Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: TrlKofXIVCIqehORaiceWLgxxsT+fdWIvJGcrZlVYQM=
Subject key identifier: 52:32:78:00:44:68:22:66:28:77:3B:CF:62:22:9F:48:D5:70:14:A5
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 0197CA5E86BBB593E0B28535C93A5CB34B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: 0232
Signing time: Wed 02 Jul 2025 09:01:21 +0000
Manifest this update: Wed 02 Jul 2025 09:01:21 +0000
Manifest next update: Thu 03 Jul 2025 09:01:21 +0000
Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: Yd0wix3p9bzeJpyzbP2ikOIjjB10RWW7/fBkaXVSQtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:86:bb:b5:93:e0:b2:85:35:c9:3a:5c:b3:4b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Jul 2 09:01:21 2025 GMT
Not After : Jul 3 09:01:21 2025 GMT
Subject: CN=523278004468226628773bcf62229f48d57014a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cf:f9:16:81:18:5f:6f:d3:c7:66:c8:49:23:
67:d6:60:dc:f9:b8:a1:50:c8:83:ca:18:84:00:97:
8a:68:96:c9:07:08:61:e4:c9:5f:db:27:1e:fb:09:
79:04:28:a0:8a:65:4b:a4:e6:21:62:5b:06:10:5f:
e1:25:52:2b:df:b3:f0:82:ec:a8:f1:ed:a5:b0:3e:
cd:b7:ef:ed:21:73:36:6d:64:6c:65:1f:2a:01:12:
fb:23:96:78:ab:9a:f5:71:bb:3f:f1:84:36:e6:14:
7f:15:37:f7:73:65:ba:56:c1:20:ce:1b:3f:1c:4b:
22:10:f4:ba:d6:7b:79:ce:9e:c6:55:ed:34:a4:fe:
1b:66:91:6f:08:6b:13:fe:1f:97:bf:77:7e:eb:ab:
08:ab:76:f2:15:fd:93:01:d5:17:38:88:60:60:94:
e2:9e:3c:c2:50:9b:76:ec:ba:33:ef:70:f8:75:69:
71:63:33:be:e5:87:53:e5:e8:d7:6f:3f:14:e8:8f:
95:25:3a:e3:86:75:7b:f9:1a:ca:4b:17:ea:98:01:
06:dc:e2:88:d3:e7:e7:41:90:d4:bc:79:de:27:3a:
63:c6:64:fb:55:a0:8d:bb:c2:9b:86:32:64:80:1f:
ef:f3:2e:80:11:51:12:1f:bd:ef:9f:87:07:9a:c0:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:32:78:00:44:68:22:66:28:77:3B:CF:62:22:9F:48:D5:70:14:A5
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:67:55:ec:c3:70:36:b7:ed:7c:4e:b6:e7:8c:5f:1a:59:d0:
fc:4d:8e:6b:bb:3e:74:1e:d4:28:a3:ae:4a:ca:76:72:d5:c8:
4a:9d:4e:c4:2b:fe:5e:66:43:5d:02:8e:2c:48:24:bc:2f:16:
cd:93:bc:26:cb:48:7f:0c:6d:dc:ae:c5:14:a5:79:98:c8:1b:
21:27:e8:41:78:c0:6e:57:9a:be:a5:79:9a:06:23:e2:ce:53:
4e:10:e5:6b:cb:c6:ac:40:84:f7:48:b4:20:61:ae:5c:e2:4b:
89:b4:d0:72:4f:10:0f:45:0a:3c:15:95:1b:9f:0d:c6:75:87:
4b:0f:e6:c3:1a:93:15:e5:d6:89:79:16:3e:55:86:c6:95:6e:
b3:45:44:f2:42:d3:1c:ad:bf:44:1a:3d:9c:e9:da:4c:f5:86:
bb:1e:6f:12:08:c9:b3:07:77:3f:25:63:11:27:97:c9:6e:92:
a3:39:78:99:3a:c3:fb:bd:ba:d7:f9:36:74:db:b0:9b:a3:86:
ee:b4:62:78:01:1e:6e:a1:97:2c:50:f1:e4:74:7a:9d:32:ab:
1f:65:dc:e6:8f:09:eb:73:c9:05:25:8a:84:70:30:a8:6f:54:
d9:8c:cf:9c:a0:f8:49:87:af:b5:38:f5:67:e5:45:86:ff:73:
80:9e:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:34:24 2025 by rpki-client