Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: BNFgJxWZ9Dx4+d1C//M/6zl/ewQzBqZ+yWrxXsvUevA=
Subject key identifier: EE:D1:69:47:73:87:7A:DC:12:53:8F:7D:DB:0A:A6:F4:FC:45:13:C1
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 0197CDCECE3E6FC2227E76C9128AEC513164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 01:02:51 +0000
Manifest this update: Thu 03 Jul 2025 01:02:51 +0000
Manifest next update: Fri 04 Jul 2025 01:02:51 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: qvo/cKNks8pjeMHF2ZlZFY8d/ECwTCJLSqhXuQ05LCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:ce:3e:6f:c2:22:7e:76:c9:12:8a:ec:51:31:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Jul 3 01:02:51 2025 GMT
Not After : Jul 4 01:02:51 2025 GMT
Subject: CN=eed1694773877adc12538f7ddb0aa6f4fc4513c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:c0:27:6a:a5:0a:f9:2e:9f:72:a8:bf:bc:
07:d9:78:f0:3a:78:61:af:b3:48:dd:3b:c9:27:a7:
83:b2:9a:1a:b1:a1:59:a0:91:6d:15:25:05:f3:6b:
73:41:7f:c8:81:c1:dc:20:8a:28:9a:7f:d3:f3:53:
86:23:40:bc:f7:35:81:67:87:a5:fa:5a:78:e3:63:
db:52:b3:1a:2e:97:9f:2b:1b:30:b0:88:30:07:c4:
b9:a4:6b:ca:fe:5a:6c:23:86:36:4a:5c:9e:b2:fc:
89:68:28:0b:a3:8a:34:8b:19:13:61:4e:85:30:ef:
d7:28:cf:64:fd:ad:ab:ad:bf:da:ba:12:78:09:e9:
fb:e2:c2:17:79:2b:36:bf:75:97:91:2b:11:7e:52:
65:2d:d1:8a:a6:15:c9:0c:db:ea:a6:b6:61:6e:0b:
5a:23:96:bb:d9:9b:a4:8f:57:2c:3f:57:c1:09:e5:
d6:a7:44:2b:77:43:8b:6b:a7:ff:7c:34:d6:bb:24:
e2:6b:69:0b:03:c8:86:70:1a:c0:d2:45:fe:e4:b6:
f8:12:b3:de:8b:b4:c5:7d:f8:d8:62:05:86:ac:5a:
2d:2e:2e:0b:40:35:d2:eb:a0:58:1f:f2:6c:29:63:
4a:37:3d:f4:be:b8:ea:01:75:b3:19:15:98:1a:6f:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:69:47:73:87:7A:DC:12:53:8F:7D:DB:0A:A6:F4:FC:45:13:C1
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d6:12:78:1a:02:e1:73:84:3b:f2:c6:ac:18:15:a4:2e:ac:
dd:3c:ad:eb:e5:b0:15:23:8a:0e:2a:e7:cf:e1:3e:d6:0b:3a:
9e:c8:45:7e:24:79:7c:fb:e5:d4:f8:19:d5:f0:35:a0:37:06:
19:7f:39:0f:ed:d4:53:cc:c9:81:9e:7b:36:6c:1a:cc:b3:31:
30:6d:2b:20:19:6b:80:c1:af:85:ec:0c:ad:ce:2b:c9:3d:0a:
72:fd:ca:79:af:86:d0:ee:1f:56:9e:3a:63:e0:2d:9e:b6:28:
4e:14:fb:43:2b:b4:6a:c0:91:ee:c8:f7:16:e0:31:90:69:6b:
49:9b:8d:74:93:5e:07:78:fd:52:6c:e1:2b:84:24:96:c3:19:
12:ae:ba:f1:f3:00:df:9c:04:31:07:45:c8:f1:c1:a4:30:f5:
c8:b6:c3:f1:61:32:37:9d:2e:19:10:d2:1f:8b:ad:87:d3:93:
f0:d9:5e:b9:88:3b:a1:30:fb:95:70:e5:54:73:9c:c0:64:db:
35:35:9c:88:98:da:ab:78:88:4f:09:5a:cb:c1:3c:9c:80:8d:
a7:4a:fc:59:a0:96:b1:10:a5:2d:da:df:23:39:93:a9:c7:fa:
ee:2a:97:df:db:51:a6:49:c9:3c:46:8c:48:6e:4a:53:3e:84:
b2:2e:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:18:51 2025 by rpki-client