Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: fPzFIT3AYMp+Ng+rECs4pBFLAGP/NFKDZsuyUTrexXM=
Subject key identifier: 33:99:B7:34:E2:17:08:87:2E:1B:50:C8:63:A3:AC:BF:63:5A:81:AE
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 0197B632BEAF5F5F6AC60F72FCBA0ED90AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:08 +0000
Manifest this update: Sat 28 Jun 2025 11:01:08 +0000
Manifest next update: Sun 29 Jun 2025 11:01:08 +0000
Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: g+US04IQGGey5O2y09LdXyrtvkyGZPwDQ1hmRy2m4MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:be:af:5f:5f:6a:c6:0f:72:fc:ba:0e:d9:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Jun 28 11:01:08 2025 GMT
Not After : Jun 29 11:01:08 2025 GMT
Subject: CN=3399b734e21708872e1b50c863a3acbf635a81ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:e4:c4:00:39:b1:a1:79:81:6d:25:7c:8d:
00:de:10:96:28:1a:0f:8c:83:6e:ca:b7:aa:b6:27:
e6:45:ad:8f:bf:43:4b:9b:34:cc:34:11:2f:33:72:
8a:e1:18:a2:29:7b:f0:87:d1:22:d5:85:c1:53:5c:
b1:0f:d7:ef:53:fe:9b:c8:22:d3:85:c9:60:ac:56:
8a:d3:f0:ed:a2:be:46:12:54:27:49:89:81:7c:60:
a9:ca:c2:4c:34:fd:8c:5e:62:96:8a:6f:3d:cd:60:
15:57:e5:34:66:2d:51:4e:3c:b4:65:bc:fe:1a:3f:
e8:a1:f9:c7:e2:c9:6a:1b:46:a4:75:f2:78:2a:b5:
5e:15:93:6b:ff:e4:66:b6:1f:f5:ac:e1:81:7c:1a:
6b:e0:19:47:48:b9:07:23:97:39:a5:1a:05:3a:be:
8a:b0:0d:f7:68:7a:ab:b1:d5:4b:9e:e1:9a:56:0f:
f8:42:b9:7b:3a:08:60:89:65:e6:37:dc:d8:75:79:
cb:6d:09:98:8e:e8:52:19:f8:f2:39:63:9d:1c:f0:
48:10:5b:33:55:43:44:09:98:aa:6d:92:29:e3:a1:
6e:e5:69:81:f5:56:b5:7c:69:6d:79:90:37:e3:c9:
8d:8a:64:b8:1c:d9:a2:ff:9e:90:e2:e2:80:fc:99:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:99:B7:34:E2:17:08:87:2E:1B:50:C8:63:A3:AC:BF:63:5A:81:AE
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0a:45:4d:ab:30:4a:b4:b0:6e:d4:d1:1e:04:44:33:4e:ed:
4b:dc:56:bc:f6:bb:02:bd:fe:df:e0:a8:9e:ef:ac:c1:c0:65:
16:0c:15:14:84:0e:fc:81:a2:48:ce:b6:ba:33:0f:bb:c5:a8:
e5:18:56:24:2b:8b:bc:f4:7a:26:ba:e1:09:75:95:d4:f9:12:
d3:ff:43:51:1f:c9:c0:82:fe:a4:7a:f9:42:4a:96:c7:2d:e6:
11:95:f6:93:c6:6d:ed:f5:93:6e:a9:9b:93:df:fb:ee:e8:08:
6a:ef:83:09:16:f5:b6:fc:7d:90:e4:6a:3f:78:ae:e9:9f:05:
60:c5:f2:20:2b:a4:2c:17:36:5a:57:6f:24:24:23:f1:45:6d:
be:9a:22:60:3b:ce:72:a0:a7:46:2b:c3:5d:9f:96:96:00:19:
eb:0c:36:6f:3d:15:71:ea:17:15:f1:ae:13:61:91:80:0a:3a:
72:19:20:ec:f2:1f:48:da:d2:60:b4:09:7a:43:3b:bf:09:28:
d9:c1:62:4b:12:95:48:72:2f:5c:5b:00:db:49:df:11:0e:d9:
c8:d3:5c:cb:20:8a:f0:c9:32:f9:b2:c8:d5:cf:88:b0:3d:9b:
5a:df:1b:a0:ad:ac:6d:8e:48:d5:ee:49:1c:ef:fc:ef:f8:84:
2b:ee:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:32 2025 by rpki-client