Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: IOS5V4Vvtj75vpdDPJ3KwYaknin2+vqKUVjwhAByRvw=
Subject key identifier: F5:53:C5:32:1E:E1:59:2D:DC:17:35:5E:46:C8:9F:EA:A2:67:23:55
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 0197B74509F3603E8B95EFBDEEE9F3C47911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 0363
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: XrDua1zQDMJqH5iHPu8EHl3EkL4.roa (hash: aKzITCv/TlQWw5VPQA7t2SoPcL6SaZJgOSPmbHxDp7w=)
2: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: c6deICUWap/gDTOT4VtcugvB+x342Yk8VMl+e3iu2nc=)
3: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:09:f3:60:3e:8b:95:ef:bd:ee:e9:f3:c4:79:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=f553c5321ee1592ddc17355e46c89feaa2672355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:17:ce:1d:10:09:3e:f8:ad:1c:6e:83:cf:
a9:c7:11:01:1b:50:19:5b:00:e1:03:79:2f:c4:44:
20:41:82:22:e9:b3:3d:32:9d:6c:14:d5:a9:59:16:
39:f1:c6:42:a9:e1:db:54:ef:17:df:0a:91:48:79:
53:b4:c1:1a:fd:e5:df:c5:f8:b8:aa:b4:6b:16:0f:
fb:92:1c:2c:34:e3:7b:c8:e7:8f:12:95:9d:c5:6f:
70:3a:fb:1e:79:da:c1:4e:3e:e0:14:d9:ca:97:dc:
57:b8:35:be:67:78:6b:8f:9f:81:87:4c:df:73:6f:
af:53:30:0f:d7:72:73:71:12:07:f6:73:f3:b2:34:
0a:7a:0b:da:27:f3:42:a4:2d:38:d8:be:e4:4e:9a:
67:cd:6d:93:32:9f:84:11:24:26:6d:86:b9:95:43:
39:c0:2f:d8:18:87:af:c5:e5:e1:a7:9b:40:66:0f:
a2:49:91:0c:9a:f3:22:34:8d:36:b5:5b:5d:a8:fc:
e4:77:d9:7c:f5:d6:c7:ca:5b:6e:96:bf:66:d7:1d:
63:61:6d:a8:6b:d2:78:03:91:82:b2:a1:e3:7f:a5:
58:77:ab:3c:7c:bb:b6:c0:15:3e:81:76:62:04:90:
99:d5:d7:ae:65:5b:06:95:7a:bc:a2:88:ba:30:0a:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:C5:32:1E:E1:59:2D:DC:17:35:5E:46:C8:9F:EA:A2:67:23:55
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:90:59:07:dc:8e:0c:08:df:6b:14:15:34:4a:1e:55:c3:fa:
9b:c2:01:0f:bc:26:69:3b:23:27:e3:fe:10:77:56:3d:28:18:
f0:51:ad:23:63:1e:b6:9e:30:9f:82:27:df:99:eb:b5:06:cb:
0d:c9:1e:7e:b0:8e:61:10:b2:bb:b4:29:ea:57:e9:6c:64:bc:
ab:49:bc:c1:7c:2d:56:53:3e:dc:7d:79:58:a9:78:2a:17:e4:
75:d2:ec:61:a3:4c:21:c4:d5:b9:a7:e7:3d:46:1a:47:c6:02:
e5:4f:d6:30:97:75:30:16:37:0f:99:8d:d8:c1:30:21:f6:47:
64:79:ff:a4:d7:5f:b3:49:93:63:e2:9f:4e:80:95:82:f7:28:
98:2e:4d:ca:07:0a:54:69:da:00:7b:1b:ea:ea:95:e3:9c:a7:
da:01:46:88:05:55:ae:a7:16:9f:e0:e3:45:b8:65:9f:48:4d:
91:10:93:3c:23:f3:de:eb:52:73:ee:ff:55:7f:3c:a9:b8:8c:
f8:bc:d3:4c:db:04:47:64:f7:82:d2:64:8c:d2:e8:8d:bc:f8:
12:4f:dc:08:41:51:df:07:91:48:24:8c:8b:14:82:25:6e:c0:
4e:88:2a:0f:88:50:24:6a:b5:4a:fc:31:84:14:27:e9:92:80:
ac:7f:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:03 2025 by rpki-client