Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: fwlYu79Ef7ifmeu3U6r4BITZdMxGZnlg+TJTPrSP3I0=
Subject key identifier: 1C:68:61:B2:CD:6F:5B:28:C6:84:12:A4:94:8F:32:B3:3B:2C:8A:E0
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 0197BFA42BAF6DFB181CE2BBE354AD2457F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 15BA
Signing time: Mon 30 Jun 2025 07:01:36 +0000
Manifest this update: Mon 30 Jun 2025 07:01:36 +0000
Manifest next update: Tue 01 Jul 2025 07:01:36 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: /TE4sTshddyUjrwAQ4mNMOjRznffd5Wlj6wYymTqMOc=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a4:2b:af:6d:fb:18:1c:e2:bb:e3:54:ad:24:57:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Jun 30 07:01:36 2025 GMT
Not After : Jul 1 07:01:36 2025 GMT
Subject: CN=1c6861b2cd6f5b28c68412a4948f32b33b2c8ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:b6:61:84:49:b4:85:09:48:de:2c:bd:bd:
7e:08:ff:30:8d:7b:4c:05:00:a6:55:ec:54:4f:a2:
de:a4:be:05:25:64:08:69:7b:6d:1e:3b:17:a0:cd:
12:e0:ec:d5:1a:9d:48:82:ee:60:2c:15:bf:b5:a0:
d8:29:80:44:3b:9d:74:10:7f:d2:98:b7:49:c7:75:
4e:b4:19:d9:f6:05:ae:0b:43:0f:08:de:41:d2:ec:
2c:e4:7d:99:99:dd:6d:ac:85:bf:3d:45:38:fd:db:
e0:60:01:50:27:95:62:4f:57:b6:04:2c:46:ea:22:
b1:2e:b1:84:28:6f:52:d9:36:fc:37:c8:63:ea:9c:
cf:4f:cc:41:78:9c:96:32:5d:57:0c:2a:8d:59:38:
fb:78:95:75:68:41:dd:8c:a4:1d:1d:9e:a1:ee:b9:
5f:5f:0e:3b:3a:fe:e8:af:e8:95:21:36:f4:8a:83:
70:1d:87:c4:cc:2a:3d:f8:89:56:fb:2b:c0:66:9c:
ba:8f:f1:d0:68:21:f0:1b:9a:98:d9:44:b8:bb:37:
7c:76:a1:b1:eb:aa:c5:e6:61:ce:6e:2a:5e:f1:f3:
86:20:82:cf:3a:1c:8a:d7:64:67:dd:38:18:e6:e0:
6c:20:d2:f8:06:e7:4f:f5:d1:25:34:d9:61:b8:0a:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:68:61:B2:CD:6F:5B:28:C6:84:12:A4:94:8F:32:B3:3B:2C:8A:E0
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9a:3d:2d:b2:6d:66:93:b1:da:d2:17:3b:a8:6b:ed:9b:03:
51:d5:a3:66:31:03:75:45:92:19:2f:90:68:45:a0:ef:20:e1:
7f:a4:f9:76:bd:c8:c9:25:a2:90:d8:24:1b:59:01:7d:b5:7b:
5b:b1:2d:eb:d8:c4:a5:c6:d3:31:e2:35:a6:5b:80:20:17:7e:
86:fb:1d:75:c0:b4:45:78:46:cd:a8:8b:cf:66:48:9b:3c:1e:
33:ee:7a:a9:a2:8f:51:c0:a7:72:82:36:ee:0a:6b:37:c7:8b:
50:c2:47:5a:18:eb:5a:73:fb:50:a3:de:66:2c:9e:c0:c2:d0:
50:d3:eb:28:45:bf:f8:d7:88:bc:b3:d9:ae:89:db:a5:fd:9a:
e7:cf:f2:db:64:e1:0a:87:7f:59:fb:0c:95:e9:69:35:bd:04:
15:b9:01:75:f2:a5:41:18:0b:ee:50:cc:54:43:d8:55:99:f4:
2b:41:10:14:69:bb:ce:de:e6:26:d2:27:90:d8:fb:1c:7c:27:
8c:57:49:ac:39:af:da:e8:a2:eb:82:2e:7d:79:b5:bd:f7:86:
b3:f4:a7:8f:13:9e:c2:6c:2f:ac:d6:bf:94:61:99:f5:91:ef:
df:92:e4:17:8e:da:f7:4a:ec:03:00:19:21:00:f3:69:6c:9b:
46:7f:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:08:29 2025 by rpki-client