Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: VKqZbvHPRI+etJ2N2yvPmZvoZq47bx3njqlugApD0T0=
Subject key identifier: 59:D3:1E:29:8D:13:40:2B:85:73:F7:86:B5:2C:69:9E:A8:48:16:A8
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 0197CF4DF25DCF0243866EC0802589AE2D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 123C
Signing time: Thu 03 Jul 2025 08:01:21 +0000
Manifest this update: Thu 03 Jul 2025 08:01:21 +0000
Manifest next update: Fri 04 Jul 2025 08:01:21 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: M7mtvQU8W60Lze7FgAeNZVN0A03z6zAjYjHm4CqCDGs=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:4d:f2:5d:cf:02:43:86:6e:c0:80:25:89:ae:2d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Jul 3 08:01:21 2025 GMT
Not After : Jul 4 08:01:21 2025 GMT
Subject: CN=59d31e298d13402b8573f786b52c699ea84816a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:06:b8:6a:c8:fb:7b:48:63:a8:8b:3a:f0:
a8:3a:3f:46:a6:6c:55:ee:06:6d:21:29:fa:f5:a3:
4e:c0:35:84:30:76:6a:2e:fb:d4:fb:3f:a7:94:78:
a5:cf:da:db:ba:8a:f1:69:d5:61:7c:a1:ed:cd:5a:
e8:4f:d5:2c:a5:27:3b:0e:01:62:83:03:46:83:1c:
4f:a5:5d:88:09:4a:6b:3b:c2:8d:df:74:43:d4:5b:
ed:94:c0:32:d9:3f:1e:82:49:18:ec:64:f8:ee:bb:
8f:9a:b2:31:e0:d2:3f:10:89:1a:5b:1e:10:76:ca:
5d:18:c7:47:01:03:68:03:93:e1:af:13:99:af:e8:
b5:1c:00:3d:41:51:81:2e:0a:f2:ff:e0:40:f9:ab:
29:10:4d:d1:26:f3:6d:3d:b5:93:7f:39:63:f7:de:
72:30:e9:4d:ad:b1:d3:d9:dc:c2:a6:1c:1d:7a:dc:
06:e7:18:d5:99:98:b3:37:9d:64:a3:aa:b7:f3:a8:
8d:6f:c4:36:ce:72:84:79:d9:f6:91:cc:b9:8e:2b:
60:43:f2:5b:5d:b3:c3:e3:ad:6d:5f:77:d0:fe:b1:
01:7b:26:aa:d0:4f:86:14:9f:f7:05:8e:8b:7d:76:
f6:6d:aa:e5:b1:ea:11:37:36:d4:90:90:ac:34:1e:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D3:1E:29:8D:13:40:2B:85:73:F7:86:B5:2C:69:9E:A8:48:16:A8
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:60:64:cd:bf:3a:43:37:c9:40:2b:87:91:57:7b:af:05:c8:
c7:e0:81:19:23:06:f3:e8:07:a0:92:cd:e1:c5:01:c8:df:70:
2f:27:30:10:f3:2c:93:c8:51:d3:8a:97:5c:46:8c:0a:b2:96:
32:45:7b:17:f8:52:14:7f:53:00:d6:ee:f1:a4:e7:4d:dc:bf:
27:97:66:a0:a5:1c:0a:90:15:93:00:74:93:94:ce:93:72:c9:
fe:21:7e:de:9e:5e:fc:5d:79:08:af:e9:86:72:f1:e2:f0:d4:
8b:81:ec:e3:bc:65:93:6a:56:62:ca:68:83:ef:a1:49:cc:27:
96:59:6e:1b:a7:09:4d:de:5f:3a:f0:14:28:f0:5d:cc:bc:bd:
06:2b:0f:d9:54:23:a6:31:85:c5:f6:84:df:2e:a4:14:99:20:
7d:43:36:e6:c1:66:eb:d8:34:14:f7:43:2d:27:51:ea:fb:dc:
00:b4:2b:30:46:33:31:d0:90:f1:f2:53:15:be:d7:1c:72:99:
2d:f4:3c:a3:c4:50:39:d0:e7:a2:1c:39:c2:f4:b1:ab:af:1c:
e6:e7:fd:92:51:65:10:dc:0a:14:03:67:ca:a7:6f:fa:a9:79:
4b:3b:46:7f:b6:40:8a:b0:6e:a8:e7:da:a6:42:7e:a2:15:07:
e5:d0:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:40:10 2025 by rpki-client