Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File: m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier: STMcLNPxTg9uHKVC+W5oYAFFNKE94LG11fQDL4BY20M=
Subject key identifier: 95:DD:B8:38:98:45:94:07:21:6E:95:72:F8:A3:25:0E:FD:51:F4:7B
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial: 0197B96AA4637E01ADBBA19E4076ADC472BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number: 0C37
Signing time: Sun 29 Jun 2025 02:01:03 +0000
Manifest this update: Sun 29 Jun 2025 02:01:03 +0000
Manifest next update: Mon 30 Jun 2025 02:01:03 +0000
Files and hashes: 1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: N+RqZQHg5Ctq9Szc6Q/O0pp+mrtVL6YUy2W8ubeYoP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:a4:63:7e:01:ad:bb:a1:9e:40:76:ad:c4:72:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Validity
Not Before: Jun 29 02:01:03 2025 GMT
Not After : Jun 30 02:01:03 2025 GMT
Subject: CN=95ddb83898459407216e9572f8a3250efd51f47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:41:66:2c:8d:3f:51:50:f6:1b:73:b0:94:
4f:b1:4c:63:b3:90:f5:7a:cf:65:34:7c:21:2e:f6:
14:0a:f2:1a:b1:d3:10:54:02:1a:5c:11:9a:ee:91:
42:38:2e:f0:94:2c:bd:ac:e4:84:0c:57:20:4c:54:
3c:f0:23:e3:8f:2c:b7:55:45:2c:0f:80:59:c5:c6:
47:f1:9a:b5:ce:d3:55:a1:0e:25:bb:aa:7a:58:19:
1b:ea:2c:be:7e:07:b3:2c:18:7d:3f:dd:38:15:57:
f4:7b:0b:73:08:6f:d2:19:20:f8:ab:8c:ce:19:82:
96:0b:cf:04:11:60:60:77:f5:6d:a2:0f:80:26:60:
12:38:a6:97:8e:b2:7f:9e:6c:5c:17:d3:62:c9:cf:
82:b1:22:f9:0d:dc:9f:c5:09:2e:ac:7c:cb:22:7d:
18:c0:9d:47:7a:ec:15:40:be:98:5b:19:5b:21:b8:
6e:f7:9d:7b:3e:6f:4a:1c:9c:ab:ba:4c:21:60:2b:
bb:16:ae:2d:85:b6:54:99:c1:88:9c:fa:db:31:1c:
be:b2:a7:d5:3f:65:2f:a2:f4:3a:bd:08:c8:dc:92:
df:74:46:d3:fb:85:2d:d9:9e:e4:ad:e8:b7:5f:ff:
81:56:f3:34:0d:9b:c1:12:0d:06:78:79:49:78:2c:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DD:B8:38:98:45:94:07:21:6E:95:72:F8:A3:25:0E:FD:51:F4:7B
X509v3 Authority Key Identifier:
keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2d:60:b2:b8:6a:dd:de:7a:3c:d1:42:5a:b9:e5:7b:3e:35:
70:bd:ed:d6:7d:98:46:2b:00:cb:c9:04:99:96:27:2a:24:cf:
66:e2:81:8c:5b:76:9a:ac:48:37:bb:a4:0f:61:d4:e1:de:39:
6a:86:b3:9f:27:02:3d:0d:12:37:34:e7:d1:3d:55:77:bd:a9:
33:1a:4b:5b:ea:f6:b3:8a:d5:b0:0f:7f:10:a2:86:88:3e:3a:
22:4e:9b:f7:ba:6d:0d:32:de:69:c8:36:1c:64:9f:2d:8c:5b:
56:71:cc:a4:77:fa:a6:bb:81:47:2d:a0:da:64:c8:4d:80:9b:
ea:f7:1d:58:b4:80:93:e4:8f:1d:e8:5a:fc:27:af:30:04:f1:
6b:df:56:ea:a6:54:4d:7c:46:8a:56:f1:db:8d:02:5a:29:66:
40:59:35:9b:d3:8b:7a:45:a2:4a:61:76:58:0d:f8:5a:fe:75:
64:fe:25:8b:ed:9e:63:86:e5:b2:f4:e1:6d:c9:06:bc:44:9d:
d2:97:01:b2:4c:fd:84:9a:a5:d2:94:ef:8b:43:9f:1d:9d:5c:
e5:2b:54:69:34:7f:a3:11:26:46:c4:52:0b:04:dc:bb:01:09:
68:32:5b:8d:a5:bb:c4:05:21:d3:3f:cf:e5:3f:f5:62:48:95:
ba:f2:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:16:28 2025 by rpki-client