Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
File: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft (raw, json)
Hash identifier: 9dU/9401dOgO1snSytTxJ40aQZwlgt0+8tkzOaTFaKo=
Subject key identifier: 8F:48:C1:4E:B5:72:E3:A8:30:99:B5:C9:88:21:1B:17:70:E7:52:AC
Authority key identifier: 9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
Certificate issuer: /CN=9b792de70f33b82882542bef23b18da97538ca04
Certificate serial: 0197B9A1917728E144247FA0DBDABD242635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
Manifest number: 13BC
Signing time: Sun 29 Jun 2025 03:01:02 +0000
Manifest this update: Sun 29 Jun 2025 03:01:02 +0000
Manifest next update: Mon 30 Jun 2025 03:01:02 +0000
Files and hashes: 1: dX70ap0ffv2FBe6b9Bt26afmx5k.roa (hash: cA6YfbXERPxQEeXnO3dLN4qw3GbtwfitkG8Nn52ipuk=)
2: m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl (hash: n8qq40MKMPzpbntcC3F4MlwYszwO6az4wYdxHc5nMnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:91:77:28:e1:44:24:7f:a0:db:da:bd:24:26:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b792de70f33b82882542bef23b18da97538ca04
Validity
Not Before: Jun 29 03:01:02 2025 GMT
Not After : Jun 30 03:01:02 2025 GMT
Subject: CN=8f48c14eb572e3a83099b5c988211b1770e752ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:37:de:38:43:23:54:43:35:b3:89:83:f7:
52:c0:ec:42:71:40:67:bf:ef:aa:e1:72:1c:40:af:
bd:98:15:e9:34:0b:0b:82:31:56:99:3e:24:62:28:
e5:f3:39:ac:da:ac:0f:76:73:16:82:d6:c7:ee:35:
47:ff:b6:94:18:91:0a:9f:59:b0:4c:c6:71:83:3f:
c4:72:76:9d:af:4c:25:02:9a:bd:8c:bf:70:f8:65:
38:a9:7d:25:85:e1:0c:dd:87:84:7b:a8:71:c2:58:
75:2e:66:26:88:dc:5d:85:df:e2:d7:19:a3:c6:39:
92:fa:10:75:b0:1f:11:75:9d:61:f4:0d:ce:29:59:
dc:95:37:e6:d6:11:b2:77:8c:bb:1a:06:e9:56:37:
ee:5e:b9:b1:2b:a4:05:f7:d4:b6:32:32:11:c3:cd:
bf:e1:a6:2e:71:97:f0:81:2e:16:10:52:81:b1:79:
15:7e:1a:a1:4f:63:2d:4d:7b:0a:36:b3:7b:d5:ec:
5a:eb:ed:77:29:65:a6:d4:ce:7b:4b:7e:17:ef:a8:
6e:cf:a9:5f:b6:62:24:74:1b:14:fd:e2:14:81:da:
7d:6a:7d:3d:fb:61:9f:c5:62:4d:fa:42:a8:f4:df:
26:fe:1e:bf:ce:00:18:9e:84:4b:1f:8b:2d:e1:97:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:C1:4E:B5:72:E3:A8:30:99:B5:C9:88:21:1B:17:70:E7:52:AC
X509v3 Authority Key Identifier:
keyid:9B:79:2D:E7:0F:33:B8:28:82:54:2B:EF:23:B1:8D:A9:75:38:CA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0a4c1e-1fc5-407a-bd08-0717da053585/1/m3kt5w8zuCiCVCvvI7GNqXU4ygQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:83:21:bd:85:1b:c5:48:a2:37:b3:07:86:50:9b:c5:7d:c6:
e2:f5:29:e5:34:75:d6:14:7d:36:31:34:1c:2a:20:52:39:37:
cf:8e:db:ed:97:f0:1c:b0:ac:a0:c1:42:5c:82:59:18:56:d3:
e5:01:e0:53:23:db:db:78:20:d9:fa:42:f8:7e:e6:2b:c5:fc:
a7:28:0c:1f:c1:4d:00:e8:9e:a3:af:19:77:17:45:57:14:3a:
4b:07:41:f5:fc:13:27:21:af:60:e4:33:61:4e:cd:58:32:6c:
1c:92:f3:22:2e:b2:40:4c:37:e5:ec:da:19:56:12:8e:6f:0d:
01:0c:f7:d3:8d:d6:cb:4f:d4:59:92:42:b2:e7:e2:58:9c:fb:
9f:dd:00:e1:c0:d5:95:e3:51:f5:1d:2f:e8:89:da:7e:87:4a:
ab:d2:41:12:3a:3e:ab:e9:2d:cb:3d:19:c3:55:18:c7:5c:ed:
37:07:b9:05:26:aa:97:29:e8:9d:1f:4b:75:0b:b2:3d:27:24:
f9:c4:4c:de:24:bf:7a:f4:53:1a:18:74:1c:3a:c4:2b:5c:00:
81:97:53:96:cb:a2:cf:75:f2:6c:16:51:d7:30:92:b8:78:47:
f5:2a:05:cb:c0:88:e1:88:45:ed:ad:e2:11:7a:b3:f9:dc:c3:
25:80:9d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:12:39 2025 by rpki-client