Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: jJLAs3bEUBzBgTAwTuQHQbDlp0Y+mQ/unDCQp+CAtdI=
Subject key identifier: BE:9D:AB:DD:BB:FC:03:9B:46:5B:81:69:28:CF:A9:E0:0E:6D:0D:CA
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 0197B88FFE8DAD1C9209962D1B2D77F9CB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 0ED1
Signing time: Sat 28 Jun 2025 22:02:13 +0000
Manifest this update: Sat 28 Jun 2025 22:02:13 +0000
Manifest next update: Sun 29 Jun 2025 22:02:13 +0000
Files and hashes: 1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: CZWRdAY08sG0Wd113sabKdnrlKnFj1PKoaRFrnbyr5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:fe:8d:ad:1c:92:09:96:2d:1b:2d:77:f9:cb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Jun 28 22:02:13 2025 GMT
Not After : Jun 29 22:02:13 2025 GMT
Subject: CN=be9dabddbbfc039b465b816928cfa9e00e6d0dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1a:1b:d6:90:42:41:18:74:25:b9:a2:35:09:
c9:21:37:18:f7:89:6b:cb:07:38:e8:3f:e2:5b:ea:
b1:3a:76:f4:fe:cc:cc:55:12:22:8d:4a:4a:b0:dd:
df:05:30:74:67:c7:2e:15:91:24:a7:3f:71:8a:f9:
f6:52:4e:46:ad:6c:b6:82:c6:08:c9:1b:c4:07:69:
d6:f7:fb:ff:7a:bc:09:a1:2d:55:06:04:60:0e:2e:
c5:4a:c9:8b:78:8b:1d:b0:14:b0:ff:ed:f5:72:6c:
7b:9e:2f:df:39:f9:52:43:84:b2:97:8d:8b:12:87:
91:24:11:a3:c7:e5:47:59:4d:67:c9:fe:a7:98:2e:
d1:b7:40:a1:86:dc:76:c7:76:90:f9:40:06:f7:7c:
2c:fb:c4:e0:95:b9:91:5f:89:88:da:7d:73:9b:d6:
e1:4b:45:83:02:fc:f1:a4:d5:39:fa:a3:ed:72:f6:
96:8f:1c:df:25:6e:02:34:e5:90:ea:b8:d6:84:53:
d2:09:da:99:e5:f8:ed:57:f9:60:7e:90:25:56:af:
30:15:84:5b:2a:3a:15:ed:b0:b6:c2:3a:18:09:25:
e3:74:0d:6d:10:b6:7d:e0:bf:5e:b4:51:b1:30:06:
bb:42:cb:0a:b6:d2:f3:d0:ca:99:e8:5d:c6:40:6f:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:AB:DD:BB:FC:03:9B:46:5B:81:69:28:CF:A9:E0:0E:6D:0D:CA
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:54:4d:5b:bb:ac:92:8c:a7:03:ea:d6:1f:48:f2:f1:22:12:
43:59:fb:30:42:4b:b7:31:35:b6:98:80:9e:4a:6f:cb:da:66:
87:eb:a8:01:7f:af:23:9f:2a:ae:e4:60:6c:4e:db:7a:5a:df:
c8:b2:d4:f4:b6:59:48:43:07:c0:8f:08:51:e0:24:0b:4e:e7:
5c:7c:64:e7:ef:ec:52:97:d4:ca:e2:2e:60:9e:06:dc:56:6c:
f3:2a:a0:e3:f5:e3:3c:20:a4:ac:f0:9d:8c:f3:fc:1c:ff:69:
c2:6f:61:76:c6:f7:23:bf:b9:f7:15:ae:22:b2:08:d8:87:54:
2f:05:7b:26:72:41:53:77:a6:3e:ff:cc:04:17:bd:3c:5d:54:
7d:9c:26:60:fa:82:7e:4d:42:aa:26:43:12:4d:07:a5:af:f7:
f5:0e:de:2d:e1:6c:9f:fa:c2:47:87:f4:41:b6:eb:8f:18:02:
f7:a7:ac:a4:36:35:52:bf:7e:ad:f3:10:88:fb:6c:5c:cb:81:
c7:69:12:4d:b9:91:f0:34:5b:aa:86:9d:11:4a:8f:2b:ae:c9:
6d:31:e4:0c:c2:f5:cc:91:32:da:40:f2:29:c8:91:20:75:71:
fd:d5:fc:e9:d8:ea:4e:21:d6:51:c4:6e:95:44:29:a3:b9:90:
d8:19:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:37 2025 by rpki-client