Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier: NiG/K2lIigJGOr1sgi5NAQsVblQRo2DOr+rsOEIiICU=
Subject key identifier: E9:B6:2B:A7:CF:87:1B:A4:13:A7:E6:DB:B9:F5:56:70:7B:60:1F:04
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial: 01974A0CB73C2DEEB70E661809C5B0387166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number: 0348
Signing time: Sat 07 Jun 2025 11:00:36 +0000
Manifest this update: Sat 07 Jun 2025 11:00:36 +0000
Manifest next update: Sun 08 Jun 2025 11:00:36 +0000
Files and hashes: 1: YxveI4ih6pTB1sKFupGdm18Smzc.roa (hash: dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=)
2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: 0a7zkW/x0AUQDXCnBzvREQgfSMPQxzymZDo3HuQaPLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b7:3c:2d:ee:b7:0e:66:18:09:c5:b0:38:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Validity
Not Before: Jun 7 11:00:36 2025 GMT
Not After : Jun 8 11:00:36 2025 GMT
Subject: CN=e9b62ba7cf871ba413a7e6dbb9f556707b601f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:46:c4:5b:0d:e6:3c:eb:69:b1:80:ec:b4:
37:ef:6a:e1:af:99:9d:d9:41:36:09:69:2b:58:f9:
45:a2:42:32:6d:f0:c4:75:81:55:5d:15:fe:32:61:
05:a2:43:27:15:60:db:54:42:21:70:48:72:99:ce:
be:8f:23:29:c2:d1:87:b2:03:99:d1:52:a3:6f:d8:
80:d6:f0:35:5b:3e:d4:9b:a1:ba:3f:e5:af:d7:51:
00:a9:48:ba:f0:74:94:08:c0:77:c2:24:d5:70:e2:
fc:76:b7:d5:d0:6e:ae:8a:eb:07:cf:af:88:3c:4e:
df:e9:e1:b3:52:db:da:f3:f8:6b:0f:0c:5c:61:b4:
71:22:0d:37:0d:60:a4:33:f6:43:3e:be:43:6a:d7:
07:76:ca:3d:fd:ab:f3:87:b4:e5:cf:5b:34:9f:13:
d5:a1:bd:66:79:13:4b:f0:7c:a5:f9:fb:28:a8:ff:
30:8c:00:b4:80:98:c2:e1:6a:0b:c4:b3:cb:7d:67:
2a:c8:85:1c:9c:01:4b:e7:82:9f:a4:7f:7a:18:5a:
83:1e:8b:36:04:34:9e:53:d0:4a:43:08:81:7d:ef:
46:41:14:c7:f2:66:f3:43:65:72:8c:a5:f3:53:50:
2b:d1:34:ca:65:4d:3a:6c:8b:1b:c2:c6:08:6e:33:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B6:2B:A7:CF:87:1B:A4:13:A7:E6:DB:B9:F5:56:70:7B:60:1F:04
X509v3 Authority Key Identifier:
keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dc:03:6b:8d:02:87:35:38:68:e6:94:41:0e:44:a8:fd:6c:
72:75:ba:d3:28:60:ce:bb:e4:ee:a4:20:76:34:16:bd:b4:a8:
23:b2:58:81:04:cf:d0:82:67:cb:d7:89:28:21:12:98:e9:4c:
32:3e:ce:c9:99:7b:83:74:91:7a:77:85:e2:43:9a:da:05:fa:
df:29:a8:89:b8:68:86:ab:0c:44:89:15:d3:c6:d1:7f:c2:47:
f3:97:46:e0:d1:66:9a:1c:7e:58:2f:a4:8c:17:ea:de:72:c5:
77:e8:90:e5:83:0f:8a:ac:ce:ec:66:fc:34:7d:26:28:7f:9a:
a9:2c:2a:89:51:b5:92:3c:70:ed:e5:38:0a:c9:83:ae:3c:3a:
c7:fd:6a:b8:25:5b:95:7f:3d:8a:0c:70:1a:8e:b3:09:e8:1c:
b5:d7:29:7c:ab:38:3a:be:b7:67:bf:51:49:dc:06:38:52:71:
b7:e9:1f:1c:54:55:56:84:ef:2e:a2:17:a3:a5:fb:7a:29:b8:
4f:6f:91:34:55:a7:8a:1e:b3:96:52:ca:4c:b4:46:c7:2c:96:
bc:d5:2e:a8:a9:45:a7:3c:b1:2b:fd:75:f9:4b:d8:c2:ba:a2:
ff:4d:a5:37:93:a9:80:6f:92:b5:ae:d0:3f:dc:5b:aa:d9:4e:
7d:0f:35:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:41:57 2025 by rpki-client