Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
File: m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json)
Hash identifier: ydMnEV6iT2V/e4sM/Q9/6dy4fF4n0kgnQG7C1NHDHtU=
Subject key identifier: 4B:09:5F:87:1A:91:25:FC:BA:56:B9:9C:51:BC:A0:2E:77:75:60:A8
Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Certificate serial: 01974B8D86063DE56F3F5BDFB4260FCE4AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
Manifest number: 0116
Signing time: Sat 07 Jun 2025 18:00:55 +0000
Manifest this update: Sat 07 Jun 2025 18:00:55 +0000
Manifest next update: Sun 08 Jun 2025 18:00:55 +0000
Files and hashes: 1: GFs318vhhs43UeJYStMCcJcloVE.roa (hash: W8/O6hKTgxLPwLzEgTm/PKRsS6eSZm8+16PIQciHYr8=)
2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: 1kX6Jn81il3sRlhX4DKhQhUu8psgCnS+H86+qkXU7zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:86:06:3d:e5:6f:3f:5b:df:b4:26:0f:ce:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Validity
Not Before: Jun 7 18:00:55 2025 GMT
Not After : Jun 8 18:00:55 2025 GMT
Subject: CN=4b095f871a9125fcba56b99c51bca02e777560a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:d1:07:9f:4f:0d:dd:55:3c:ba:46:2e:c9:
7b:5c:fe:c2:a4:9f:e4:28:a1:15:e8:98:fc:b7:a1:
bd:36:f2:2f:14:38:44:d0:fb:1b:a8:bd:d4:55:5d:
36:c8:42:61:1c:92:b8:0f:f3:36:50:93:22:d7:68:
b1:8c:c7:85:e8:19:cc:9f:5b:be:b5:60:c8:49:bb:
83:76:95:7c:4c:be:28:34:df:f1:ab:6b:0c:0b:d7:
ab:8c:e2:c7:b4:78:b9:86:b0:1f:78:7e:91:17:4f:
7d:22:6a:af:a4:5d:34:20:f8:8a:64:5e:86:34:db:
b5:18:0b:f2:6c:df:c8:a1:c3:70:85:ab:75:b8:39:
7c:79:fb:f3:2d:0e:d5:61:08:a5:a3:f6:be:38:86:
04:1d:67:eb:cb:43:4d:c0:09:93:c5:f3:ee:14:7f:
bd:7a:1f:24:b0:7a:e3:58:de:e6:77:58:dc:92:c5:
ed:05:87:54:d5:35:0d:a0:03:9f:bd:ad:5d:83:29:
e3:a8:d3:ab:67:44:c6:bf:0e:69:5d:b3:79:7e:a2:
61:fe:9f:8d:e4:b5:86:49:30:86:f3:10:d2:01:4a:
da:06:b3:ac:98:6e:80:e6:63:d8:c7:27:2d:e2:6a:
9e:42:2d:07:c3:e7:83:34:a6:f4:44:62:4d:9e:2b:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:09:5F:87:1A:91:25:FC:BA:56:B9:9C:51:BC:A0:2E:77:75:60:A8
X509v3 Authority Key Identifier:
keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ae:35:90:b0:c7:92:fd:f5:59:9a:0d:5f:ab:3b:38:4e:47:
9d:b1:36:fa:01:8c:0a:68:d9:ed:11:c7:a8:a7:be:8f:92:3f:
b8:ae:3c:b0:59:96:5a:e0:f7:32:ec:0f:49:e1:7a:7e:af:3d:
79:bc:a5:cc:25:b3:68:0b:ea:1e:a1:cb:95:c7:a3:30:aa:49:
77:8b:9e:a4:1d:f0:76:23:04:52:c0:7e:1e:79:4f:35:b0:07:
8e:7b:a3:96:17:54:26:7f:82:76:f6:bf:18:91:4f:64:d8:6c:
68:49:10:8d:69:16:dd:6d:54:d7:56:3d:2a:5d:bb:3c:db:f8:
97:88:8f:2b:82:7b:95:6a:96:31:07:8b:84:07:85:4e:27:fc:
13:33:8f:dc:a4:d2:dc:e5:22:cd:c3:8d:58:c7:03:ba:32:8d:
49:f4:91:01:ea:d3:ba:d7:01:d5:32:10:74:c5:a4:5d:cf:d5:
22:2f:22:57:a1:d3:8d:4b:2d:05:de:a7:2b:a8:a9:a7:72:f8:
3b:7f:7b:6d:34:9e:89:fa:9e:5f:e1:55:5e:39:4c:f7:0e:9b:
eb:7a:34:8f:38:97:0f:9c:4d:f0:d7:db:e2:de:75:bd:69:3b:
36:22:ac:b6:32:1a:8c:73:c8:a9:c1:75:5c:e0:b5:82:34:ed:
2d:04:45:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:35:09 2025 by rpki-client