Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: AeDy3P/MjfRfdNdP89uozl1+QEUf8XcDdkmUFuvlbcw=
Subject key identifier: BB:B6:24:5C:98:96:22:7E:6F:25:E1:BD:49:7E:4A:06:F8:06:37:CB
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 019748FA7763F2F59B01AEF84E7D98C7B169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 14D3
Signing time: Sat 07 Jun 2025 06:01:03 +0000
Manifest this update: Sat 07 Jun 2025 06:01:03 +0000
Manifest next update: Sun 08 Jun 2025 06:01:03 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: c0quvHnCbpfRNV6Ha9TkVmmsEQASvWiRE5S7U6vxac0=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:77:63:f2:f5:9b:01:ae:f8:4e:7d:98:c7:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Jun 7 06:01:03 2025 GMT
Not After : Jun 8 06:01:03 2025 GMT
Subject: CN=bbb6245c9896227e6f25e1bd497e4a06f80637cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:ae:0d:f0:6f:43:07:03:33:8d:48:a6:fa:
07:d0:12:ee:f2:28:fb:83:a4:8c:d0:81:de:08:a3:
ea:77:a6:55:2f:e2:7a:7d:00:e3:3d:a8:26:88:a8:
96:60:f0:c4:33:92:ea:c1:63:c5:b3:4e:78:e6:e6:
27:74:f4:28:7f:08:1d:39:ad:2c:49:46:22:ce:20:
27:3c:28:a6:df:ec:b9:14:96:94:ba:91:b0:47:a3:
0a:25:2e:b7:8f:d5:0f:f2:a3:7f:4d:56:84:e2:cf:
3d:e9:35:96:fe:63:82:66:8c:6b:26:f2:94:b3:ad:
a4:92:c3:b2:e4:96:9f:ac:b6:03:4d:fb:1b:6d:e2:
37:ec:5d:01:a5:d2:a5:a6:4e:ea:08:39:fa:d5:80:
84:70:f1:5c:86:a9:d5:17:78:7d:be:83:3a:89:20:
ea:19:01:96:fe:22:92:3d:c3:6a:0d:7b:11:fa:f2:
d4:5c:31:d6:77:9e:5e:10:8a:aa:cb:1a:89:82:1b:
83:5c:96:f4:68:b0:51:8a:42:09:8c:87:c5:4f:bb:
49:0e:1f:72:92:f4:1e:96:53:c6:7c:69:f0:0a:48:
7d:87:4c:26:44:2a:08:04:ce:24:1a:de:60:a6:0c:
b5:05:8e:14:ba:db:d5:2c:07:eb:28:14:67:80:cf:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B6:24:5C:98:96:22:7E:6F:25:E1:BD:49:7E:4A:06:F8:06:37:CB
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:91:7b:cf:09:90:ad:68:7e:28:6e:2d:50:b9:80:3a:07:cf:
03:eb:c5:df:c2:2b:fd:ca:9c:20:7c:2b:dd:4c:52:d0:f4:3f:
5a:c2:01:93:60:b1:0f:2f:9e:4c:05:0a:58:1c:d2:b6:c8:72:
30:a4:01:52:fd:1f:23:4e:d4:50:b2:97:79:54:22:42:00:a2:
10:a8:4f:b5:ed:f8:90:89:ed:96:84:14:d3:9e:9d:2e:5f:99:
3f:5a:40:9b:28:6c:b5:55:a9:e4:da:77:54:ec:be:15:54:2d:
6c:5b:72:03:45:6d:90:3e:89:34:3e:49:06:0d:e1:d3:72:ac:
4c:1e:d1:c5:33:7e:74:bd:89:8f:88:2a:9b:01:26:fe:98:66:
ff:52:24:b5:b2:b8:82:56:fe:94:db:81:d3:10:3d:7d:8d:25:
d2:50:51:6c:46:6e:3b:fa:5f:6a:26:04:2f:4e:b4:dc:05:ec:
07:30:cf:2a:1b:18:02:b8:9c:f6:5d:7c:3f:3b:e5:e5:4e:49:
ef:70:36:fe:3a:cb:a8:90:ab:ce:e8:f2:41:bf:27:8d:de:a6:
ad:b7:65:75:b9:e1:e0:56:53:13:ef:30:70:51:6b:91:b2:41:
c2:a0:74:97:6c:68:13:b8:7b:b8:cc:17:d9:52:a0:a4:0f:6b:
4b:3c:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:34 2025 by rpki-client