Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File: m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier: Wf4B6SUhOR9Cy86PZVzWjwLScj9QMojMjTGFBMdFLiI=
Subject key identifier: DD:F5:03:05:2B:CB:5A:B3:C1:2D:88:47:A4:96:44:4D:02:F9:44:D7
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial: 01975121CACE15E0FDB029C03ED2D2316CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number: 0C01
Signing time: Sun 08 Jun 2025 20:00:58 +0000
Manifest this update: Sun 08 Jun 2025 20:00:58 +0000
Manifest next update: Mon 09 Jun 2025 20:00:58 +0000
Files and hashes: 1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: NUoBOtzNps9sl8VCVuWbww1mpct4IVRtzqDqdPx2pHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:ca:ce:15:e0:fd:b0:29:c0:3e:d2:d2:31:6c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Validity
Not Before: Jun 8 20:00:58 2025 GMT
Not After : Jun 9 20:00:58 2025 GMT
Subject: CN=ddf503052bcb5ab3c12d8847a496444d02f944d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:a8:2c:8a:e1:a2:15:25:30:10:4f:4c:0f:
c8:1a:4a:01:4a:30:e9:20:cf:77:84:63:16:79:8b:
cf:4d:96:81:87:96:c3:fd:cc:c0:8e:75:e3:93:bf:
b3:a8:27:01:39:19:09:7c:5b:28:a6:ed:74:05:00:
e9:a9:73:b1:ff:bf:bf:a5:b6:32:8b:ce:91:cb:da:
d8:60:ad:0a:c3:e9:38:86:7a:c9:5f:70:d5:4b:6f:
ff:7d:22:ea:81:91:7a:97:f7:2b:81:20:e2:5d:55:
77:e5:ed:67:d0:c9:a6:35:41:87:78:a2:fd:cf:96:
f7:a2:86:2f:25:98:e6:48:2f:06:63:65:2d:1a:cb:
82:79:24:60:66:a0:9c:a4:00:ac:04:07:0d:89:ea:
29:1e:e5:d3:9c:3c:58:46:a9:6d:fa:cf:37:85:e9:
19:d1:68:25:6e:31:e5:13:1a:6a:c0:fa:f3:94:38:
d9:bf:0a:0a:6f:b7:4b:cd:6d:c4:f0:80:49:6b:da:
96:d5:12:7e:80:4f:37:0c:59:db:c8:3c:ec:17:6e:
7f:d4:c1:ab:ff:42:88:7c:75:e6:5f:f3:01:0c:97:
da:d5:e4:03:83:ff:cb:e7:d1:43:f9:bf:f8:66:b9:
fc:17:df:e0:69:46:1e:d8:c5:cb:80:ea:13:29:de:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F5:03:05:2B:CB:5A:B3:C1:2D:88:47:A4:96:44:4D:02:F9:44:D7
X509v3 Authority Key Identifier:
keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3b:e7:da:29:58:18:96:3b:87:d2:c0:a5:f3:fc:24:48:0d:
88:58:cf:84:a7:a8:ea:a5:65:0f:80:c4:f7:eb:91:1f:ef:82:
46:e4:96:92:77:36:8f:49:c4:2c:03:d1:39:57:2b:fe:bd:e4:
b1:7d:d4:dc:35:ed:dd:0e:2f:24:59:41:7e:fb:b7:7e:97:48:
41:07:a6:f3:e1:85:81:e6:cf:70:91:df:97:3b:d2:9a:0d:bf:
22:a8:97:82:52:a4:6e:e6:f0:02:1b:c2:73:eb:b3:26:42:a5:
24:bf:df:53:c3:78:92:e6:2c:73:ff:6f:8d:0b:db:ae:16:ee:
d8:01:ba:6c:04:d9:15:76:53:e1:ec:d7:7c:ce:d9:76:36:c2:
07:5e:4c:e6:7e:94:52:64:56:e4:8e:e6:9d:60:21:92:77:ee:
b3:32:74:77:2b:26:ce:15:c1:0d:58:a7:cc:5a:de:58:d2:7f:
2d:93:25:e2:22:c5:e4:62:5e:a6:91:34:54:36:4e:d9:e8:90:
00:d2:e4:45:66:cc:09:49:69:af:77:c6:cf:ed:57:73:de:c1:
b7:ea:c5:e1:e1:44:39:09:9b:f2:76:77:4b:31:4f:71:0f:fc:
19:42:57:31:3f:70:a7:c1:a5:67:af:65:02:ca:f3:aa:e1:8e:
74:98:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:06:07 2025 by rpki-client