Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File: MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier: hoz2z8bZg0MQ1wTmbunzehz8Yrg/Br3qYNtS1DFXbnk=
Subject key identifier: C2:D8:A1:C2:24:E7:0B:5C:68:F0:A5:CF:96:D4:C0:31:76:A3:BE:CE
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer: /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial: 0197B88FBA0D3897613615836A299C97FA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number: 0677
Signing time: Sat 28 Jun 2025 22:01:56 +0000
Manifest this update: Sat 28 Jun 2025 22:01:56 +0000
Manifest next update: Sun 29 Jun 2025 22:01:56 +0000
Files and hashes: 1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: P9qr4YEj+gkGiDn0Ppu0V0hmFIvfTHo0HiQtS/eB11Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ba:0d:38:97:61:36:15:83:6a:29:9c:97:fa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Validity
Not Before: Jun 28 22:01:56 2025 GMT
Not After : Jun 29 22:01:56 2025 GMT
Subject: CN=c2d8a1c224e70b5c68f0a5cf96d4c03176a3bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:07:2b:32:3f:2b:20:8d:79:ea:fa:8f:6c:
69:71:1a:e4:d5:b7:c1:c8:f4:eb:cb:bd:c9:f9:ee:
d2:62:cd:c7:b5:5e:27:0b:10:ed:36:bf:d6:1b:34:
86:97:e1:7d:8d:71:70:13:f9:a4:b1:23:05:ab:20:
0c:04:6b:cb:8a:2b:d6:18:1f:50:d7:0d:43:a0:2b:
2c:f5:e9:bb:80:f8:33:c2:f4:fc:38:85:2d:66:60:
fd:ed:de:93:89:55:02:8e:9d:86:4c:3e:b8:f0:c8:
c0:86:82:8e:bf:73:ca:d0:1b:e7:db:c5:4a:e8:86:
71:fd:79:4c:9f:f1:40:36:37:0a:84:77:a0:c6:a7:
14:b2:96:c0:20:12:57:9d:f3:03:3e:3a:87:4f:9d:
c1:c1:0f:35:2f:5b:06:25:b8:fa:22:48:b7:b2:71:
f3:24:a7:eb:c0:df:6d:a7:ac:39:f9:82:1e:ff:3a:
41:bd:31:1d:9e:26:11:2c:be:a7:61:26:3c:69:8c:
30:9d:a9:ef:3d:d8:0e:ff:a1:2a:79:19:45:95:68:
f7:16:4d:e2:af:0f:3a:df:78:a6:8e:75:6f:6f:f4:
bd:9f:a8:55:25:09:29:0e:39:93:b4:d3:25:74:ef:
8a:9e:6b:da:2c:18:e9:e7:1e:05:12:6f:8e:3b:a9:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:A1:C2:24:E7:0B:5C:68:F0:A5:CF:96:D4:C0:31:76:A3:BE:CE
X509v3 Authority Key Identifier:
keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:86:1f:4c:f1:02:2f:45:3f:9c:a8:02:e7:18:6a:9b:72:07:
04:61:11:87:13:61:e0:83:eb:64:68:3f:b4:c6:3c:f2:0b:79:
93:04:ec:87:34:ac:f7:59:a8:f9:94:bb:16:37:09:20:f0:7f:
9b:57:06:e2:e4:d8:ce:b8:c5:15:a0:f2:9e:00:f7:27:bc:c9:
5a:f0:3e:73:d3:58:61:e1:a3:48:a1:06:f7:5f:88:de:f7:b4:
9e:ba:dc:8e:cb:82:5d:a8:01:bf:be:4b:73:db:3f:85:71:c7:
bc:cf:4a:be:a5:c4:86:39:1d:87:34:07:03:3b:fe:71:b8:96:
ae:3a:b1:7b:b0:d7:2d:24:cf:1e:0b:70:43:5f:a4:9a:a0:3b:
e6:d9:60:00:4a:65:c0:96:a5:1c:de:d2:47:83:a0:48:1b:58:
25:6b:44:c4:5c:df:0d:b8:0c:04:b5:02:10:ea:e7:e6:3a:8e:
e0:25:2f:d8:a8:8d:2e:96:f2:9d:05:d3:41:b8:28:d4:0c:a9:
a3:51:68:b0:0b:1a:01:9e:e2:49:8a:fa:b5:a5:c5:a8:7d:ea:
3a:3a:37:62:c0:a2:60:cb:0c:1b:ef:22:57:f2:d4:d3:57:31:
d5:e4:e3:09:a2:f2:60:3b:ff:e8:35:a4:48:4c:d6:14:5f:f2:
5b:5e:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:01 2025 by rpki-client