Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: E5FUAhhPcE+EmVuJuhUSogJR1nNhVNVdXOMjJRFBcp0=
Subject key identifier: 64:05:D5:7A:F7:66:1F:30:06:DC:A2:0A:7D:3D:E6:E5:72:2A:DF:15
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 01974D0D8667A9F7F1ADFF7813BFE2C8A7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 01:00:21 +0000
Manifest this update: Sun 08 Jun 2025 01:00:21 +0000
Manifest next update: Mon 09 Jun 2025 01:00:21 +0000
Files and hashes: 1: 11EUti3lnSrvcME_sLAUVVEJCyA.roa (hash: zosfyuqqMAp/geMMw6u9z8/OyVXxmv9rqLq+GU2ia9c=)
2: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: Tg3GCHciPsbDIApcFgE7hE1bw7irntJd0AgrbU2LUsM=)
3: pUNUzoKVem25Y_u6Wr9POh9WQoA.roa (hash: dUP9J5+eurE18pK8nZH6ohMEustwLaoHJPJpeZdkUDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:86:67:a9:f7:f1:ad:ff:78:13:bf:e2:c8:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Jun 8 01:00:21 2025 GMT
Not After : Jun 9 01:00:21 2025 GMT
Subject: CN=6405d57af7661f3006dca20a7d3de6e5722adf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:bc:79:7f:a3:d8:4a:6d:13:3a:6e:af:9a:
1e:83:ed:e1:cc:20:18:cd:34:95:66:ab:bd:b5:17:
12:2b:d8:fe:40:8a:07:cd:13:8f:25:e5:ea:6d:c1:
22:e8:07:c4:b5:46:b4:1b:04:6e:38:56:91:64:0f:
b0:77:09:6b:d7:fc:db:a9:42:1b:f3:c8:53:ae:29:
31:5d:b4:cc:96:e0:8f:f1:a4:0a:d0:ca:fb:fb:d2:
6b:a8:2c:c8:97:e1:b4:25:0b:e9:21:c7:6a:7a:17:
82:61:13:c8:f7:05:6c:93:3c:ef:c2:61:0e:e1:46:
47:21:60:e4:43:c7:95:a4:1c:14:65:b3:15:c9:ed:
f7:0a:99:ea:73:b0:c7:59:34:dd:dd:bd:bb:7f:26:
e3:ba:59:7f:dc:bd:1c:f2:10:82:ce:f1:80:47:f9:
24:e7:63:c8:f0:07:7a:8f:59:bd:1a:b1:73:79:d4:
9e:80:36:b2:db:a7:af:ec:97:a0:da:f4:80:6b:1a:
ca:57:f7:fa:ae:3c:a5:55:60:23:43:8f:4a:d5:96:
10:6a:7c:ec:df:8a:32:31:00:5c:3f:06:19:0c:40:
af:b4:76:7f:7c:4d:f9:f1:69:23:50:57:f3:3b:3b:
38:b7:c8:e8:d1:5b:77:e5:3b:54:52:19:96:4f:06:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:D5:7A:F7:66:1F:30:06:DC:A2:0A:7D:3D:E6:E5:72:2A:DF:15
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:46:b8:77:a2:9d:7d:f5:88:95:eb:57:64:cc:ee:f7:3b:94:
7a:56:11:bc:ea:7a:eb:59:ba:f8:a8:62:54:3e:a2:18:28:b9:
2d:61:d5:e2:c2:12:92:bb:fb:28:9a:63:6c:f4:f7:60:4c:76:
c6:81:13:59:b6:6f:4f:01:2c:58:74:8f:0b:3c:52:a2:d6:ff:
c9:cf:02:a9:04:ae:ef:d9:f1:64:d9:1e:1f:e8:f2:ef:88:85:
20:ab:f2:44:78:02:35:98:07:43:a2:c7:66:bf:41:df:d4:27:
5b:7e:51:6b:ca:c5:b6:3c:0b:b5:16:71:d6:53:93:5a:2c:eb:
55:af:2e:11:be:35:44:c8:57:a3:c9:2c:4e:f5:79:d7:06:65:
94:b8:44:da:5f:a7:64:90:f6:66:e1:21:c2:f6:9f:cb:a0:23:
f0:b4:42:13:72:da:d1:14:e5:02:e1:52:77:e7:8b:f6:3d:9c:
fa:21:e9:c4:eb:b2:bb:bd:39:61:a4:9a:39:db:00:58:66:8c:
89:b8:d4:a9:a5:50:cb:b3:49:a4:46:69:6c:f8:c8:54:88:8c:
6e:bb:63:ed:a9:ca:12:23:84:40:ca:65:84:1b:6d:40:d9:bd:
58:2a:42:5c:9e:ef:f9:52:5f:f3:97:02:bc:80:6e:3a:3f:76:
79:57:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:59 2025 by rpki-client