Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
File: MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json)
Hash identifier: iPVgVxVte6XoVFLLeh4pgDF8sIOCywvSnof8zERFQTQ=
Subject key identifier: E8:AD:74:E7:3A:6F:E4:23:03:A6:41:64:A3:A9:0E:4C:99:AA:A7:F9
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial: 0197B70E7C505C3E85D71BDD7E3936FA5217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
Manifest number: 10CA
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: AV_h3jqDqBv8GTowG5NZT83IRVM.roa (hash: 7I92tp7yKWv9nRYHQ0pF0g4dedaK+rFfmKLNQHVUe28=)
2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: s1znkm/PYgxydH3mGA2h2hLzyjQ0S5aluTbiTTe9dVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7c:50:5c:3e:85:d7:1b:dd:7e:39:36:fa:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=e8ad74e73a6fe42303a64164a3a90e4c99aaa7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:44:d4:1d:89:6a:1b:a2:e0:6c:6f:bb:b8:
ef:fb:34:f1:6c:b5:06:14:a9:26:30:9e:fb:64:ce:
ea:6a:ce:66:64:86:c2:27:d0:76:95:15:70:f9:20:
b0:b8:4a:d5:1f:bb:13:24:ab:b2:62:09:58:a4:67:
53:fa:cd:70:9e:08:12:c3:5f:98:57:b0:52:9e:ac:
b4:a1:cb:b7:76:5e:40:33:4f:51:f9:bf:b4:44:65:
bf:ae:9a:d3:29:6f:2e:30:7b:6f:f2:5d:6d:4f:cc:
1f:43:c1:03:80:a9:e0:bd:c9:bb:0e:d4:f8:14:f9:
16:9c:c1:bd:47:19:e3:f7:38:17:50:e0:83:1b:66:
db:8d:9e:43:7e:de:a1:27:8d:51:f6:69:d8:30:38:
e0:09:d9:2f:4f:84:60:91:e5:76:71:ef:06:80:95:
ac:d1:c5:9b:07:7b:b7:36:e8:cc:fc:3b:9b:a8:77:
c9:2e:31:37:e8:53:62:bf:dc:07:48:c5:c6:42:51:
56:93:55:1b:2a:4e:51:d6:c2:1b:c3:42:64:60:91:
e8:a7:e2:95:99:17:ec:3e:7e:de:d3:36:28:45:63:
bf:17:e3:f6:97:06:bb:f3:4c:ef:38:ff:9b:ff:92:
8c:33:da:a2:97:9e:42:c2:e9:77:36:bc:03:9d:a1:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:74:E7:3A:6F:E4:23:03:A6:41:64:A3:A9:0E:4C:99:AA:A7:F9
X509v3 Authority Key Identifier:
keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:78:37:fb:f2:93:8b:03:11:45:f5:cb:f7:40:57:c0:fc:40:
cc:75:dc:16:d9:5c:d4:f5:8a:39:69:ce:72:3a:89:65:78:92:
b8:92:fc:44:5c:05:e6:e3:1b:38:c6:ab:4b:e2:a8:16:b4:e2:
b6:c4:c9:80:6c:75:e9:4d:cc:96:19:03:6b:6a:74:c6:43:b3:
2d:58:4c:c2:eb:7d:0d:41:e4:9d:f1:51:9d:51:91:a8:78:55:
3d:81:b3:61:c9:c8:41:2a:e4:47:a6:56:c3:36:5b:35:a9:99:
f2:0a:10:3f:dd:79:ca:7e:79:79:b6:39:1a:15:c5:88:31:05:
15:38:83:4f:82:ae:0e:80:35:23:1f:72:7b:f3:fa:4a:a8:fb:
21:e2:91:76:20:09:71:ba:36:6d:aa:21:a6:ed:e2:ae:df:45:
c4:f4:4a:b9:06:2c:9a:30:ea:12:5f:10:7d:1f:1c:8f:0b:29:
79:40:35:80:eb:67:c5:f3:6e:2b:7e:71:6c:cd:e2:a0:60:32:
a9:06:90:87:0f:a7:96:8b:0f:7e:c0:77:69:f8:98:f9:7d:37:
cb:0f:4d:ad:ea:f2:e9:b0:cb:c7:f1:94:f9:31:e7:a5:72:08:
a7:0e:cd:c3:87:4b:29:65:17:bf:3e:f3:25:88:51:0c:3f:76:
a4:0f:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:29 2025 by rpki-client