Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: EE44le53MghyUV0Di5cxQcNhobr8OdLz0JnuwxJQxuQ=
Subject key identifier: E7:0F:22:A8:A4:8E:F3:32:57:A9:A5:D3:ED:F8:6F:D1:F9:91:59:33
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 01974D449BD02FF982AA61F74EC41990DC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 1212
Signing time: Sun 08 Jun 2025 02:00:31 +0000
Manifest this update: Sun 08 Jun 2025 02:00:31 +0000
Manifest next update: Mon 09 Jun 2025 02:00:31 +0000
Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: 5F4FjUs+ZATV1X/BS3HOz7WVDdLZXcI4anohGt7aqIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:9b:d0:2f:f9:82:aa:61:f7:4e:c4:19:90:dc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Jun 8 02:00:31 2025 GMT
Not After : Jun 9 02:00:31 2025 GMT
Subject: CN=e70f22a8a48ef33257a9a5d3edf86fd1f9915933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:9f:e5:45:1a:92:f6:e6:bf:30:b6:38:0c:
aa:ab:d6:12:70:d7:0b:9d:cf:96:1f:5a:b2:3c:9d:
52:a7:8e:94:42:72:0b:62:d3:99:22:34:0c:5c:c8:
3f:7f:64:fa:aa:fb:8b:ca:11:6b:06:ff:a9:e6:bf:
84:32:4e:c9:2d:1d:dc:29:84:68:b8:c4:90:09:64:
6e:ef:c2:62:8b:5b:c7:0c:9d:b4:7a:64:d6:d2:b4:
ba:4d:b6:8f:ce:29:33:fb:68:f4:01:b7:34:95:d4:
4f:44:fa:e4:26:c5:b6:c8:e3:5e:c2:87:11:46:bc:
dc:d1:97:6e:39:86:93:98:8c:52:31:a9:aa:a9:3b:
1e:95:1b:6f:b2:32:ed:d1:bb:5c:1b:1e:14:18:fd:
59:6f:97:5d:68:65:1a:ff:09:97:62:4b:1b:25:9c:
82:1e:75:ab:c0:25:8f:bf:ad:e1:97:b8:7a:26:12:
0d:25:7e:94:4a:0d:54:87:72:e6:67:b1:41:8a:82:
4f:fb:12:40:15:b5:20:44:fa:83:fb:84:2b:96:e6:
54:32:13:b7:c7:ba:e2:b7:4c:86:99:79:0b:6e:87:
44:f7:af:93:f7:50:47:f6:13:06:b8:9a:ed:2c:fa:
4f:08:39:4e:73:30:82:4e:60:38:e8:a2:67:10:34:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:22:A8:A4:8E:F3:32:57:A9:A5:D3:ED:F8:6F:D1:F9:91:59:33
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:75:4b:e0:46:96:60:db:d8:6f:61:b7:c2:61:b8:7c:c6:99:
e6:49:81:19:b0:ab:a3:de:11:f2:55:1d:fa:22:82:ba:ee:f9:
9c:6b:59:2e:e4:74:f7:ab:80:91:5b:36:fc:25:32:e0:c6:78:
22:ba:0f:2f:e7:a4:5f:62:a7:f8:69:4f:5d:3a:77:e0:23:84:
3c:54:1c:ef:f6:1b:0a:4e:ce:0c:db:9e:0b:0f:78:ec:12:48:
04:27:37:9c:67:cf:a2:20:d4:1a:35:1e:86:49:42:47:56:d3:
59:ff:1a:b3:1c:14:b5:bb:9b:8b:4b:c3:0e:f6:ee:d1:c1:46:
9b:86:f2:05:26:7b:4b:2f:be:d5:5c:31:5c:62:72:ab:25:54:
b6:2f:d3:f2:f3:6e:36:b8:0c:01:c3:10:73:bd:f6:d1:11:10:
b3:58:c6:f6:84:36:f9:0c:86:98:ee:b0:43:4b:86:3d:d1:9e:
84:bc:f4:9a:6a:ee:8e:49:9d:2f:8b:9b:a1:b4:ee:59:f4:99:
72:72:80:e2:a9:30:b7:ca:2e:4b:be:ed:8a:4f:3f:f4:0a:d5:
55:cf:ca:f7:e1:a6:54:f5:63:a3:e0:1d:58:67:e4:61:4c:e7:
52:09:48:da:72:4a:59:3b:5f:cf:c1:19:09:44:2a:30:54:83:
fc:87:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:46 2025 by rpki-client