Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier: sI0/1QTFK1HF2ZGZg9KS3WZjL93UVvUPyPXgkZpKOHQ=
Subject key identifier: 4C:AA:30:88:22:96:F5:00:83:3A:D5:79:8B:EB:D7:2B:00:3D:73:06
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 0197B7B2FF00B052D2EFEA4F44F630559AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number: 10F4
Signing time: Sat 28 Jun 2025 18:00:50 +0000
Manifest this update: Sat 28 Jun 2025 18:00:50 +0000
Manifest next update: Sun 29 Jun 2025 18:00:50 +0000
Files and hashes: 1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: pMIxU+lZPdMy7DBCXX50KBjFI/aBunokW/Z/I/uGajU=)
3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ff:00:b0:52:d2:ef:ea:4f:44:f6:30:55:9a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Jun 28 18:00:50 2025 GMT
Not After : Jun 29 18:00:50 2025 GMT
Subject: CN=4caa30882296f500833ad5798bebd72b003d7306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:53:55:5a:fb:cf:1b:c7:fe:97:aa:92:c9:
3a:73:ba:66:aa:0f:31:ca:40:10:20:66:0d:9a:5b:
60:73:f3:95:86:f3:75:9f:bc:11:c2:25:e4:ae:b7:
12:2c:ba:2b:2a:de:60:3d:14:37:9d:dc:ae:20:f1:
9f:9c:e2:4f:6e:7b:37:60:2f:d8:2c:a8:b2:29:5f:
6c:9b:9b:57:b8:d8:e7:2b:b8:02:ca:5a:9d:d8:6c:
55:c5:05:80:9a:e4:85:b1:c6:e9:4f:36:ca:f8:6b:
ea:f2:e2:8e:06:a4:ff:fd:43:90:7c:a9:d3:2b:23:
f2:bc:1e:0d:95:b1:8f:9c:4a:aa:39:6d:8e:6b:5d:
77:87:0e:00:8c:84:56:66:8e:1f:17:f4:55:f2:25:
31:ce:d4:4f:1f:07:64:14:8b:c3:81:91:6d:51:b6:
9e:6a:2f:f5:83:e9:01:bd:0c:81:46:c0:ed:6e:42:
02:74:1a:94:ce:59:44:3f:30:3a:63:86:7d:4b:c4:
0b:69:3e:bc:a6:ba:b7:58:79:81:81:65:1c:dd:e5:
2e:0e:0c:69:fc:c1:d8:2c:4c:6f:b9:94:5c:ad:2b:
ce:7a:b1:02:28:0c:23:24:02:c2:4e:f4:b6:49:2d:
7b:83:12:48:f8:b6:3d:26:78:41:ba:41:db:05:e7:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:30:88:22:96:F5:00:83:3A:D5:79:8B:EB:D7:2B:00:3D:73:06
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:50:02:0e:9e:3f:65:81:d4:fa:a9:36:55:66:ec:f3:93:de:
3f:a9:aa:74:69:d8:5f:af:0a:87:c2:dd:79:c0:5f:ab:78:eb:
ff:9c:05:eb:54:21:32:58:e9:de:c9:48:86:98:67:4e:6b:8b:
11:10:c2:66:12:53:5f:e1:35:40:35:7d:df:e0:59:25:03:29:
df:41:40:7e:5a:07:9d:f8:6b:fd:d3:0c:8e:00:34:3d:4c:fe:
d9:4c:b8:de:fe:c2:70:e9:5a:ba:e4:ef:9f:d9:d4:a5:38:25:
3c:90:ea:c9:61:6a:b7:77:c1:64:e5:82:42:7b:04:d1:74:9b:
45:0a:db:91:90:b6:67:ae:4e:32:50:c1:ac:39:42:8b:41:6f:
f4:48:35:b1:60:4e:52:fb:f0:77:54:70:ef:26:87:93:d7:5c:
cf:e7:e6:71:0b:1c:6c:58:6a:96:8d:f4:c3:12:ec:0c:6e:3c:
d8:b2:c2:8f:da:f0:37:82:50:30:e9:a5:f2:b7:ce:54:7e:26:
de:01:55:b2:40:73:49:18:9e:22:18:02:83:63:e1:5b:20:d5:
da:c9:3f:89:53:45:d8:91:42:39:e3:2a:b0:43:ce:04:42:e8:
13:76:19:18:1d:80:cc:b5:e2:7e:48:95:c9:17:99:15:c2:59:
cc:37:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:30 2025 by rpki-client