Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File: bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier: F0xvom22mOKh140n3PqB2oIvJYfhIMD+pRRGEEcYj30=
Subject key identifier: E2:67:F8:BF:B0:94:3D:8A:20:C0:50:8C:0A:2C:FD:E3:4B:FD:7E:43
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial: 0197499EF24559DBD3ED9A07E00C2CFBB9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number: 0238
Signing time: Sat 07 Jun 2025 09:00:42 +0000
Manifest this update: Sat 07 Jun 2025 09:00:42 +0000
Manifest next update: Sun 08 Jun 2025 09:00:42 +0000
Files and hashes: 1: MYDLO2vvDKfPNW5B_jde2eQkJYg.roa (hash: wV9kbvDo8W5gfhdwsvfFoAGi3mrp4nPR/cUxhX5vacM=)
2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: pgs9Q8WLYeHLO2GzIOQpCI/QcRTs5fz17cHYuHnvAOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f2:45:59:db:d3:ed:9a:07:e0:0c:2c:fb:b9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Validity
Not Before: Jun 7 09:00:42 2025 GMT
Not After : Jun 8 09:00:42 2025 GMT
Subject: CN=e267f8bfb0943d8a20c0508c0a2cfde34bfd7e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:2f:84:30:0f:bc:16:52:f0:b8:a8:ae:51:
2d:53:07:c3:bd:4e:dd:3b:70:ef:f8:de:77:aa:51:
36:da:21:ef:2d:d0:8f:b7:45:94:cd:14:ed:70:66:
9e:c3:eb:e3:2e:64:95:c0:d3:37:0e:fe:8b:c9:ba:
d2:c3:2e:8e:00:11:8b:87:49:68:58:3c:ca:b3:95:
fb:62:16:bd:d3:da:de:be:f3:91:e0:8a:ed:67:63:
87:bc:ca:86:75:ba:ff:fb:51:3b:da:41:0a:3f:d4:
59:76:c0:88:3e:2f:1c:a9:e5:9a:c9:d9:07:07:45:
e2:04:15:2f:38:f6:f0:51:31:fc:0b:3b:42:f0:a7:
4a:0d:e1:5a:92:a9:37:b7:59:03:fc:ab:cd:e9:07:
d9:04:17:9d:2e:6d:22:76:19:45:76:92:bb:3e:45:
27:61:f2:6d:bb:36:43:90:84:23:72:db:b5:47:07:
d4:a3:0c:1a:58:05:dd:a0:2d:31:bd:42:03:3e:44:
b4:5d:91:dd:d9:f2:0b:05:56:c8:7b:c4:4a:c3:d1:
b0:ea:71:b6:19:3a:01:3c:c9:0a:6f:05:09:ec:2d:
17:c7:aa:67:80:a4:ca:37:31:88:1b:82:f5:6b:6f:
29:a9:4b:6e:1f:9f:ef:61:3a:3d:5f:6b:17:a4:df:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:67:F8:BF:B0:94:3D:8A:20:C0:50:8C:0A:2C:FD:E3:4B:FD:7E:43
X509v3 Authority Key Identifier:
keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fa:d7:6d:5b:fb:de:73:c3:20:b4:51:80:b5:f1:0a:85:11:
b0:61:29:7e:3e:60:e3:12:02:cb:a6:29:19:36:81:f9:36:e6:
9a:68:73:8a:10:53:37:d5:2b:7a:f9:bd:9c:30:ad:8e:60:1e:
86:91:4a:99:77:ab:13:58:e2:f8:64:d3:f8:07:50:79:66:34:
a6:48:76:c4:c5:fd:bc:87:6e:24:5c:3b:5f:93:28:b9:8f:a3:
80:60:1a:92:3f:4c:17:56:41:7b:1e:e0:bc:57:b1:eb:f8:3b:
1a:44:63:d3:1f:91:a5:58:d3:e7:39:a0:f0:a9:3e:48:59:03:
ed:4f:b1:ec:16:3b:9d:9a:50:89:5e:5e:3e:5f:7e:de:34:e2:
0b:97:dc:3a:73:58:4e:08:f5:27:19:d3:ca:32:ba:78:87:ce:
9d:18:bb:4d:71:16:0f:bc:21:f3:b9:be:b1:5c:0f:e1:9a:e6:
8e:f4:8e:8b:6d:eb:98:92:27:b9:dd:d0:b3:37:93:dc:a1:26:
ee:9a:63:8f:de:7f:59:c2:91:45:05:b5:6c:1c:db:cd:86:9c:
8e:a8:03:00:19:7a:34:e7:94:8f:c9:d3:45:b5:3f:ef:c7:3f:
ae:55:29:b4:7d:6c:14:00:3a:50:74:fc:95:6f:d7:9f:18:e5:
79:93:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:36:26 2025 by rpki-client