Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
File: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json)
Hash identifier: o15/LVD8ZJoRvK401tlrVIO5IPTWMP1t6jSd8wl46WY=
Subject key identifier: D4:C6:41:11:F1:64:87:B4:ED:49:2B:A9:18:21:9F:F8:A2:18:14:CE
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial: 0197B70E8C937E23CA1B721E0A15E4671014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
Manifest number: 08
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: ba9v08liYR6DAROKpZZNAq64cFrtwqqLmoCjkKctB74=)
2: oidQOFv_T3t4hgPCm6h_UreADsw.roa (hash: y9QfSR0j2NSF/2jSZyP0tv3TDh1rVPF+ZeadaUNAaYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8c:93:7e:23:ca:1b:72:1e:0a:15:e4:67:10:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=d4c64111f16487b4ed492ba918219ff8a21814ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:26:a7:d3:59:51:5b:60:df:94:91:e8:72:
f6:06:57:18:69:f7:85:0a:55:a8:bb:3d:90:76:e7:
c5:81:56:46:77:f6:e8:74:b0:88:15:59:36:cc:6c:
d6:ce:58:95:28:dd:91:1d:cb:aa:56:78:d0:d6:68:
26:8e:c9:41:f7:c4:1c:41:e6:f4:a9:91:55:91:45:
5e:0f:4e:cc:cf:12:6d:eb:d3:c4:50:94:3e:b1:10:
95:d4:15:1a:3b:97:3c:31:f1:5a:d6:d8:f6:2f:f6:
a6:71:6d:9d:fb:99:6a:87:05:67:08:83:a9:d0:bf:
04:ac:d6:6e:f7:9c:4b:47:95:a2:85:93:c5:67:cb:
c4:ac:06:56:76:95:7e:87:6b:1d:c3:9d:14:3a:9a:
e4:5d:17:3d:41:d3:f1:b9:6e:a7:63:05:2c:a4:1c:
11:81:ee:57:ac:16:d1:47:53:0f:74:1f:7b:99:fd:
f9:53:ea:90:6c:91:b5:98:ad:74:c2:97:32:b6:c4:
a4:8a:92:98:41:a6:e0:f2:1e:79:b3:3c:2a:01:8e:
fc:d4:11:7d:00:f9:5a:93:1c:44:4b:fc:c5:66:f9:
fb:da:19:a0:91:dc:3f:57:1d:0d:2c:90:1b:76:96:
0e:9e:4a:a4:03:76:79:ee:c0:48:b2:a7:2b:e6:c3:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:41:11:F1:64:87:B4:ED:49:2B:A9:18:21:9F:F8:A2:18:14:CE
X509v3 Authority Key Identifier:
keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:20:1e:11:35:ff:59:9f:df:10:e2:a3:65:1d:b5:10:5f:72:
3e:e9:de:44:75:29:3c:c0:18:9a:46:53:5e:5d:2f:77:83:d4:
77:6a:d4:75:4a:e6:a8:aa:7b:e8:36:a9:b4:e8:ab:68:a2:17:
e8:2e:63:a6:22:36:da:10:e4:04:6b:68:bb:fb:59:f3:bd:1f:
ef:81:f9:ad:fa:b6:51:9f:aa:31:12:51:4c:6b:de:58:23:83:
ba:58:bc:2f:aa:be:5a:95:34:2c:37:71:36:3e:1b:af:7a:bf:
28:81:2b:28:7e:3f:51:4b:a9:d6:fd:65:57:f5:98:00:86:7c:
47:8a:44:ac:7d:1d:39:13:80:ca:9e:6e:46:81:5a:6b:21:f7:
16:90:15:aa:3f:98:92:73:aa:8c:d9:77:52:22:db:09:50:da:
11:be:e6:bc:fc:9c:95:3c:05:34:d9:08:be:a3:aa:f9:ba:69:
a3:be:f1:e3:eb:73:d4:98:01:86:97:ea:dd:5d:b1:d1:57:49:
b1:81:81:2f:f2:fe:2d:dc:7c:09:24:e4:ad:02:2c:9f:ef:3e:
85:d9:95:78:d8:b7:90:78:70:c6:f0:37:eb:7e:b5:96:4d:12:
d7:68:4a:bb:ee:83:ea:e5:e1:bd:c9:f9:94:de:e9:2b:9f:72:
16:ff:d4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:34 2025 by rpki-client