Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File: mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier: 8ceGtzAv1GzhSZCX/4E7akCXTbHOvD2N5p9/P8dvwTk=
Subject key identifier: 4C:B3:81:04:40:D9:F1:1C:9F:A6:76:EE:05:B8:BB:20:C1:D2:01:08
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial: 0197C9F1FCE394A4A94E6CFEE48B297B962E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number: 0673
Signing time: Wed 02 Jul 2025 07:02:48 +0000
Manifest this update: Wed 02 Jul 2025 07:02:48 +0000
Manifest next update: Thu 03 Jul 2025 07:02:48 +0000
Files and hashes: 1: BDTH3ILUan6_zfYPTgmdo2aSIEs.roa (hash: vfoMCSza5cDas2vR4Ocwzq0jqksW2l8HAJ0wMflsMqE=)
2: E5IVKgbJt2zbKiLJbsrX3LIySFU.roa (hash: tGHo3B7TRCKpsC+++roBe0/3ivzBH+Ps/KgroLhmH0s=)
3: UaT5Q9bX82Bqe6jOA8JUwqN9Vlk.roa (hash: juEH9dDl19+Gh9JzennWIbN6WX5TGedOU3KMBiUkbg4=)
4: Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa (hash: 4c9/YhL+TK23Lox9YjacyfqcSWeripXtyhdacCRYF0A=)
5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: wPnH1h5RNyNVft+Xlp+ELBsURb7XlGMCvh4v2luNRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:fc:e3:94:a4:a9:4e:6c:fe:e4:8b:29:7b:96:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
Validity
Not Before: Jul 2 07:02:48 2025 GMT
Not After : Jul 3 07:02:48 2025 GMT
Subject: CN=4cb3810440d9f11c9fa676ee05b8bb20c1d20108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:f7:53:13:6f:1b:3a:98:19:f2:e3:a0:1a:
d5:6e:80:90:60:76:df:77:bb:32:40:af:3c:9e:21:
c8:f2:e0:b1:7c:19:49:eb:f4:73:a9:b8:33:79:ca:
a2:4b:2d:4f:e5:30:8e:a9:36:97:de:e7:6b:19:93:
58:11:58:f2:b9:89:05:bf:6a:e7:ae:11:2e:5c:62:
14:f1:d8:95:ff:10:5b:ee:77:48:77:fd:2b:4b:c8:
47:cc:c9:52:1f:b6:a7:a5:92:f7:dc:ce:99:ad:c3:
44:22:ec:75:c9:d0:2f:61:73:77:b9:a8:e1:9d:4c:
2f:24:9f:d9:7e:c0:1f:9b:a5:4a:4b:dd:1f:0e:90:
da:1e:22:0c:ab:81:b1:8d:2d:4e:26:68:49:d2:84:
d3:1a:7f:1f:78:e2:50:20:48:d7:87:cd:18:ac:46:
63:57:d9:fd:55:2b:e8:89:f6:02:83:3a:f0:d8:da:
15:9e:96:0c:d2:65:91:50:b0:43:77:d0:42:30:34:
7f:63:73:61:4e:f2:de:b8:1d:c6:21:9c:95:47:9d:
66:d5:e9:32:31:0c:55:89:26:a0:f7:68:18:87:81:
dd:cb:5c:cd:5a:fb:42:17:e4:b0:0e:43:7a:8b:d4:
0c:25:65:30:62:fe:66:8a:b5:d6:22:15:9a:0e:99:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B3:81:04:40:D9:F1:1C:9F:A6:76:EE:05:B8:BB:20:C1:D2:01:08
X509v3 Authority Key Identifier:
keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:ee:43:f2:b9:3b:59:f7:73:82:f4:59:37:b0:36:23:4d:88:
e8:ee:59:7c:cc:10:93:92:a5:d2:8c:7f:61:97:09:e6:12:8e:
3a:18:6e:34:c3:8c:86:26:a0:e9:80:0f:e7:b7:5d:dd:51:64:
ed:d9:24:a3:59:ae:6c:aa:6e:68:7a:7e:3f:3f:b7:28:84:ad:
97:62:fd:9f:10:57:5e:1e:f0:19:0a:f0:2f:98:2c:9a:f4:92:
8f:9b:19:56:a8:30:62:f3:9c:35:da:22:0a:24:51:9e:66:7d:
53:6c:d9:cd:f3:fb:0b:e9:97:96:26:a7:dd:85:e7:28:48:8f:
64:da:4d:bc:24:72:b3:6a:a9:c4:a6:f7:47:98:7c:c5:43:e1:
ef:0d:ad:43:6d:08:85:1c:09:ef:54:29:45:4c:20:49:32:d9:
c7:e1:f6:ba:1d:f8:95:1a:a6:e6:6f:44:1e:c8:74:21:96:95:
86:e4:03:0d:12:95:9c:1a:aa:60:3e:2e:e1:7b:a7:74:66:ba:
85:9c:fe:0d:92:d1:28:f9:d7:f8:c5:0f:9d:73:af:b1:15:5e:
19:6a:b4:25:60:a5:02:0f:76:f4:14:55:bc:e3:f6:35:61:7b:
70:91:3a:48:26:c0:c4:ea:76:df:5a:45:21:b8:1e:43:5b:02:
28:45:02:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:48:25 2025 by rpki-client