Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: Nn8qcj7c9wp+QUGtF7gJgUSTw3kEfSuf9Ku3o4Rrhtk=
Subject key identifier: F4:1E:CF:54:77:48:ED:D4:73:5B:FA:99:7D:45:35:E4:46:D7:0F:D0
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 0197488D1746F76883632EC9FD5066DA1CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 04:01:35 +0000
Manifest this update: Sat 07 Jun 2025 04:01:35 +0000
Manifest next update: Sun 08 Jun 2025 04:01:35 +0000
Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: IriRYNb29hTxuZgj7wKrvH21YjTWU6AM2K9gcccBDo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:17:46:f7:68:83:63:2e:c9:fd:50:66:da:1c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Jun 7 04:01:35 2025 GMT
Not After : Jun 8 04:01:35 2025 GMT
Subject: CN=f41ecf547748edd4735bfa997d4535e446d70fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:f1:c0:7c:67:98:ce:7a:70:7c:9b:ea:70:
e1:74:64:fb:a7:a0:e9:f8:f0:1f:6c:b6:0b:a6:fd:
ca:2b:46:17:c3:00:58:d9:d8:1f:a7:31:3a:fc:87:
54:aa:3d:0a:4d:0e:03:01:b2:67:aa:f1:3a:1c:3f:
cd:28:11:e6:d5:05:5c:b5:d4:0c:e5:53:de:56:81:
8f:3b:d7:16:a6:c9:55:00:48:e4:9b:d1:3f:17:82:
1d:f4:ad:9d:d8:52:87:5f:6f:89:c0:e3:ed:0a:b8:
a7:16:c6:05:26:f7:34:b1:97:4e:7f:76:20:8d:72:
57:f2:f5:10:56:c7:34:3a:c9:3f:05:07:37:ef:79:
68:31:dc:40:a0:06:6f:eb:c5:1e:05:8b:46:c5:6d:
5b:b2:a6:1b:72:1a:c8:5d:d2:5c:38:b2:81:66:a2:
c4:bd:1c:fa:f3:0b:76:78:01:c4:49:9f:43:c7:46:
30:6b:ff:6c:42:29:99:b0:54:ea:c4:5d:8b:f7:31:
94:ef:cd:13:e5:c6:d9:34:2b:e6:47:17:38:b2:15:
b5:4b:81:b5:53:3b:a5:aa:9b:ac:38:e4:7a:71:0e:
5d:49:3e:78:09:4c:05:1a:d4:ec:d5:ec:2f:60:48:
80:ac:9e:3c:6a:98:ce:84:cb:53:f6:c7:4f:b4:e5:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:CF:54:77:48:ED:D4:73:5B:FA:99:7D:45:35:E4:46:D7:0F:D0
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:25:0e:39:f6:70:a1:1b:05:58:de:ab:ee:2b:c1:8d:78:
3f:5f:b1:26:8f:7e:58:fc:6e:ed:e2:7e:37:2e:ec:30:41:81:
3e:8a:f1:ad:62:3a:a7:2e:b9:76:c3:5b:64:d1:d2:89:3b:0e:
7c:15:31:7c:91:0d:88:38:f4:d0:4c:ae:2f:3f:5e:ab:02:4b:
20:97:44:d5:5d:c9:51:25:60:1e:3d:1e:51:4c:20:ad:61:1d:
db:aa:de:ba:8e:82:e9:8c:68:b5:48:2a:bb:1f:40:11:25:50:
6c:e0:c7:62:0d:e0:14:9d:33:74:e1:a6:d8:17:91:8c:2d:3a:
28:2a:0d:be:bc:ed:48:8f:79:f2:1b:c2:fa:32:97:9e:3d:19:
e0:f3:68:54:cf:c1:e4:8f:d8:4b:70:03:97:30:90:4d:6d:1c:
70:eb:2d:63:91:6c:6d:5a:44:cb:09:f1:7b:da:bd:9b:6a:51:
f5:ab:e6:56:08:7a:10:66:68:92:7a:5c:66:84:55:4c:78:85:
c8:06:98:ab:14:0b:4f:16:7b:6c:c1:0b:60:4c:98:3e:9b:ba:
62:87:50:36:43:c2:a3:b4:1d:10:df:ad:19:d5:d9:61:c3:80:
b4:0a:c1:3b:0b:e1:c2:7b:fc:9f:b6:26:a6:b4:84:84:1a:17:
90:30:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:52 2025 by rpki-client