Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier: Y/8kvncGlvNQAwiHGo1QH8CI1uQfq0hp8mR253g+L+8=
Subject key identifier: C7:87:C2:1E:06:AF:31:69:D7:0E:08:DB:4F:88:73:31:28:35:E4:DF
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 0197B7B31DC87174BB7598E60EE1E1CB8349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number: 12DF
Signing time: Sat 28 Jun 2025 18:00:58 +0000
Manifest this update: Sat 28 Jun 2025 18:00:58 +0000
Manifest next update: Sun 29 Jun 2025 18:00:58 +0000
Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=)
2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: FxuJVGJvHBWrCxtLAcSSsSphY7rroGz+2ggzCF8oRS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1d:c8:71:74:bb:75:98:e6:0e:e1:e1:cb:83:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Jun 28 18:00:58 2025 GMT
Not After : Jun 29 18:00:58 2025 GMT
Subject: CN=c787c21e06af3169d70e08db4f8873312835e4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:dc:00:9a:f3:13:fd:2d:cf:36:37:04:0a:
91:ff:65:be:79:bf:15:8a:57:40:86:80:98:cd:bf:
44:44:0c:d8:41:3b:a5:01:9e:cf:d0:78:8d:e9:6b:
34:29:c1:71:7e:d1:70:d9:1c:11:b8:a4:0d:f0:ee:
4b:9c:66:c7:8a:f0:5d:0f:66:37:d5:14:98:40:07:
ff:fb:09:57:f5:82:4e:f1:59:e6:78:af:ae:bf:3e:
8e:f3:dc:54:e4:b6:0b:a9:9c:3d:df:ff:8b:94:ce:
a0:3b:80:b0:e8:71:91:29:5f:53:6c:d1:f0:08:f1:
1e:69:22:7c:e0:d7:22:70:b7:6a:82:8d:7b:2a:e5:
c1:e6:48:bc:c5:d9:1c:b2:31:fb:92:91:5b:85:44:
00:3f:28:25:cd:99:5d:6f:bd:54:ad:54:09:f0:89:
96:df:13:50:75:5e:27:0b:e8:94:8b:96:57:d1:9e:
91:f6:5c:b7:2c:a4:56:3d:0c:36:3f:2c:6c:65:cf:
19:cf:f2:c8:16:2b:e1:ae:ef:3c:84:c0:d0:f6:a8:
ec:f8:55:fa:f4:61:5e:54:74:da:21:32:f0:ed:81:
e6:89:33:db:97:66:f7:d6:d7:c8:2e:d2:87:8d:99:
d9:47:eb:25:bd:f9:d0:1f:32:0d:81:6d:e9:d0:37:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:C2:1E:06:AF:31:69:D7:0E:08:DB:4F:88:73:31:28:35:E4:DF
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c7:4f:21:98:e1:3d:16:4b:08:4a:4b:8e:6f:15:cc:7d:0c:
0f:e8:b6:c0:70:ae:03:ae:b8:a7:bf:f5:7c:16:a4:5e:3b:0b:
7d:fe:f1:e2:6e:d7:ce:ef:db:ea:90:e2:2f:db:ca:20:28:bb:
3d:94:e8:4d:a3:ac:55:7f:b0:4c:e9:ea:95:c4:e4:ec:68:0a:
b2:dd:a0:2e:72:57:ff:df:1b:3d:ae:60:f4:c3:b5:b0:45:89:
0e:74:c4:67:2b:1a:36:68:fc:1c:2f:f5:43:8f:f7:3f:0a:0e:
6c:21:d1:2b:c6:70:a1:ff:4a:e5:49:5b:3f:ed:4b:90:8c:47:
8a:71:2c:0a:26:aa:c8:50:a4:f2:27:2a:54:e8:28:1a:8d:3b:
bf:39:33:f5:65:f8:07:2f:94:3a:49:9a:a2:d0:a2:67:4e:ff:
c9:b4:70:dc:80:f3:5d:8f:50:ad:89:22:8d:16:32:7e:ac:b6:
f5:5b:37:1f:95:03:8b:22:16:e2:2e:20:db:6d:a5:ad:83:95:
0a:75:9f:91:cf:1c:e0:72:b5:61:9f:c5:a8:b9:94:40:1b:bd:
fe:ee:d3:28:d4:80:c0:a5:c2:1d:d5:03:6e:0b:2e:be:0e:51:
6d:42:f3:b6:e9:4d:c5:88:dd:e9:6e:94:20:4a:b5:70:e1:2c:
aa:3b:1a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:10 2025 by rpki-client