAtPmOoW7a1yfiITiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:0b:7b:a6:88:29:5f:de:fa:51:e4:fc:7f:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Validity
Not Before: Jun 7 10:00:53 2025 GMT
Not After : Jun 8 10:00:53 2025 GMT
Subject: CN=371dd1f27cc804a14593d9f411a5c31095c7eb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:89:d4:4d:08:a0:a3:6a:2e:cf:54:00:04:
5c:09:5a:c2:05:4f:90:74:ba:55:d1:b3:81:66:aa:
12:2d:b3:77:13:39:20:ab:ee:e1:20:6e:0d:64:82:
80:e8:00:94:f1:b4:70:ac:65:7a:7d:4f:9e:08:a4:
c0:07:13:b0:08:98:bb:cf:40:cf:ea:d8:d6:40:76:
52:6b:08:87:f0:ec:7c:e6:e4:ae:65:6e:7a:d3:25:
77:06:db:73:63:74:6b:5a:88:67:ee:61:67:ec:a7:
e5:8e:ac:6b:1d:fe:13:ac:51:7f:15:70:ea:75:e9:
d3:f6:d3:e3:2f:9e:3b:d3:57:e1:0a:41:5a:4f:8b:
6c:1c:50:6b:8c:e4:5d:5e:51:c7:f3:29:7d:16:f4:
37:d1:16:7d:0e:fc:90:11:ae:3f:59:42:c7:cc:28:
59:ef:f6:44:12:56:67:69:79:3e:db:90:32:37:6b:
ad:d5:75:5d:95:5c:d2:d1:ab:50:7f:41:fa:d7:aa:
b3:79:d3:2b:92:99:d5:33:87:4c:ca:c0:59:05:28:
c3:50:53:bf:21:9d:ba:db:59:69:25:37:8d:1a:ef:
95:b7:cd:08:b8:07:74:02:c6:2d:0b:88:d3:92:31:
81:96:46:fa:5e:a8:a7:67:b8:43:35:eb:82:20:b4:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1D:D1:F2:7C:C8:04:A1:45:93:D9:F4:11:A5:C3:10:95:C7:EB:04
X509v3 Authority Key Identifier:
keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:33:b8:80:ee:d0:6e:12:46:b2:44:42:33:49:04:c2:73:07:
12:9f:94:da:3a:aa:7d:e7:78:70:77:d9:1d:91:0f:0e:ed:d0:
fe:7f:96:70:5a:43:ae:e9:7c:70:7a:63:66:4d:48:8a:a5:93:
9a:09:eb:f4:cb:90:38:3d:0a:41:13:59:4b:cb:2f:22:45:8c:
71:75:d1:4b:b3:69:14:06:bf:09:4a:f2:9d:90:69:71:8b:de:
3e:da:d6:0d:53:f5:c0:f1:dc:5c:6e:a4:2a:a0:20:53:74:9f:
29:bf:e0:f2:5a:96:9f:5c:47:f4:12:3f:f7:f9:bb:32:f6:16:
48:d8:82:0c:ea:8a:19:a4:d2:db:d9:3b:d2:b8:6e:29:3d:ef:
e6:6e:6e:40:5f:56:70:c7:88:00:6b:35:b7:a0:82:7c:d7:18:
81:c6:81:6b:e2:85:95:9b:a7:3a:cf:5d:f3:f9:9e:c9:df:03:
46:ac:af:b2:62:ee:c5:54:b0:9e:f8:cc:80:39:a7:3f:e7:40:
93:1d:f2:b9:cb:12:66:f3:cf:85:f1:9a:12:85:53:8e:a2:2a:
bc:3a:00:d7:b5:e9:4b:d2:d9:95:5b:bd:43:3e:ce:2e:ab:79:
27:bb:d1:44:ca:29:24:27:63:38:5e:73:ea:72:2a:79:c7:fe:
05:dc:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:58 2025 by rpki-client