Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json)
Hash identifier: Xh5OXFt4C3xZBwCtl9EKg9g9MFQhwmNQHYrovF1BB3s=
Subject key identifier: 9D:45:6C:00:6E:65:5B:54:3D:A7:1D:1A:E5:F6:A6:87:F5:82:B7:CA
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 0197469DAB92E2970E666251B1F39E3721C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
Manifest number: 11A4
Signing time: Fri 06 Jun 2025 19:00:27 +0000
Manifest this update: Fri 06 Jun 2025 19:00:27 +0000
Manifest next update: Sat 07 Jun 2025 19:00:27 +0000
Files and hashes: 1: Kt18qGRPFhnoeDMRU6Ja36FUtdA.roa (hash: ZdZhwP5GgUBDAZeIM6qZ4JCbpszuez2XwZJ3dyqtyLY=)
2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: zEyHU/m0qXeIV9CLkbLFrAc+eCbQVjUU7llMOOc29BI=)
3: yRmsjuq_F6DD6X9AriATfFnXQ5Y.roa (hash: v4PNoMO1RSILauLPhTzIlbmj9RAxx7AGmat1z5c9V7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ab:92:e2:97:0e:66:62:51:b1:f3:9e:37:21:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Jun 6 19:00:27 2025 GMT
Not After : Jun 7 19:00:27 2025 GMT
Subject: CN=9d456c006e655b543da71d1ae5f6a687f582b7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:56:a7:77:a3:68:bc:8d:18:8d:67:1a:ea:
ed:a6:43:18:70:b9:86:21:ee:f0:00:23:69:61:77:
d6:f4:73:bc:80:be:23:c4:ed:f4:df:76:58:bb:8a:
d0:54:80:20:3b:bf:80:64:4d:69:36:f0:61:3b:09:
c8:cb:21:ea:b3:b7:19:4d:34:ab:82:5f:79:57:c0:
aa:d5:ce:c5:30:94:22:17:cc:34:16:62:0e:f6:32:
44:0f:e3:bb:66:4f:c8:16:4d:e2:05:d5:c2:33:a3:
96:a3:80:8b:a9:90:b3:c6:b9:be:40:f3:f7:be:b0:
c8:35:1b:c5:4f:de:64:9e:d9:6f:c8:62:58:dd:7c:
05:b6:18:7c:46:3a:ee:8e:16:a2:be:96:47:be:13:
ce:f8:cd:df:58:72:5f:93:e6:e4:7b:7d:2a:f7:b3:
c6:5b:46:42:32:8c:1d:1c:1c:a1:35:9c:b0:ed:04:
27:90:5b:26:1d:af:3a:64:b4:e8:99:11:ce:d8:2e:
6f:a2:e2:bc:da:58:6e:3e:7d:e5:bc:53:32:ae:fd:
a7:77:1d:84:19:02:71:f2:99:cf:f9:e2:c4:e2:f6:
b5:1a:85:34:ed:27:e3:a5:40:98:6a:c8:d4:1b:ff:
49:7e:23:5e:96:ea:ac:bf:37:c0:42:27:a2:d7:d0:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:45:6C:00:6E:65:5B:54:3D:A7:1D:1A:E5:F6:A6:87:F5:82:B7:CA
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ba:c0:b3:10:e8:c2:18:60:7d:fc:11:0d:05:92:e6:c2:ee:
2b:d3:58:09:90:aa:b1:67:49:9b:20:73:b5:69:36:b2:ff:0c:
0f:42:21:2c:61:30:fe:e8:8d:bf:99:3a:4e:23:63:81:16:19:
36:b4:e0:e7:4b:c0:47:ad:d8:d6:c0:cb:e6:2d:52:6a:34:18:
9d:89:2d:45:41:13:f3:62:45:c9:8e:96:5d:03:d0:df:8a:86:
41:1a:bf:20:81:76:7b:cc:66:72:fa:75:73:c2:6c:24:c6:9b:
e6:30:d7:a1:18:d3:14:89:a6:ba:c6:70:24:ad:8b:b8:ed:87:
4f:9c:ed:26:79:f6:c9:42:2b:3c:70:91:04:24:66:76:c2:f4:
e7:e5:fe:79:d0:d8:bd:c8:6b:e7:29:fc:a3:04:c3:fe:fe:c5:
2f:e6:13:3f:ff:2b:37:c7:7e:8a:5b:6c:2d:40:64:06:8f:30:
cb:a2:4f:3d:75:59:15:8a:86:15:17:86:ea:c1:36:ff:e8:16:
83:e6:03:b5:86:e2:f6:cd:20:da:41:2c:aa:7d:5a:e1:c9:c9:
96:0e:e0:e1:c4:6a:54:96:6c:a7:77:7a:13:03:c3:f5:df:e6:
7a:61:3e:36:7a:d6:14:9a:3e:2c:a1:59:48:c9:c4:33:c8:81:
ac:83:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:50 2025 by rpki-client