Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier: wuQVoH7kn66cSBzKIBxWcPDmKtXzNUGyNGO3K/9jwH8=
Subject key identifier: 08:26:57:BB:3C:32:2E:FA:A9:3E:85:79:2B:DC:74:97:F7:A4:B2:76
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial: 0197488C4BEA7F8A73128758A07C4A55BCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number: 0228
Signing time: Sat 07 Jun 2025 04:00:43 +0000
Manifest this update: Sat 07 Jun 2025 04:00:43 +0000
Manifest next update: Sun 08 Jun 2025 04:00:43 +0000
Files and hashes: 1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: Ea96hB72UBAA7tatEvhXinoVDYV1XRh63ap1DD/jXbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:4b:ea:7f:8a:73:12:87:58:a0:7c:4a:55:bc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Validity
Not Before: Jun 7 04:00:43 2025 GMT
Not After : Jun 8 04:00:43 2025 GMT
Subject: CN=082657bb3c322efaa93e85792bdc7497f7a4b276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:60:ab:35:08:38:00:c5:de:ed:1a:d8:7c:6f:
a8:71:26:88:ca:3e:39:c8:1d:e6:5a:3a:be:36:2b:
e8:86:ef:a6:1c:fe:59:ef:51:f0:c3:96:ca:94:9d:
d7:fa:f6:a6:42:5d:55:d9:66:bf:67:23:3e:79:32:
65:63:8d:b4:eb:65:c3:59:0f:43:9a:6c:60:6f:a8:
b3:1c:9c:50:90:da:69:ac:9b:9f:69:5a:17:a4:41:
77:ed:f1:12:2f:38:df:24:99:cd:06:43:c6:d0:b8:
fe:5b:22:81:d5:a5:43:54:03:e4:c7:d9:48:1b:5c:
94:ee:8b:7d:8f:a8:3e:35:f8:ff:00:98:1d:df:f0:
1e:94:54:94:5e:26:38:cc:27:20:c1:b8:94:45:c6:
2c:f1:e6:cd:5a:ba:95:f0:fc:ce:05:46:e2:a2:25:
fb:ce:78:02:0f:c4:48:4b:da:dc:7b:98:69:0e:35:
2a:65:52:27:a5:5c:bd:c5:bd:de:da:4f:a6:c0:2f:
44:88:79:31:2e:72:6d:a8:67:f3:01:ee:6f:1e:24:
9e:4c:ab:ab:4c:36:66:ea:a9:42:63:4d:5d:36:ce:
17:53:75:db:bb:6d:d1:b8:01:dd:a9:a4:9c:49:09:
ab:97:e5:39:f1:02:0a:eb:53:da:8a:e7:05:93:89:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:57:BB:3C:32:2E:FA:A9:3E:85:79:2B:DC:74:97:F7:A4:B2:76
X509v3 Authority Key Identifier:
keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cd:f6:99:19:03:1a:b2:56:5a:a9:11:1b:10:20:1d:1f:38:
7a:1b:cc:b0:99:24:65:9c:c3:25:7f:77:97:2c:d1:53:b6:c6:
3f:1e:6c:0e:0f:76:a1:ae:be:f3:88:fe:62:9f:1c:34:dc:f3:
bd:c4:22:a2:22:ad:3c:a7:1d:43:d4:4a:b9:03:92:60:57:4e:
1c:b2:23:b7:ba:4e:6f:61:e1:6b:92:fb:59:3f:7a:f5:e4:63:
53:8f:81:87:59:df:c1:dc:f0:aa:8f:95:50:eb:3b:c7:6d:75:
ba:1d:8a:1f:46:bb:93:1d:3c:7a:ad:58:79:95:17:a2:be:c6:
34:27:a8:b8:98:0f:14:22:ed:3c:fc:8d:78:34:85:5d:e7:53:
e4:95:40:be:7c:e5:b0:a8:e1:46:ae:19:cb:e7:5b:f0:49:5f:
7f:0c:3a:1c:0d:99:17:33:fd:45:a1:7d:b5:c7:6b:26:75:13:
7e:49:78:99:ac:af:ac:34:2b:4d:d9:aa:71:16:4b:6d:3b:c6:
0d:0b:88:66:c1:4b:3f:b7:a4:aa:05:88:1f:5c:2d:1c:a7:90:
c9:f0:41:7c:83:3e:72:3f:26:a6:00:c4:37:4d:c1:27:86:a1:
e0:9c:95:81:7c:61:53:16:9f:00:41:b4:56:65:9c:b3:27:d1:
2f:5a:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:51 2025 by rpki-client