Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: QbfFILdZPkTFnbm+DxT2CJoIAuKyZ2v0FhrCAF83bWk=
Subject key identifier: 6E:83:5C:D0:AF:F8:34:3A:DC:BC:10:48:17:B3:1F:6C:0C:B0:70:92
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 01974E2069B69A81BB91DFCD25F01650847C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 06:00:36 +0000
Manifest this update: Sun 08 Jun 2025 06:00:36 +0000
Manifest next update: Mon 09 Jun 2025 06:00:36 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: BSgUd1aHYo9zLrUcg4gTcTCjY+NshAYxV+dolvnxtrQ=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:69:b6:9a:81:bb:91:df:cd:25:f0:16:50:84:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Jun 8 06:00:36 2025 GMT
Not After : Jun 9 06:00:36 2025 GMT
Subject: CN=6e835cd0aff8343adcbc104817b31f6c0cb07092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:57:db:92:cf:7f:90:46:37:7f:6c:cc:31:
86:3a:f3:4f:ac:52:ee:9b:a0:41:2b:88:d6:a4:ba:
cb:c8:44:85:0d:02:fa:64:98:a1:f7:c6:a3:66:1f:
74:57:6c:00:ff:98:57:b7:9e:f7:85:a9:93:90:13:
c5:05:b6:38:a7:4f:32:d3:2c:b4:99:8a:f8:46:6a:
3a:f9:3a:5f:13:0f:0c:88:4b:58:89:95:88:7b:21:
bb:ef:6b:d5:22:ad:a4:9f:78:b5:7b:8c:a4:75:56:
f2:66:8d:31:95:fe:0c:37:ad:ad:f9:03:2e:b7:dd:
8e:f1:0e:24:4f:a8:0b:21:c6:e5:a7:09:42:57:71:
e7:26:38:02:ce:a1:8c:a3:09:a2:50:c9:19:26:03:
c8:22:78:a5:86:e1:17:db:ad:ea:08:b8:01:3c:b9:
66:cb:39:27:fc:99:09:ac:74:ec:5d:78:d0:89:33:
54:2d:4f:0c:4b:06:6d:fd:ed:62:7b:bc:8d:c9:b8:
d2:dc:ba:b3:52:05:c0:09:52:ad:65:46:af:9d:58:
ef:f6:6f:d7:64:8f:d9:63:8f:5f:62:a6:b1:57:f9:
7e:ef:05:3a:f5:f7:f4:da:ef:5f:87:71:dc:15:30:
e6:e0:a5:63:27:52:de:85:56:ca:2c:85:25:d1:1d:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:5C:D0:AF:F8:34:3A:DC:BC:10:48:17:B3:1F:6C:0C:B0:70:92
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:30:52:ee:4b:04:f3:f3:53:a5:f8:52:1b:d3:4f:97:cc:2d:
cb:7e:75:41:0a:73:ee:f9:4a:49:fd:f2:b5:46:73:3e:14:18:
47:00:39:92:b4:ce:b9:05:93:51:79:6e:20:8f:95:44:ec:b5:
d5:1c:1d:04:db:49:1a:ea:3b:3a:7c:aa:69:c9:2d:6f:d2:72:
56:b2:57:eb:5c:7b:85:fe:0e:0f:1e:99:30:35:08:e2:b1:c2:
f5:b1:9d:b7:25:68:2e:09:73:78:a1:a4:f0:bc:62:e0:22:98:
f0:74:89:94:68:39:42:26:06:5a:91:4f:61:73:36:8d:9c:fd:
a5:da:0e:15:65:de:72:3f:d4:b4:bc:ff:a9:7a:89:1c:83:dc:
52:ff:62:d7:39:97:30:44:ed:e1:ff:b0:da:33:13:f9:cb:f9:
00:29:78:54:1c:8b:39:ce:a2:93:e9:53:c8:4d:7f:fb:99:11:
2f:99:b0:28:af:cd:8b:46:0f:e9:13:02:d8:3c:00:b6:26:f9:
7d:c1:b5:9f:6b:b9:5f:76:ff:45:f0:ec:61:2a:ac:81:4a:fd:
f2:f1:c6:cf:f1:6c:7a:ce:d4:e6:fd:57:10:0d:05:ef:e4:76:
7b:8e:31:be:18:43:0b:b8:ce:93:cd:f2:c5:e8:29:6b:27:27:
aa:16:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:16:38 2025 by rpki-client