Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: Ehx2U5XCwAPm6Neg3G7Vc5eYxZcfGjaqytmMq4tTD9k=
Subject key identifier: 53:8B:F4:7C:83:14:99:8E:FA:83:0E:7C:11:B4:FB:E6:38:61:0E:23
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 0197B77C69804A1EB889B1D2EAA6A2CB54A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: pjt7tzcAd1Uox/1MiBDA68W8qdF3D7eS9hZPrw6o2Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:69:80:4a:1e:b8:89:b1:d2:ea:a6:a2:cb:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=538bf47c8314998efa830e7c11b4fbe638610e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:db:e1:0d:a0:db:c0:7b:66:a2:11:7f:2d:
79:93:c8:12:12:da:3d:fb:61:a9:d7:d1:66:4b:92:
51:cd:f0:71:1a:84:99:86:fe:e4:0d:78:82:37:0c:
9c:b3:49:24:8e:7e:86:e1:cb:80:1b:46:8c:55:dd:
59:b4:61:89:dd:85:73:18:6a:75:9e:77:8d:7f:74:
96:ff:de:c6:40:7a:ea:d8:a3:d2:8d:ac:ef:a5:3b:
4d:6b:74:31:4d:e8:30:73:a5:f1:ca:be:3f:84:15:
13:79:e8:36:0a:59:1b:88:a7:02:7e:6e:ff:89:6b:
ee:2e:7a:ab:7d:04:67:0a:a1:5b:ae:d8:e9:62:ee:
e3:9c:39:da:88:96:bd:7a:39:7f:a0:39:4d:12:61:
f8:49:89:c6:c9:28:89:37:f3:c0:04:79:92:e6:bc:
45:75:9e:aa:61:d4:e3:00:4b:de:20:1f:fb:c6:03:
01:7a:a9:f1:55:dd:5e:d9:af:5a:61:d9:bf:31:87:
e2:ed:3c:e1:0a:af:e4:8b:33:92:fe:cd:2a:ec:c1:
b5:5a:83:a2:50:55:cf:29:e3:c2:ce:9f:fd:3f:a6:
4c:44:35:6c:fc:13:5f:b7:fd:8e:6b:40:1b:dd:7c:
a6:53:c8:c4:6c:63:2c:04:60:9f:04:79:f5:60:ca:
92:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8B:F4:7C:83:14:99:8E:FA:83:0E:7C:11:B4:FB:E6:38:61:0E:23
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:de:18:59:c7:ac:fd:fd:57:2b:51:60:e4:3b:ab:a0:42:74:
92:cb:93:aa:c9:b7:6a:69:5a:2d:56:a6:62:e9:9f:c6:ae:2c:
ea:fb:91:72:47:7f:28:1e:d7:37:9b:9b:27:eb:29:b0:01:fb:
da:7f:a6:19:99:0f:f9:57:59:e0:36:ac:17:6a:bb:f3:63:ca:
0c:fd:1c:03:35:48:e8:97:0c:b1:36:c7:a1:d2:03:18:ea:4b:
68:dc:69:41:51:2a:92:56:9b:2d:6e:91:63:b9:61:59:ff:45:
06:46:52:c1:03:0c:f2:3e:2d:6a:05:d8:2f:e8:f9:a6:4e:e1:
39:f6:89:13:cd:91:7c:06:fe:2c:63:fb:dd:f7:7f:21:b1:4d:
a4:f9:81:fb:78:2a:ad:8b:8d:1a:99:15:20:8f:2d:0c:50:48:
be:6d:82:68:48:4e:27:24:b7:dd:95:ed:dc:64:d0:93:11:2b:
a5:cc:14:85:a7:cf:12:1c:fc:93:f6:2b:ec:a7:19:7d:a5:04:
9b:12:6e:92:df:bc:9e:5a:c3:54:21:71:22:2b:c6:f1:d9:c3:
8f:f3:33:72:16:51:41:bb:19:49:39:91:8d:c8:b4:7a:cc:7a:
e5:69:88:5c:a1:15:1e:3a:97:91:df:45:02:f4:a0:06:e5:82:
8c:b6:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:52 2025 by rpki-client