Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: x6qiYvQauewIvCxge4dox+UJDKajlfuXbEDlWpM+syw=
Subject key identifier: FF:FA:91:32:70:CD:7E:7D:0D:55:C8:D4:AF:9E:B4:FC:19:59:8F:3C
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 0197B745A9AB6C1B31B28C7BAE461C46A3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 0D37
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=)
2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: nS8GeI86pEwPhZMbdOxbPpLzNbwApTnmo///ZyjW2zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a9:ab:6c:1b:31:b2:8c:7b:ae:46:1c:46:a3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=fffa913270cd7e7d0d55c8d4af9eb4fc19598f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:92:fa:6b:b6:84:a5:bc:17:46:50:66:3c:
05:bb:b0:2c:c4:eb:60:0d:05:c2:32:1b:1d:d7:b2:
74:a8:97:c4:ae:b2:a5:18:17:63:f5:27:f1:5c:c7:
94:d9:9d:81:b2:2d:2c:16:5f:87:c4:8b:8d:b1:83:
58:bb:77:8d:d7:c5:fb:ea:77:9c:bb:51:7a:61:29:
c9:33:7e:f5:3f:aa:5f:12:c5:78:c3:8c:9a:33:d3:
f3:9f:67:a6:96:36:93:4d:f7:cd:c6:49:48:9c:ce:
e9:fd:c0:46:93:b5:08:d1:04:9a:40:f6:a2:22:57:
1f:95:df:b8:ce:a0:e5:26:29:ef:8b:5c:c4:fe:69:
e8:a2:18:1c:06:5d:c3:80:ab:df:ee:34:8f:87:3d:
cd:61:47:0e:7e:9e:6f:88:16:63:f0:24:f3:31:78:
5e:b0:01:a9:c6:e7:c0:89:ad:b9:4c:9e:26:2a:b6:
7f:79:7a:9c:83:84:a3:e3:e2:b6:9b:0b:31:bd:d3:
1b:df:94:d4:4d:26:55:65:9c:24:2e:72:0a:54:cc:
c6:08:c3:91:51:c9:9f:22:db:b9:ea:41:23:f8:cc:
c5:e6:94:f4:05:71:c4:d9:f4:de:cd:9a:d8:9a:3a:
89:bc:9b:b9:64:1e:88:67:1a:d1:f3:d8:ec:33:7d:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:91:32:70:CD:7E:7D:0D:55:C8:D4:AF:9E:B4:FC:19:59:8F:3C
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:43:50:55:96:24:e6:df:49:eb:e1:5e:11:1b:c8:24:95:e2:
3f:53:af:10:01:8a:4b:34:38:3c:30:ec:0e:c3:d6:3a:81:46:
bd:e8:82:24:6b:c6:a7:5d:2e:64:93:85:80:ec:8a:71:98:c4:
b2:de:e9:d4:af:73:de:f0:fd:73:50:12:a1:c6:7a:d7:a4:2e:
75:b0:2d:a3:97:40:46:e6:d7:a4:ec:c0:33:bc:cd:5a:95:ec:
ff:4e:12:39:76:07:83:c0:ad:43:05:87:67:05:67:b9:21:33:
3a:0c:56:c8:a8:d8:fa:5d:4e:76:23:5f:dc:7b:c5:27:52:03:
d0:30:33:2d:fc:5c:d6:3f:72:95:c2:69:6f:65:f1:41:93:4f:
e6:99:0a:b7:fb:ec:6d:ba:f1:2f:8c:b2:b4:3e:8c:dd:18:aa:
77:b5:b2:db:f9:68:ff:55:58:69:88:29:fc:a8:43:db:ef:83:
ad:6d:59:4d:b6:cf:01:d3:51:26:c8:91:b4:10:a4:88:87:77:
7d:c1:1e:de:76:7b:fa:41:17:51:4e:8a:a2:42:95:76:71:9e:
df:4c:67:55:1d:02:f2:57:48:54:f4:41:3c:3f:ae:98:3e:be:
5e:ed:71:e7:ad:24:69:77:61:ca:87:dd:c0:f6:21:30:6a:ab:
40:3e:34:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:28 2025 by rpki-client