Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier: /+pWu+Om7YKm0ydJrv8pw8ZD+8UROuqL+4nwf21JzS0=
Subject key identifier: 8D:E7:D3:0F:3B:34:6E:D6:FB:39:71:3D:36:A8:F7:24:D8:71:74:7A
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 0197499EE4F97796849E613339B07FA6FA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number: 10BB
Signing time: Sat 07 Jun 2025 09:00:39 +0000
Manifest this update: Sat 07 Jun 2025 09:00:39 +0000
Manifest next update: Sun 08 Jun 2025 09:00:39 +0000
Files and hashes: 1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: Mi3nIXi4C/5RXjnLCpSvRfjfq4kyq+aXKDe9NCW0lEY=)
3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:e4:f9:77:96:84:9e:61:33:39:b0:7f:a6:fa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Jun 7 09:00:39 2025 GMT
Not After : Jun 8 09:00:39 2025 GMT
Subject: CN=8de7d30f3b346ed6fb39713d36a8f724d871747a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:43:a7:d5:e2:8e:b4:e4:0d:ee:17:2a:f5:
93:31:b9:d5:67:18:c8:d7:d5:9a:d5:81:dc:85:b7:
6a:93:69:0b:74:88:2f:e6:9f:d3:e6:ee:c5:e0:52:
68:23:09:f5:8e:59:e7:25:58:7b:62:8c:dc:f4:55:
80:21:9e:a6:78:22:13:db:5c:d0:7c:1b:7f:02:69:
1a:54:d4:53:fd:e1:e7:80:64:f8:a9:b2:80:34:17:
27:7f:c2:12:c5:68:c2:dd:40:5d:1b:32:b1:76:72:
17:f8:ea:15:7a:d3:2d:20:c9:32:f4:2e:89:e1:5e:
3c:f6:cd:3e:36:a4:88:28:62:0f:2c:f0:4d:b0:7e:
93:71:b9:fd:66:02:e1:21:57:f8:05:06:2c:36:62:
6e:9b:17:7a:21:c0:34:b1:10:a2:ee:83:cb:48:c4:
a1:49:4b:5f:4c:cc:55:45:5c:15:30:69:c9:cb:1c:
4c:89:c3:5e:f5:58:a8:a5:1e:df:4f:5f:92:c8:ee:
13:64:62:76:45:1a:9c:f9:cc:8a:c1:2c:96:09:df:
d8:89:be:fe:4e:b9:3b:a9:85:e6:0a:36:2d:6e:1b:
b8:e7:7f:13:e8:88:0f:ee:30:0d:90:fc:08:49:55:
2e:70:1e:55:5d:77:d9:16:6e:6c:7d:24:0b:09:39:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E7:D3:0F:3B:34:6E:D6:FB:39:71:3D:36:A8:F7:24:D8:71:74:7A
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:79:d3:35:24:29:24:96:5e:3f:04:73:50:a4:55:ee:b6:ef:
0f:ab:e9:57:5c:0f:aa:63:63:ae:40:8b:7b:53:0f:1c:21:18:
4c:34:e7:13:7a:c7:9d:ed:8d:c8:86:94:14:2f:7b:de:68:98:
be:3c:c0:27:0b:75:c9:67:81:fa:5f:fd:2b:ca:ab:67:ef:69:
f1:41:c9:b3:e7:9b:df:33:3b:28:8e:77:97:ae:e3:c9:e9:3e:
e8:9c:1a:7e:80:1e:7f:28:4a:f0:30:ea:c5:03:e1:64:d3:6b:
68:17:61:f5:58:93:22:cc:70:06:9d:63:c6:1e:f8:9b:9a:e5:
c4:5d:2c:c4:a9:73:3b:fc:c2:36:6a:69:ec:5f:01:73:e5:b3:
7d:01:56:63:ef:a0:b5:c8:bf:e3:90:d8:54:a0:e5:65:2c:7b:
aa:80:28:d2:9c:36:27:a1:1b:8c:fa:27:b6:6d:1a:a6:ac:56:
89:5c:10:74:87:93:08:ab:b1:30:08:3b:04:07:dd:a9:3f:5d:
dd:72:a3:72:c7:96:a5:6c:22:45:61:94:01:46:5f:f5:0d:16:
67:b6:78:a8:6a:1e:0c:a6:0a:99:96:e2:9c:03:16:44:8a:0b:
87:c7:47:aa:fd:70:ae:4c:53:c4:59:7b:a2:73:2e:b4:06:93:
d9:43:80:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:15 2025 by rpki-client