Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: e+TD1uSYMMAxTtLz9WTwD9dmLufEmv4h/Jqghhxp6OY=
Subject key identifier: DE:67:57:0B:11:09:4D:36:27:EC:9C:74:EC:6B:1E:28:FA:50:35:C7
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 01974B5690B52CF8BE33451AC11D9503FDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0B92
Signing time: Sat 07 Jun 2025 17:00:53 +0000
Manifest this update: Sat 07 Jun 2025 17:00:53 +0000
Manifest next update: Sun 08 Jun 2025 17:00:53 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: qyEdNd9qktQXOAaH8aSUz5eei2jzUIDUPKtJneIzA1E=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:90:b5:2c:f8:be:33:45:1a:c1:1d:95:03:fd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Jun 7 17:00:53 2025 GMT
Not After : Jun 8 17:00:53 2025 GMT
Subject: CN=de67570b11094d3627ec9c74ec6b1e28fa5035c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:b2:11:95:99:9d:30:22:05:76:f4:96:cc:
ea:cd:28:83:04:b4:b4:d6:3b:1d:f4:aa:42:db:06:
54:74:ef:9b:d2:db:bc:a9:38:0b:91:79:55:62:da:
a6:ff:68:eb:26:80:ed:71:77:56:94:28:cf:c7:72:
9e:e1:b6:b6:fe:3a:7f:05:91:8e:6a:92:1f:e3:34:
11:eb:92:aa:6c:cf:ae:4c:a0:2f:00:ca:2d:f8:cc:
10:44:8a:af:03:95:50:d0:f3:0a:ae:31:56:ca:c9:
bc:5f:bc:af:a6:97:42:ac:cf:f0:77:3c:3f:a0:54:
e8:cb:b4:9c:3e:6c:7d:5e:c5:73:a4:ff:e9:d8:58:
43:4f:99:75:06:d1:2d:1b:81:44:a4:b1:e4:28:8d:
d6:4d:1d:ef:e8:5c:73:9c:91:13:a1:79:60:ed:92:
c7:90:d9:0e:2b:bf:9f:0e:dc:5e:aa:d9:66:6d:af:
38:61:54:53:40:27:72:7d:4a:be:3f:58:7a:f0:47:
e8:d1:e6:52:1c:6a:95:9c:42:7f:87:25:6d:e1:ab:
2a:06:bd:dc:61:8a:07:0d:4c:4f:eb:4d:d7:8f:9c:
17:ae:c4:19:74:d5:8d:58:5c:65:c9:ca:49:bd:4c:
6f:5e:82:7a:0e:9d:c0:8f:05:e9:60:60:0f:1b:70:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:67:57:0B:11:09:4D:36:27:EC:9C:74:EC:6B:1E:28:FA:50:35:C7
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:25:e3:6d:a7:33:20:d2:8e:ed:05:5f:8e:a8:ae:6e:45:60:
6c:8e:c7:ba:7d:ca:20:99:cd:90:c5:30:81:9e:73:e0:ae:11:
d4:2e:b7:66:2b:38:2d:45:54:bd:18:6a:43:0c:00:2d:f6:65:
bc:ba:2b:0c:c0:2a:f7:54:e4:76:a6:be:31:65:97:f3:95:20:
e7:7e:d0:1d:c8:48:d0:c1:e9:5c:ea:ff:6f:e9:ca:4e:54:64:
28:39:15:df:10:d4:4c:4a:9d:8b:e7:72:53:07:ad:4d:25:10:
96:67:a1:4b:e6:74:c8:04:86:6c:a1:4b:74:cf:75:b6:09:03:
d4:11:71:1b:90:72:47:1a:ac:f6:d1:e9:29:da:12:7f:25:ff:
f1:2e:20:32:f7:eb:48:cc:81:f1:b8:68:a9:d1:a2:7e:f6:2a:
00:a0:c7:c4:ff:21:ce:58:d7:6d:50:84:b6:c4:7c:1a:cb:22:
7f:1f:5d:15:77:15:5e:f7:4e:15:ea:d2:33:bd:75:97:17:53:
69:7c:9b:34:6b:fc:e0:4f:28:8f:85:78:7a:fe:8f:76:01:ad:
b2:c8:3e:1f:d3:72:f4:99:41:59:75:06:db:71:a9:b0:ee:10:
78:d3:fa:75:2c:64:3d:2e:0f:7f:f7:84:16:86:65:da:09:09:
d3:49:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:22 2025 by rpki-client