Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File: mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier: bUsuslgqsp/gh5zOaJIt/0N5ybBrYB+NnUbCvKGmSDs=
Subject key identifier: 08:F9:CE:AB:D5:87:C9:83:2C:A6:8D:26:79:98:92:D8:2F:82:30:11
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 0197470B85BF8485843AEAD28164A755AF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number: 0B08
Signing time: Fri 06 Jun 2025 21:00:26 +0000
Manifest this update: Fri 06 Jun 2025 21:00:26 +0000
Manifest next update: Sat 07 Jun 2025 21:00:26 +0000
Files and hashes: 1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=)
2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=)
3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=)
4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: uhUuEBXuwNBq9fyx0wHOkEIOYIIkMu7QuTjT/zjr/gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:85:bf:84:85:84:3a:ea:d2:81:64:a7:55:af:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Jun 6 21:00:26 2025 GMT
Not After : Jun 7 21:00:26 2025 GMT
Subject: CN=08f9ceabd587c9832ca68d26799892d82f823011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:05:07:24:56:2d:60:85:e7:7a:8a:11:d9:
c1:fb:44:fc:b0:b7:e3:51:2b:2f:10:c2:c5:e2:4b:
81:3b:ac:6b:40:a5:d2:b6:f8:45:48:73:53:58:6f:
ca:d0:db:64:11:51:83:5f:10:67:8c:be:cc:0f:33:
e2:0c:c0:73:6f:27:5c:02:42:b3:f3:72:18:0b:ac:
7c:01:2c:1c:3b:82:14:58:d5:9c:8e:f1:2d:09:1a:
cc:ee:aa:d9:43:dd:0b:67:fd:cc:44:7a:99:f1:1e:
59:69:52:4b:5d:f8:8e:d6:da:af:ab:e0:5f:85:bf:
2a:f3:5c:55:ff:6b:dc:28:a8:bb:24:56:d9:50:d6:
99:89:3d:15:a6:7e:10:31:6c:aa:81:55:77:d1:25:
70:d4:d8:74:79:34:de:99:37:4d:80:c7:be:78:7e:
e8:e4:6b:51:e9:15:02:2f:82:21:2e:e3:51:92:a0:
61:88:90:67:01:d0:49:fb:ba:e8:27:d3:b7:a6:69:
31:a6:b4:18:9e:b2:39:72:71:33:bf:4a:5e:85:8b:
98:e2:3f:77:db:9b:c6:f5:14:a9:02:65:18:e5:3a:
98:36:8e:b2:85:48:fb:cc:d7:ec:76:e1:6b:c5:4b:
e5:dc:80:15:b4:8a:e7:28:1a:aa:b5:c3:c6:81:bb:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F9:CE:AB:D5:87:C9:83:2C:A6:8D:26:79:98:92:D8:2F:82:30:11
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:03:af:6b:35:59:03:3f:75:40:0a:15:58:de:76:25:8c:d6:
79:73:14:36:23:0c:c7:bf:1b:d5:8c:9f:82:86:07:6f:e1:68:
0a:40:06:17:be:ef:b2:64:bb:e9:dd:15:22:ca:f8:b9:77:e4:
1e:ae:ad:9c:2a:48:d1:6d:f3:cb:eb:06:f8:f2:a4:07:87:c8:
f9:29:02:37:76:59:a4:f5:e4:cc:70:ee:a5:08:2a:95:50:eb:
f7:9b:ce:67:f1:ee:e1:5f:6f:97:7f:59:7b:fa:44:8b:f0:cc:
e8:7c:c2:5a:7d:66:e0:cb:70:07:ea:95:2d:a4:b9:a8:c7:a1:
a5:f8:a3:57:17:cf:d5:07:77:eb:f5:dc:63:b5:a1:92:68:11:
ce:5c:50:b8:90:2d:fb:fc:49:8c:32:9b:90:1e:ea:29:d2:a7:
39:85:c1:ec:7b:98:f3:91:34:99:18:3b:3e:fe:9f:71:d9:00:
d4:b3:ca:88:35:49:7e:82:2d:c3:51:13:e9:13:6f:95:9b:8f:
4e:92:38:2e:1f:c1:d0:fd:a2:c5:fe:08:4d:25:c9:80:6e:aa:
83:5c:fc:04:e3:03:32:a0:96:a0:2e:8f:58:54:e9:25:66:49:
bb:04:34:58:61:bd:0f:af:71:97:8a:d6:5b:c3:35:19:2d:b5:
64:40:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:11:00 2025 by rpki-client