Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File: mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier: tnVIkC7rkpVquFWkczymF8d3AfZQRxEUo6lm8aOUQXE=
Subject key identifier: A7:BC:CC:4B:39:7F:6B:7F:BD:13:BD:4E:94:8C:92:36:FF:61:E2:62
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial: 0197B7B33919653571A68163A614E60CA00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number: 1137
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: ONDqQfjr9_AJ9RydMAScKqXbPqA.roa (hash: tzIBuHIsI+gH6B58aDq25YyBMDZoGOkfi5bBeLvI+/k=)
2: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: o1625/QdCvPXKjJEZqS5fitrCiXyYI8p++jmr5tyjmg=)
3: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (hash: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:39:19:65:35:71:a6:81:63:a6:14:e6:0c:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=a7bccc4b397f6b7fbd13bd4e948c9236ff61e262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:f6:59:f0:b6:55:52:77:2a:55:80:71:7b:
ae:00:8b:5d:f3:b1:ed:ef:41:bd:93:f6:c8:97:9e:
9f:39:71:ef:6f:97:fb:9c:ef:aa:ac:5a:00:fd:7b:
86:18:77:29:b3:c1:24:63:ef:7d:6b:07:63:04:d8:
7f:bd:42:fa:d6:01:77:ad:f9:57:ba:74:04:d1:68:
f5:30:09:1c:bf:ad:3e:64:b5:e0:6a:10:e9:c3:e0:
20:9c:08:c9:de:a6:6a:25:db:a5:d9:61:40:7c:60:
76:7e:0f:3a:7b:8e:04:51:55:90:c1:72:f3:9f:b7:
9a:b1:5c:b0:c3:df:54:15:4b:34:52:45:9c:3e:a4:
69:02:d2:f4:61:b6:91:69:0e:c5:a4:84:ed:06:6a:
a9:05:e8:9d:fa:0f:53:68:1f:24:e0:e0:a4:37:f4:
24:6b:67:13:f3:d1:20:ec:72:f7:a2:be:29:ac:6a:
08:30:bf:84:16:00:97:3c:8c:8d:f0:a9:bc:30:85:
54:17:a0:0a:f2:d9:be:ac:87:2b:b1:d5:58:e4:f4:
5d:16:05:ef:56:1e:2f:66:c7:38:33:27:94:0a:7d:
63:28:47:bd:41:7f:19:13:b0:e7:1c:e4:4a:04:da:
e5:ad:07:6f:3b:ae:fb:e5:eb:f2:26:ee:77:8b:b7:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BC:CC:4B:39:7F:6B:7F:BD:13:BD:4E:94:8C:92:36:FF:61:E2:62
X509v3 Authority Key Identifier:
keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:01:d1:e5:1a:ec:e4:45:3b:d7:35:e6:80:86:a8:cc:f3:83:
82:71:2c:9f:42:9a:f1:b4:77:fa:95:25:8f:36:11:75:8c:82:
be:dc:7b:ec:ee:96:c3:ab:91:9d:60:c0:84:8f:2b:ed:e9:1a:
92:54:e3:4c:a4:24:6a:73:5e:7c:2a:74:9b:3c:58:7d:0a:a9:
cf:73:83:af:16:b7:a2:52:17:b0:65:55:b6:5d:ce:8a:0c:6a:
e1:a2:6c:66:74:00:26:12:1d:35:3b:01:fe:23:02:3d:d7:9a:
2d:88:c9:a7:54:bc:6e:de:d2:60:21:ca:31:43:25:b7:fe:4a:
7e:53:ae:a3:6c:f4:8e:bf:2a:51:f1:97:6b:c5:c5:2c:68:fe:
6b:13:eb:b7:8c:8d:b6:a3:96:60:84:91:9c:ce:b9:24:49:22:
50:89:31:39:f3:63:04:c1:13:99:b0:08:4d:9e:58:38:f4:11:
c8:36:fa:f1:fc:36:fa:43:ce:40:f4:9c:1e:56:10:2e:c3:5b:
69:96:bf:1c:8b:eb:c9:60:d8:4f:3e:6a:a0:92:33:ee:0b:88:
39:fa:3d:31:6a:00:b7:d4:3a:90:2e:d9:13:e8:02:83:9d:30:
2b:a8:15:29:85:cb:91:76:9a:6a:62:60:f8:b1:f9:1c:d3:98:
71:c8:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:54 2025 by rpki-client