Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
File: MhbvzNFel4pwQKXUt5xBf7lmvyg.mft (raw, json)
Hash identifier: Hlouul9VrdlrfgWuws3mMdaxGv9t/HvW4It4gsYGk/0=
Subject key identifier: 8B:B2:9B:C2:4F:F6:CE:0E:01:E4:54:4C:C7:98:53:EB:E6:5F:E6:32
Authority key identifier: 32:16:EF:CC:D1:5E:97:8A:70:40:A5:D4:B7:9C:41:7F:B9:66:BF:28
Certificate issuer: /CN=3216efccd15e978a7040a5d4b79c417fb966bf28
Certificate serial: 0197B6D7C08E00A291D942D9ED2958DC3C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
Manifest number: 21
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: G_QAj13053ZQmqPjvoFu7lprfls.roa (hash: v8AAmxC8K2fmbWdzfzNZzKaQdWure2gG3MF9k3IbA6o=)
2: MhbvzNFel4pwQKXUt5xBf7lmvyg.crl (hash: SMDeoE1eEowkNZDFPijWFv50NJNDLuXgoZVVNBuf55Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c0:8e:00:a2:91:d9:42:d9:ed:29:58:dc:3c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3216efccd15e978a7040a5d4b79c417fb966bf28
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=8bb29bc24ff6ce0e01e4544cc79853ebe65fe632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:29:f3:13:f1:e3:f6:14:f1:cc:9d:b2:27:
7d:76:bd:1f:2a:be:c0:02:0b:58:22:f2:a2:e8:ca:
45:0b:54:db:5d:17:46:4f:66:d7:ce:45:30:39:04:
12:3d:10:e0:aa:4d:ab:0c:f8:b7:ca:d7:17:99:33:
1b:e0:f0:c7:a6:fd:05:37:bd:bd:74:af:8d:fb:32:
02:25:65:d0:14:2b:c7:2f:6b:d4:c5:5c:06:3c:79:
77:b4:96:fb:d3:1d:67:20:46:42:cc:99:53:c1:c5:
69:af:24:f6:b4:9c:58:d9:b7:6c:c5:39:35:66:e9:
b4:1c:f1:25:fa:75:c9:c3:f2:be:29:c0:90:78:25:
72:77:ad:24:b0:93:00:a1:32:c7:df:1d:75:1b:05:
28:68:ee:cf:f6:33:55:29:db:0c:7f:02:8a:2f:eb:
41:96:ce:88:57:cf:4a:f1:f4:47:56:e7:53:98:3c:
07:d9:48:90:dd:b4:88:5d:b2:c7:31:57:2e:56:f3:
6f:a3:66:8a:33:92:10:d5:f3:6f:69:23:cf:89:a3:
8d:8c:bc:bd:20:29:d7:64:8c:28:2e:0c:a4:d1:78:
2a:12:db:4a:6a:4d:1d:da:bf:9e:2d:11:64:7f:b9:
ae:6e:9a:e9:55:6a:93:03:c8:ae:14:c4:f2:ea:97:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B2:9B:C2:4F:F6:CE:0E:01:E4:54:4C:C7:98:53:EB:E6:5F:E6:32
X509v3 Authority Key Identifier:
keyid:32:16:EF:CC:D1:5E:97:8A:70:40:A5:D4:B7:9C:41:7F:B9:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ac:b9:e6:31:8a:b9:38:b1:bd:8e:9f:4d:79:61:87:58:fb:
15:ea:4b:8e:2b:27:3a:80:23:32:43:72:22:e9:25:b1:6e:52:
a9:1e:91:97:67:c6:e1:29:b4:eb:52:f0:8d:e3:96:93:a0:07:
e2:00:ae:d6:9d:56:a1:9a:31:da:09:46:f7:50:e0:fc:32:41:
b2:a5:c4:4c:9b:53:f1:be:ff:10:33:da:c2:49:ee:0f:80:73:
3d:36:99:37:5f:40:8b:14:7e:e0:61:17:20:97:f9:50:52:f0:
4d:4c:84:48:38:5f:14:60:8a:5d:4b:39:de:c9:d2:f4:67:34:
80:f0:a2:fc:47:93:ce:77:2d:54:93:4c:67:f5:10:24:af:bd:
7b:1f:04:be:d4:d6:b1:19:ad:a0:3c:d1:77:71:a3:97:c8:25:
e5:95:15:bd:07:88:16:8c:15:3c:88:06:54:58:01:63:f9:3a:
9f:c0:95:5d:eb:f4:ba:a1:9b:eb:88:97:db:83:60:3a:af:c9:
5c:47:50:84:da:bc:47:9e:38:ee:2c:12:0c:58:19:88:a6:e1:
58:3a:dc:b5:79:8d:1d:35:fa:85:58:73:33:a0:e9:ba:47:a9:
09:6f:78:26:ca:55:4a:f8:ad:25:7e:76:54:fd:a2:6b:61:ea:
e9:84:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:43 2025 by rpki-client