Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier: /srOW6n2XKY8b73ZrFItNt8Y1wDhg5ej7igvrWNSX9I=
Subject key identifier: 3D:56:F3:36:D8:17:C2:EB:80:58:7F:68:49:51:33:3C:D7:74:2D:4A
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 0197B5FBD5DAD1797FA41D75C9DEB87F5F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number: 07DF
Signing time: Sat 28 Jun 2025 10:01:09 +0000
Manifest this update: Sat 28 Jun 2025 10:01:09 +0000
Manifest next update: Sun 29 Jun 2025 10:01:09 +0000
Files and hashes: 1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: avICR9LNzLK27Wa6ToDfAS1LAvD3rB7aZAI6myrz5/M=)
2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d5:da:d1:79:7f:a4:1d:75:c9:de:b8:7f:5f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Jun 28 10:01:09 2025 GMT
Not After : Jun 29 10:01:09 2025 GMT
Subject: CN=3d56f336d817c2eb80587f684951333cd7742d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:b4:66:1c:20:44:0e:b6:54:ff:7b:9c:10:
51:37:1c:58:94:0b:07:68:80:02:49:c5:9a:13:a0:
f9:d7:0c:98:0e:a5:7b:d6:f5:dc:b0:77:d2:3b:79:
2a:49:8f:f8:af:15:5a:ed:28:fb:4c:06:36:f9:39:
63:62:7d:6f:89:11:70:f1:45:ff:10:3d:d7:e1:87:
ec:fa:9a:6e:4b:58:ba:ec:7b:c7:a6:1e:d3:1b:91:
ff:20:fb:b3:bf:4a:4f:85:b8:47:90:24:11:e2:16:
72:89:02:34:2b:4d:77:ac:9d:8c:b0:c3:d4:2a:1e:
c5:a6:fa:31:a1:5c:3c:c1:f3:6d:e7:5f:4e:bc:60:
11:b3:5b:ea:0d:8c:67:62:32:90:a7:08:55:45:96:
90:8c:bb:ed:47:55:0d:fb:0e:72:38:20:2c:b9:eb:
bb:c4:ea:e7:c8:5b:52:c1:e1:3b:ee:ce:4d:74:33:
bc:99:22:eb:84:98:59:3a:23:f1:b3:e8:8a:34:cc:
15:3d:11:b8:51:a9:3f:39:29:77:74:42:be:f3:e4:
73:23:fe:d5:91:4f:f7:c4:c9:de:c1:14:51:e3:4d:
3f:62:9e:f5:9c:e7:e5:f4:22:fa:0c:f8:5f:7a:cb:
cc:3b:52:cb:52:d2:0b:3b:03:54:a1:6d:0f:f9:0e:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:F3:36:D8:17:C2:EB:80:58:7F:68:49:51:33:3C:D7:74:2D:4A
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:48:96:37:49:03:9b:b1:b4:34:f1:75:24:a2:bd:73:d2:96:
bc:54:71:f9:b5:6b:2f:b9:1d:d5:e1:18:d7:18:e5:fd:a5:6d:
55:29:18:75:72:f6:b1:3e:f6:6f:de:4c:a9:0a:2d:53:0d:02:
e8:f2:a3:32:6a:9f:92:a9:d5:24:2f:e6:ce:e1:95:43:98:95:
51:f3:2d:eb:eb:ce:08:12:e2:7c:d9:1b:de:73:97:54:ce:ac:
e1:65:16:21:a4:82:64:c3:67:d5:15:54:e2:90:19:6d:15:00:
7e:16:40:65:cc:38:aa:45:6c:92:73:f8:9c:dd:26:34:12:dd:
eb:6e:3a:5b:69:4a:e7:e0:b0:25:8a:a1:5c:de:78:b2:a6:2d:
56:e0:58:7b:d4:35:9d:47:36:b5:c6:b6:54:0b:18:2c:05:93:
d9:9e:fb:93:93:00:67:ac:56:ba:51:c6:7e:ea:0d:b4:4d:15:
bb:24:49:d2:56:cc:e8:c0:87:dc:64:de:bc:9b:b5:2a:c2:11:
23:30:42:d9:18:77:8e:f0:dc:a8:ba:35:8f:20:6c:26:9e:d3:
d6:ce:e5:77:98:54:91:47:bb:1c:a5:d3:6d:46:6f:df:a6:cf:
3f:1e:70:65:18:1b:b1:1a:42:b9:34:24:72:a6:5b:93:39:bc:
3e:44:0d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:34 2025 by rpki-client