Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
File: MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json)
Hash identifier: 9IO0/k8sQm46UcAmtb6lIXGsllchprpE7jYpEjNvWRc=
Subject key identifier: F2:F1:35:79:AA:F1:42:40:22:1B:A7:8D:CF:DB:92:3B:4A:DA:6C:71
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial: 0197B77CB829CD37DD746731D1EFEF81D60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
Manifest number: 0B57
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: SFRcsYwzFWAk0qIY+7jYIEcWZi8tPiBvA88UQweJm1I=)
2: gcvZb-H-QkR_u2nZg2XXj4qsub0.roa (hash: eOyY8yl+p8N7UEzFU3Q8jcWAiNPWbKDEoBQqZkxOiME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b8:29:cd:37:dd:74:67:31:d1:ef:ef:81:d6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=f2f13579aaf14240221ba78dcfdb923b4ada6c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:60:ea:dc:d5:5f:e4:24:bc:2c:b0:70:f6:
e7:f2:e5:57:f4:4a:7f:49:c6:d9:6e:89:11:0b:eb:
a1:f8:02:dc:8c:cf:e7:22:f4:0b:a8:ac:a2:ee:5b:
37:ae:79:70:9d:b6:cc:78:e6:93:6d:b1:d1:1b:3f:
bc:26:d1:88:88:9c:e9:a6:77:f0:c0:ff:20:7e:22:
14:06:bb:f5:18:da:a2:45:dc:c8:6c:a0:9d:b4:79:
84:a7:2e:ae:04:d2:9c:6e:a4:9d:5f:a7:05:38:82:
9f:b2:cb:d9:a2:3d:4e:9a:01:d5:d1:76:7f:56:5d:
05:f0:d9:60:ad:83:43:ad:03:00:b2:c8:15:b7:bb:
32:2b:da:03:86:25:b1:ee:99:c1:49:8d:33:7e:2d:
21:b5:5b:49:2f:9f:95:18:aa:5c:ba:6d:3f:46:58:
84:05:5e:58:f9:f1:74:1a:58:de:29:44:07:50:fc:
5e:87:b1:e7:76:67:2e:f7:eb:68:9c:43:88:cc:49:
bd:14:e2:09:1c:b4:cd:64:32:8e:4b:da:a8:52:eb:
b7:68:ca:42:a6:05:d2:ef:50:4e:c3:b6:5f:83:29:
e7:28:ab:59:9c:64:05:de:8c:e8:bf:b5:eb:15:08:
eb:dd:14:68:15:54:3e:28:38:c1:c0:05:31:7c:90:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F1:35:79:AA:F1:42:40:22:1B:A7:8D:CF:DB:92:3B:4A:DA:6C:71
X509v3 Authority Key Identifier:
keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2f:3c:75:e4:93:6c:04:41:b6:8d:3d:ab:0a:80:0a:e0:53:
be:64:a4:b6:a7:42:72:6a:d1:fb:1b:f4:a5:62:53:76:5e:ee:
9d:0f:6c:54:7e:35:02:db:33:a4:53:e8:86:f1:55:23:7e:ad:
58:10:aa:c5:de:05:39:39:b3:4d:60:9c:ee:37:ff:db:76:6c:
13:71:3a:6c:c4:f0:a1:1b:c1:df:3c:00:81:d1:48:d5:2a:54:
98:c2:1e:fa:39:89:f5:d7:62:15:ae:68:fd:e8:55:29:cc:1d:
e2:0e:9c:22:fc:8b:d4:1b:0c:5b:c3:52:52:48:d6:b2:e2:2e:
d0:de:73:c2:f8:d3:93:dc:d1:4f:9b:2d:17:df:5b:c0:07:ca:
52:80:e9:9a:1b:4a:15:20:c9:f1:f0:80:29:f2:06:ca:33:f6:
ac:63:6e:40:98:0c:f4:6b:78:36:c6:e3:f5:31:53:a1:2c:4b:
89:b9:ed:2d:d9:87:a7:5c:ad:84:72:21:f5:71:f6:d1:cd:df:
0e:06:64:c1:e7:9f:7e:54:74:cc:98:20:7a:51:c8:ae:9f:21:
90:83:f0:d0:f3:5f:c1:74:b6:a1:ab:cc:b6:70:fc:e1:82:bb:
31:d0:4e:8a:7c:3e:db:9a:3b:28:57:bf:ef:07:19:53:14:36:
4c:82:62:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:32 2025 by rpki-client