Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
File: MDVUbqWweQVJyguhuyo-Hbrko9o.mft (raw, json)
Hash identifier: sKV00OTUYNJnTJmWXy4fU8hvypeMAjXkrCKMOaYRqq4=
Subject key identifier: 43:CB:0F:FC:66:26:39:E0:13:84:1A:13:F1:3E:F7:78:37:13:FE:DF
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 0197B745861773E88B6654F51AD422272653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
Manifest number: 11B4
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: 2W6axHjolbpaH6HEq0QZHunfxqw.roa (hash: wviH1ELaB1e2Lcqmt6CIweQCBrQQn4JSYfHt2lakpZo=)
2: MDVUbqWweQVJyguhuyo-Hbrko9o.crl (hash: QQX/C72r67GA9hsrcCfDHqC5illJBE8Y21hsWUwOevM=)
3: rrMUUFpVeR29bf5As6_7n50ECNM.roa (hash: kpYzrs/MH+Fk5UtuYnqob2xS0TbxQg7bm0bqEnSyqG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:86:17:73:e8:8b:66:54:f5:1a:d4:22:27:26:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=43cb0ffc662639e013841a13f13ef7783713fedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:62:8c:3a:1e:8c:00:06:c4:18:8b:2f:75:
8e:0f:5a:b3:c9:ab:bc:c7:24:ee:55:0c:59:b3:92:
08:c8:15:ac:77:c4:19:17:7c:07:f9:2c:8f:bb:16:
6f:25:17:ad:c3:aa:59:68:32:9e:2c:c9:f1:28:fa:
d8:31:6a:aa:06:43:d9:9f:99:6d:e0:82:01:04:b0:
22:11:ed:97:48:7e:8b:e2:14:89:8c:dd:ac:a9:46:
6c:6f:e7:5b:93:c2:9b:92:6e:93:e8:69:dd:f9:cb:
3c:d7:5b:12:63:3b:25:cf:77:13:60:69:21:d6:cf:
d7:1b:b3:74:da:0b:b7:d6:bc:f0:9d:59:80:a9:32:
74:85:3a:e3:42:7e:9a:8a:1b:5a:a8:bb:2d:b4:3c:
1a:83:1f:b3:07:69:cd:e8:e0:df:19:e8:80:af:32:
d6:03:57:4d:23:21:53:86:62:26:4f:ab:86:2b:e9:
72:a6:d7:9b:e8:21:99:d2:aa:71:de:a0:db:fb:28:
99:67:29:3d:e7:29:df:96:3d:1f:ff:15:e8:5b:e6:
5f:77:64:45:8f:f6:69:df:04:05:26:61:02:df:fc:
7e:2a:9b:4b:b8:4c:04:d1:10:0a:2b:dc:11:cb:c5:
db:ab:9f:37:b7:88:cc:92:da:27:81:bd:85:44:8c:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CB:0F:FC:66:26:39:E0:13:84:1A:13:F1:3E:F7:78:37:13:FE:DF
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8a:1e:bb:84:2b:e6:11:06:fb:c3:34:f3:b2:f0:fe:90:4a:
bf:1f:7a:1a:27:f9:6d:ee:31:c8:2b:6e:50:24:78:9d:60:79:
78:81:c8:9a:00:1c:68:72:f3:fa:ed:a2:28:d2:d8:b0:19:69:
b9:bc:6f:31:1f:40:26:8a:7a:c3:14:c4:f3:fd:fa:fe:d3:29:
51:a0:86:a8:a0:38:fc:60:e5:22:45:12:4a:92:c4:a3:1a:de:
7d:fd:f2:dc:d6:c0:7e:51:07:c8:bd:05:3e:2e:92:d3:9e:12:
5b:56:59:7e:8c:a2:ee:8c:b9:ac:b9:0f:25:27:14:cf:16:73:
96:c2:3d:77:43:91:bf:b5:0f:fa:5b:79:4c:50:a2:84:20:7b:
c0:f9:95:84:aa:9b:58:88:af:b1:57:05:06:69:00:8d:dc:d0:
be:2b:0a:45:e6:9c:3e:67:df:2a:b8:62:3a:5c:c8:f2:e3:21:
d4:62:68:13:a5:90:e6:1c:76:2a:1e:b5:ab:1d:3f:a5:00:cf:
a6:2c:4a:3e:62:ae:e6:d8:98:30:bb:11:26:cd:47:11:06:31:
90:0e:af:40:17:e2:c8:6f:88:f1:2c:47:c2:da:9e:3f:5f:d4:
69:70:52:c4:9b:f3:b9:84:72:ad:cd:68:ab:da:f5:f7:6c:84:
d2:a9:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:16:55 2025 by rpki-client