Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: okY+pOrXuasANbySr0V902XSOBUfC7AQBLy6dXXsw6o=
Subject key identifier: 17:C8:9F:3F:EC:DD:68:84:11:13:D7:4D:A7:51:3F:31:6D:7C:8B:34
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 0197B7455ECF6DC63B9A989A0B00782BF2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (hash: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: ONfYqY7CDEA4FvA3Ne3fBaW0QoeiIPcjEfsYwdZ4RaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5e:cf:6d:c6:3b:9a:98:9a:0b:00:78:2b:f2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=17c89f3fecdd68841113d74da7513f316d7c8b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:92:0b:0e:90:6d:57:81:3e:86:97:67:80:a1:
f0:6c:fc:83:a5:6a:98:e1:7d:eb:04:13:59:2a:2a:
94:b0:30:59:ad:40:b6:e8:a7:0f:c3:59:64:e4:5f:
7d:94:22:e1:c4:db:c9:ae:de:b2:85:db:fe:3a:ca:
90:67:63:29:2f:a1:e2:e4:09:89:8b:51:57:94:2f:
b9:1e:b1:30:53:be:9d:83:77:ad:5e:6d:22:1a:a9:
f8:4e:13:47:a5:3e:38:e1:cb:a7:08:91:c6:d6:e0:
0b:35:a7:92:29:e5:7a:4e:82:6b:08:88:99:df:45:
ef:7a:cd:44:38:bc:3c:20:8f:79:6e:0d:55:fc:7d:
94:42:05:2f:72:d3:ea:2e:ab:f1:68:fa:9e:a4:41:
e0:0b:ae:30:54:a7:28:9a:93:7b:40:58:43:02:dd:
e6:5f:b1:7a:60:54:4c:5b:4b:48:b5:cb:bb:f3:7e:
62:9f:53:bd:b6:0f:9e:da:e2:4a:48:5a:2c:43:f5:
30:45:38:8f:91:20:8e:63:0f:13:8c:14:9d:1b:69:
f1:76:a8:c1:ff:a3:ef:ae:66:65:14:1b:23:1f:83:
65:68:4f:d6:b9:46:39:e7:e2:68:2b:72:d2:a0:d8:
24:bf:17:95:c5:d7:d5:00:61:09:20:f6:19:68:16:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C8:9F:3F:EC:DD:68:84:11:13:D7:4D:A7:51:3F:31:6D:7C:8B:34
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:27:30:7c:31:4e:2e:11:83:c3:7f:a1:d9:1a:01:89:b8:80:
34:12:0d:79:fd:39:ec:fe:9c:1e:e5:c9:ae:ca:b4:96:51:72:
5c:2b:06:73:9a:a7:6e:d0:c8:95:ad:d2:dc:e1:11:84:ae:c5:
3a:33:4a:8e:55:0e:dd:d3:c5:11:77:65:77:9c:43:9c:32:54:
54:00:3c:72:f7:51:9a:37:61:bf:62:46:5f:4f:e4:68:a0:67:
e7:29:cc:66:7e:5e:8a:d3:ac:5d:2f:76:10:b9:78:c1:3b:fb:
f1:e3:b0:50:ca:71:c0:22:e6:71:72:30:8f:81:4d:cd:8d:b7:
c2:7b:25:28:86:3f:42:da:1f:67:b3:3d:a4:ee:ee:29:f7:bd:
e4:77:6a:31:ee:3f:ef:53:63:fb:f2:ed:c8:38:01:f6:45:79:
20:bf:d7:67:83:fb:46:8f:0a:c4:33:cc:eb:99:2d:37:7b:e6:
ab:cf:59:07:e3:45:b8:b3:7e:59:e4:b5:84:27:cd:54:47:93:
6f:e9:0f:9d:3e:eb:2c:6e:2b:51:e3:8c:da:49:27:75:05:69:
85:03:77:01:7b:2a:9f:6c:19:50:1f:95:71:0f:5b:28:ac:de:
a2:04:61:06:e4:32:80:cf:14:ea:1a:84:f2:78:ed:6e:f3:83:
a7:db:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:57 2025 by rpki-client