Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: H83cOzmrETmXt55wrn6bPuycEVIRlybXo+B936yJ+V4=
Subject key identifier: A4:AE:9F:4D:D1:FF:7B:55:48:47:F7:BC:45:75:D0:10:57:78:6D:F0
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 0197B74543F04B71D90145ADC5BCA7841F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0DCF
Signing time: Sat 28 Jun 2025 16:00:59 +0000
Manifest this update: Sat 28 Jun 2025 16:00:59 +0000
Manifest next update: Sun 29 Jun 2025 16:00:59 +0000
Files and hashes: 1: D1ApEIwb1kjfyIq9DKRzPBBfvvY.roa (hash: xg03oxBmRY8/OHWbSAoqzOUqsR3adUdWhS3XjYzzmwE=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: tvGkUfGOpvAIzV/wghQDCmTyJ+FfCAbdakfQICykUXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:43:f0:4b:71:d9:01:45:ad:c5:bc:a7:84:1f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Jun 28 16:00:59 2025 GMT
Not After : Jun 29 16:00:59 2025 GMT
Subject: CN=a4ae9f4dd1ff7b554847f7bc4575d01057786df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:8d:6f:5d:7a:cc:dc:33:e9:c3:65:f0:d6:
2f:27:8f:77:95:10:75:1b:95:d5:ac:f8:30:5f:da:
c7:9d:bd:59:dc:64:46:26:74:45:64:96:c7:24:70:
76:ad:65:2b:a9:b6:2b:53:3f:0e:86:f6:bd:b3:19:
39:4d:16:f5:6d:27:26:b6:f4:b7:84:de:aa:6a:1e:
cc:a1:b6:02:de:9e:b5:04:df:44:36:22:9e:39:d7:
87:a5:9b:37:f9:68:71:bb:a8:1d:1f:51:e0:98:d2:
88:95:31:d0:ba:f3:33:25:3f:fd:92:53:38:ae:a7:
c3:3e:0f:04:dd:06:df:e0:96:13:df:8c:bd:d5:89:
ac:4e:08:89:28:09:7e:ea:ba:e9:a9:fc:d2:1e:a9:
ac:30:06:67:bd:be:eb:08:9c:0a:72:f6:43:8c:b3:
b0:42:40:38:b9:0e:be:29:8b:ec:62:64:cc:c4:af:
f6:15:03:a6:3a:b4:3d:8e:06:fc:51:2d:2b:90:8b:
cf:bc:38:96:24:26:89:c8:37:70:b4:7b:26:dc:ac:
b2:b5:3f:1b:96:3a:95:84:aa:e1:bb:36:f5:20:0a:
7b:ef:2f:8f:ab:57:21:b4:89:90:ee:56:81:b8:6e:
bc:b5:36:cd:22:ad:f0:4c:00:5b:bc:89:f2:b1:bb:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AE:9F:4D:D1:FF:7B:55:48:47:F7:BC:45:75:D0:10:57:78:6D:F0
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ac:69:63:22:1e:03:6b:10:cb:c9:d8:01:b3:de:87:68:98:
3b:99:79:f9:bd:86:4b:d8:f8:08:85:2f:10:6d:ed:a3:68:05:
4f:1f:7a:d5:c1:d5:f0:e8:21:e7:30:a9:2a:36:b4:1f:e9:b4:
d0:14:57:19:62:35:4f:f1:ac:1b:8f:55:22:79:c4:f9:1d:e4:
f4:27:04:40:8e:5d:93:47:f3:9a:52:ca:dd:0a:d9:fc:8e:d4:
5f:74:8e:15:42:2b:13:64:26:4b:7e:9e:d7:2c:9c:e8:e3:6c:
70:18:5a:8f:c5:dd:aa:fa:7d:f1:e6:24:fc:67:43:1e:b6:64:
e5:7f:9e:bd:3f:4d:e5:b0:35:82:a5:f0:59:ac:cb:13:41:e0:
f3:52:82:b0:ad:07:8a:92:7a:d1:06:c3:be:56:6b:3d:d1:f5:
23:0f:52:75:3a:76:86:05:f0:db:46:3b:45:a6:9f:00:18:39:
70:96:70:99:ba:9d:a2:d5:2f:36:3b:36:84:86:62:48:08:4b:
d3:09:c8:d1:12:da:71:99:f8:2b:e2:10:97:1f:c6:57:7a:f7:
48:26:ae:5e:b3:23:c2:31:a6:9f:b2:98:12:00:a8:4b:e6:7e:
e3:b0:0f:bf:5a:a9:6f:84:7b:87:a3:cd:82:6b:a5:8f:f5:8f:
67:6e:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:53 2025 by rpki-client