Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: iFeoYhIVxthskrQd9QEK16nSMD8lxPui5Wuo8R6upqM=
Subject key identifier: 35:B3:3E:AA:93:F6:2C:EA:87:5A:BA:9B:24:BE:A9:D5:1B:CC:CB:09
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 01974B1F971979A80311670362AB13AE27F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 032B
Signing time: Sat 07 Jun 2025 16:00:50 +0000
Manifest this update: Sat 07 Jun 2025 16:00:50 +0000
Manifest next update: Sun 08 Jun 2025 16:00:50 +0000
Files and hashes: 1: XrDua1zQDMJqH5iHPu8EHl3EkL4.roa (hash: aKzITCv/TlQWw5VPQA7t2SoPcL6SaZJgOSPmbHxDp7w=)
2: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: kZ3PHZmlL9/UfzFZz4iICPQzWFMGX64iGpvpJT3pdw4=)
3: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:97:19:79:a8:03:11:67:03:62:ab:13:ae:27:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Jun 7 16:00:50 2025 GMT
Not After : Jun 8 16:00:50 2025 GMT
Subject: CN=35b33eaa93f62cea875aba9b24bea9d51bcccb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:ca:4f:72:77:a1:89:c0:85:19:cf:31:13:
bd:60:a5:e6:28:c2:0a:fc:4d:ec:9a:7e:13:20:46:
18:4b:b1:ef:58:b0:cf:77:3f:90:6b:6e:7e:c2:bf:
b2:d2:55:f1:0c:56:f2:cf:73:c0:2d:5e:7c:3c:e9:
f8:9d:98:e4:4d:89:14:11:c3:1a:0c:da:e8:49:fc:
43:0a:a2:70:16:9e:51:e5:3f:69:9a:0e:aa:11:31:
d9:a9:5b:82:20:13:ea:98:86:e4:83:4d:3d:39:75:
53:8b:bf:92:24:60:49:fa:7b:a9:0b:2b:10:ce:b3:
b3:3b:fe:74:80:2c:ff:8d:2c:90:4e:2f:aa:bd:fd:
d4:14:f2:09:ff:91:55:5b:8e:bc:10:07:18:a0:31:
ea:85:84:a7:7d:88:ed:b4:d2:d8:43:59:a9:73:9c:
9a:48:84:97:06:aa:72:7a:2a:2b:37:d0:c6:2b:66:
20:2f:81:e8:e6:76:c8:a5:64:11:7a:66:9d:cd:60:
6c:b8:4b:99:fc:ea:fe:94:d6:4f:a0:7f:44:2d:19:
a7:eb:d6:e5:c5:a6:6b:35:ed:14:df:ce:4e:36:8e:
e5:11:83:20:2b:3b:9e:1f:ea:30:21:22:3a:9c:a1:
f4:5f:32:ca:49:54:25:fd:f8:d5:79:e5:c7:ed:57:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:3E:AA:93:F6:2C:EA:87:5A:BA:9B:24:BE:A9:D5:1B:CC:CB:09
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0a:be:de:b8:45:9f:85:ab:a3:9e:83:a1:38:14:78:6f:40:
8e:cd:58:82:9b:d3:46:50:15:40:06:2c:03:02:6c:dc:9b:3c:
02:51:bc:23:83:1c:e0:bb:71:71:ba:af:62:e5:4a:f8:ef:8a:
05:b1:77:29:d7:b3:31:90:1f:81:13:25:b2:3f:15:c3:2a:82:
87:e2:d6:4f:28:41:e4:d9:ab:da:ae:05:94:58:68:87:49:fb:
7c:38:19:f3:f9:75:99:43:99:7b:71:d9:d0:ac:c5:d1:22:63:
aa:d7:04:89:eb:3b:04:f6:b0:74:b9:e1:0f:d7:ea:28:e1:f8:
ac:9c:63:53:85:d3:54:82:ce:74:88:ca:e4:72:14:8d:d8:bd:
3a:a7:65:5b:ea:cb:b3:3b:f2:bc:73:09:da:55:4a:43:f5:99:
5d:c9:b6:54:fd:d1:00:86:ed:59:73:e5:d4:40:34:f7:4b:69:
51:da:d4:ac:3e:a6:e8:97:f6:3c:ce:d4:a0:ab:ef:60:cd:2f:
ed:a6:0b:a2:da:d0:bb:df:de:09:4e:d4:b1:61:9a:cc:89:47:
98:94:a9:bd:b6:96:96:b9:f4:a7:2e:21:07:1f:f4:0f:fb:42:
0b:b1:dd:9b:f8:d4:95:28:34:54:40:a7:7d:ef:c6:4d:01:d5:
d3:95:c5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:41:19 2025 by rpki-client