Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
File: MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json)
Hash identifier: Kb/cDpzg/WTb8QeH1bChfSQwK79Y7FDcsojUwOCzft4=
Subject key identifier: FC:66:AF:65:1B:0D:04:D1:0E:57:F0:13:72:67:FA:1A:9F:6E:78:65
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial: 01975121E202140CE919B00C22062A3B4DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
Manifest number: 0B22
Signing time: Sun 08 Jun 2025 20:01:04 +0000
Manifest this update: Sun 08 Jun 2025 20:01:04 +0000
Manifest next update: Mon 09 Jun 2025 20:01:04 +0000
Files and hashes: 1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: W4aa1rnBitXmS1LyGXaaXqNPdsW9prWrQ/wrOwO7fuc=)
2: gcvZb-H-QkR_u2nZg2XXj4qsub0.roa (hash: eOyY8yl+p8N7UEzFU3Q8jcWAiNPWbKDEoBQqZkxOiME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:e2:02:14:0c:e9:19:b0:0c:22:06:2a:3b:4d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Validity
Not Before: Jun 8 20:01:04 2025 GMT
Not After : Jun 9 20:01:04 2025 GMT
Subject: CN=fc66af651b0d04d10e57f0137267fa1a9f6e7865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:8b:b5:c8:dc:16:06:e7:3a:7f:8e:be:e9:
3d:74:82:8b:e4:d2:4b:df:78:3e:34:ca:21:e6:a6:
e3:d7:5e:a7:33:fb:59:c0:91:6f:58:81:99:67:06:
31:21:39:ae:63:27:c7:7e:05:b5:0d:62:b6:1f:52:
f9:35:05:40:e3:6c:a7:cd:2f:f2:c5:04:db:cc:0c:
39:6d:e1:b2:fc:7b:06:b6:e2:9d:d9:59:dc:8e:5c:
66:56:1d:8d:6f:de:fa:3e:09:bd:ac:d8:e2:6d:68:
fe:43:d7:28:e5:9f:25:d1:6f:df:a5:11:1d:5f:04:
de:44:8c:76:15:aa:d5:85:49:d0:9c:2a:10:1d:e0:
71:9e:b7:aa:f6:5a:f1:44:67:97:d3:09:72:30:5f:
ee:bb:cb:1c:84:51:19:52:ff:b1:ca:09:da:56:47:
af:be:a0:c5:62:bd:c7:4c:0d:67:39:ea:41:00:08:
8d:64:71:58:76:10:cb:a3:78:76:4d:c1:f2:89:61:
f0:8d:45:31:69:54:9f:87:41:3f:0d:08:4d:fb:55:
c8:3d:17:98:01:cd:5a:56:9c:c1:e5:f1:b9:5e:a8:
b8:dc:57:86:8c:e0:5e:60:33:5b:eb:af:a4:6a:ac:
46:d8:22:c5:2f:22:32:5b:94:bf:8c:76:ba:7d:64:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:AF:65:1B:0D:04:D1:0E:57:F0:13:72:67:FA:1A:9F:6E:78:65
X509v3 Authority Key Identifier:
keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:83:ff:2a:de:e8:0e:16:2a:55:5e:12:34:27:8b:e7:92:77:
bd:f7:46:79:fd:ea:b7:7f:62:28:66:89:3e:bb:3a:89:ab:e8:
d3:0b:42:04:89:fb:29:77:a0:b3:07:fc:e7:87:3e:b4:b8:64:
5a:b8:cc:d9:9b:41:04:f3:98:26:d1:6e:ad:6e:a9:a7:5c:aa:
2e:b2:fb:6b:40:21:08:e4:b1:ab:fb:fc:3c:23:77:48:48:fb:
3f:85:d9:96:5c:3b:9e:71:cc:08:dd:bc:38:0a:0d:e7:24:1c:
81:37:d6:76:f1:ca:58:26:4f:57:20:f7:35:4f:f7:cf:32:b5:
d3:ba:61:12:1a:03:cf:64:d1:c2:8a:ae:73:59:38:b6:b6:26:
66:20:af:07:19:08:7a:14:4a:af:9b:db:3f:bf:25:a0:7a:85:
da:8f:ec:fd:3e:d2:b0:6b:79:3b:a9:54:b7:2d:4f:65:f9:4b:
2d:46:dc:57:6e:0c:3b:48:2b:fc:75:f5:1c:bc:60:9b:1c:70:
25:f1:e0:8c:9e:1e:bf:14:65:80:5d:a4:a3:21:6c:0b:11:5a:
99:23:40:1a:12:cc:2a:ae:9d:22:60:85:91:94:39:c3:df:10:
da:91:af:b8:ae:14:6a:f6:2c:94:24:2b:c4:81:ff:2c:9f:6c:
96:b6:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:16 2025 by rpki-client