Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
File: MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json)
Hash identifier: vmz/TlKiyT/0qcE/2I3UmrR1jV75n2NjWgcHGMp+U24=
Subject key identifier: 3C:AA:B1:5F:F7:87:B9:99:74:4E:FB:64:97:F4:4B:AB:5C:6D:ED:DF
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 0197B6A1FD37CC0440A370FF194C9004073C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
Manifest number: 135D
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: AaZqekVqXMtY7zZxpFlHfm5QAjY.roa (hash: sZGw/ceX9GbcsyDNRtsXxQmamgue/4b7o8nJC51Ghrc=)
2: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: iN+treXbiz7W8wpSh2Iq0JfS84UzbYPv8SoRQD582CQ=)
3: w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa (hash: uNakKZ5cInU4w53MHNcs8H1FEfnS50QeJJ6h44hvoXU=)
4: xFbU4UXG5RajcOwoLmpvCSpG_lI.roa (hash: EpP3aMWHOolyh4RCM05UrLn8Zcfi0zy+85a7iQrKm9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fd:37:cc:04:40:a3:70:ff:19:4c:90:04:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=3caab15ff787b999744efb6497f44bab5c6deddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ec:6b:92:e0:d8:fb:35:53:ab:50:91:13:6c:
d1:42:b9:17:b0:b2:7e:a9:f2:4a:78:75:04:c8:5a:
3d:4c:55:f0:5d:9c:a9:64:cf:1f:a8:28:59:3c:b6:
f3:ac:31:e6:db:5b:21:04:82:a5:6a:74:9b:d0:3d:
84:9e:c8:ac:af:cb:2b:5d:21:0e:7a:e3:e0:8b:16:
8b:ab:74:ea:a2:dd:3c:b2:2e:39:25:3c:7e:fa:e4:
78:49:77:ce:29:b4:62:e7:53:12:25:f1:b6:aa:a5:
d5:d2:6e:5a:a6:8a:36:7d:f7:22:e8:ef:56:0d:ab:
9e:e0:5f:9d:43:01:ee:ae:53:f1:d1:a7:ea:f7:aa:
46:70:ff:77:7e:11:8d:9d:29:6d:61:3f:bc:48:b0:
5a:b4:a4:32:5b:78:cd:39:7a:1a:53:19:13:0e:27:
a1:84:1c:dd:72:bb:65:af:af:91:c1:3a:60:f4:f0:
13:16:9f:55:96:f2:da:70:94:c6:91:49:8f:05:38:
2f:6b:33:d9:b3:06:cd:2d:60:72:b9:ef:9e:d9:33:
30:78:f0:50:66:e4:b8:a6:cd:d5:7b:f0:08:1c:c9:
a8:a5:83:c3:bb:3b:87:ac:d2:55:c1:18:8d:db:5d:
c7:81:ae:53:b9:b1:94:91:d5:87:24:48:14:5c:65:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AA:B1:5F:F7:87:B9:99:74:4E:FB:64:97:F4:4B:AB:5C:6D:ED:DF
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:61:85:ec:25:79:48:57:07:16:8e:13:6e:80:86:d5:01:66:
22:5c:35:e4:08:69:38:62:3c:b4:c4:4d:c2:17:2e:e0:6f:31:
11:2a:56:0e:e5:b8:91:78:8f:b9:de:20:37:0d:05:b1:a3:18:
89:6c:8a:50:34:1c:cb:ec:2a:21:e8:d3:9a:17:21:87:49:19:
32:5e:f8:60:5f:a2:f7:bb:3b:86:d5:69:b6:84:91:88:01:7a:
34:ad:0d:dc:6a:f5:75:d4:76:9e:55:ef:97:70:a4:c6:dc:f4:
bd:ab:da:4d:0f:9d:ed:85:31:c3:b9:90:80:0d:4e:40:8a:7d:
fb:17:4d:50:18:52:97:2e:64:83:21:3b:3f:c5:d5:d5:e3:5a:
06:b0:46:a6:9a:4c:b6:ab:82:59:e8:4f:15:59:a2:ef:9b:91:
57:ca:9d:ca:eb:62:93:c7:bf:6a:62:91:c6:2a:c0:31:42:86:
60:61:cb:c9:49:2f:59:3e:88:6f:67:95:e5:3f:83:29:24:32:
80:67:1c:21:af:2c:82:1c:61:e3:89:1e:7c:7c:36:97:f2:f4:
ae:b3:d7:ac:ad:c7:84:96:49:b4:7e:4f:9c:9b:a6:6b:9b:c4:
0c:47:71:9b:c3:6d:7a:ac:2c:dc:a0:35:dd:8a:f7:a4:8e:41:
d4:6c:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:37 2025 by rpki-client