Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: w4s8MovUcOdTqSRNvV6b44PbH4PUBHCF0l0ewfu+FtM=
Subject key identifier: 38:42:C4:41:FA:95:63:7F:B4:4D:E3:DF:91:10:E5:6F:EE:A2:D2:D1
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 0197B7B3850C75B347373BB41BDFAED87728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 0425
Signing time: Sat 28 Jun 2025 18:01:24 +0000
Manifest this update: Sat 28 Jun 2025 18:01:24 +0000
Manifest next update: Sun 29 Jun 2025 18:01:24 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: rtudvCDU28wtg6dU+dgMeugz0SxgF5BQzuRSRxG76SY=)
2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:85:0c:75:b3:47:37:3b:b4:1b:df:ae:d8:77:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Jun 28 18:01:24 2025 GMT
Not After : Jun 29 18:01:24 2025 GMT
Subject: CN=3842c441fa95637fb44de3df9110e56feea2d2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:ed:e5:69:86:01:9f:3b:db:a0:92:43:f8:
df:91:9b:88:bc:6f:c5:6b:4d:74:df:1c:51:30:7f:
f9:8a:d3:32:b5:9b:bd:9a:f1:68:46:2b:be:34:45:
ea:19:7f:2a:63:63:27:06:54:2a:f0:60:6b:71:c0:
96:56:37:d3:43:5e:21:23:5c:1f:51:df:18:1c:a0:
db:33:e4:22:6c:24:32:37:7b:6b:58:7f:0f:d0:00:
4a:6c:fe:68:67:e8:5d:a7:fb:a9:17:0e:5a:51:17:
61:a0:d4:ac:60:c5:38:6c:5f:15:97:11:11:39:c9:
79:cd:ec:da:8f:10:df:6e:17:d2:f5:33:c9:b4:e7:
5a:26:a6:ea:e0:ff:9c:9b:8a:0b:83:cd:8c:36:29:
54:62:92:a3:ac:55:cd:8a:8e:4b:96:6b:60:5d:f4:
38:0c:ce:e7:a7:ff:57:51:d9:d4:2f:89:ab:be:b0:
f9:08:4a:48:db:2c:a4:5e:82:db:a5:7c:47:dc:99:
6f:cf:da:6a:a9:01:a3:a8:99:87:0b:88:c2:38:92:
5c:4e:75:eb:e0:18:95:55:7b:e6:37:44:47:4a:df:
7a:86:06:52:a9:16:83:1f:bd:6e:09:e4:08:d4:de:
79:0c:e4:a8:7f:79:36:8d:51:8d:6b:b7:94:f6:ca:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:C4:41:FA:95:63:7F:B4:4D:E3:DF:91:10:E5:6F:EE:A2:D2:D1
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:87:63:12:5d:d7:06:d0:96:3d:d3:5f:4e:74:2a:45:8e:ab:
e3:7a:b3:2c:13:c3:2a:3c:92:fd:e4:c7:78:6d:1c:fa:5b:5f:
d4:38:01:e5:9b:7d:cf:c0:e2:0d:28:5c:15:7a:85:5f:02:4e:
06:a3:24:d1:2e:97:33:d2:c0:dd:05:c1:8b:2a:a8:1e:4b:23:
43:fe:88:4c:ce:f1:a0:c8:57:86:ea:92:db:e4:0d:fb:32:a2:
42:0b:33:8c:8d:a9:cc:cd:4a:2b:ae:14:79:20:58:66:f6:8f:
ad:25:15:0c:4e:8c:09:43:95:68:f6:23:79:e1:e4:6c:70:da:
3e:11:b8:b0:aa:c2:5c:67:88:40:4f:54:d3:ab:3c:44:3a:d5:
0c:00:93:bd:ff:2f:7d:e9:3b:e7:af:86:34:a7:76:e3:ce:32:
d6:4a:89:ea:ab:32:2f:58:dd:f7:26:4f:34:85:5b:b3:5c:8b:
96:5e:05:df:18:48:f5:3e:9a:15:2e:35:23:96:a8:d9:73:be:
6c:d3:1a:4d:da:b2:33:7d:14:18:49:4a:51:b7:ad:7a:8a:37:
d7:7d:a1:70:80:c0:c4:57:2d:1c:64:21:f9:83:72:ca:db:ae:
24:4f:bb:5f:62:74:29:2e:09:45:9e:85:ca:04:9b:dc:7a:47:
18:cc:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:49 2025 by rpki-client