
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
File: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft (raw, json)
Hash identifier: 3dkcdiSK4KirO2nI/WsBH4h3vKOPatO++UFTiHB/mp8=
Subject key identifier: 0D:A6:1B:06:14:59:A1:4A:C6:18:20:03:1F:A1:8A:EE:D1:C4:9C:0B
Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Certificate issuer: /CN=31533690ab184f433f1760f3feaa184c443e70f9
Certificate serial: 0197B9341442605F3F87FA84260AF30BCEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
Manifest number: 0564
Signing time: Sun 29 Jun 2025 01:01:27 +0000
Manifest this update: Sun 29 Jun 2025 01:01:27 +0000
Manifest next update: Mon 30 Jun 2025 01:01:27 +0000
Files and hashes: 1: 4H5f4KMuGUdiq20v6X15FIvWPCg.roa (hash: 1oOS4e7SC894+hZZBmJUAEBGgPQQh1AJU8M/EeMAfmg=)
2: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl (hash: qq1aAIt71FOYPZlW2nl9TE/qgp/kP/8pw89WafdbUnc=)
3: oWYw73o0XVlV6OpLKF4dF1YQeis.roa (hash: 5U7LFltASNwuXUP6x/MbRpxou9KC14KfkL67az3+D4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:14:42:60:5f:3f:87:fa:84:26:0a:f3:0b:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9
Validity
Not Before: Jun 29 01:01:27 2025 GMT
Not After : Jun 30 01:01:27 2025 GMT
Subject: CN=0da61b061459a14ac61820031fa18aeed1c49c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:94:51:be:c1:2f:e7:cd:79:dc:ec:73:25:
a5:68:df:ad:af:3b:97:0c:33:46:ee:7c:1d:eb:cb:
48:f2:fa:ae:37:c4:22:5f:83:33:3e:30:c9:a4:31:
52:f8:bf:ce:78:2b:8e:b4:81:2a:5c:c7:47:e7:34:
b8:c6:32:50:89:49:5a:0b:33:fd:d0:7e:26:db:6d:
bb:3a:f9:f7:e5:d3:3f:e9:d0:26:aa:c0:4e:60:e0:
35:96:99:20:fa:12:73:a0:92:aa:69:20:83:c3:61:
00:35:cc:d9:3d:56:2f:82:68:ed:80:c9:56:d1:b4:
b9:0c:09:a4:eb:3f:0e:7f:1b:9d:0c:5f:ae:48:f6:
fd:92:d2:aa:ac:2b:47:ec:4f:41:18:56:23:f3:8e:
3f:dc:04:41:9f:66:cc:b6:b2:9f:06:c2:98:81:b5:
a3:ea:94:29:7b:81:ac:f5:bc:d9:4d:b8:37:0b:21:
75:a8:16:b1:b4:28:ae:a5:66:59:03:fc:a9:b6:0a:
ba:86:cb:fa:13:91:ab:46:f2:88:e4:1e:f5:f0:cd:
ec:18:52:22:c4:fa:f5:52:a9:97:0b:14:a9:f4:0b:
e2:c5:c5:b9:a9:c3:45:36:91:7b:5c:0f:a1:3d:27:
d3:e1:66:9f:b7:0a:58:0b:a3:45:b5:85:52:37:c3:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A6:1B:06:14:59:A1:4A:C6:18:20:03:1F:A1:8A:EE:D1:C4:9C:0B
X509v3 Authority Key Identifier:
keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:b0:d8:3d:4c:51:05:b8:4d:0a:9d:d3:b8:b6:9e:33:d4:57:
9c:ed:31:a2:4b:17:e9:0c:2e:1c:6f:6f:ac:00:22:c2:84:13:
ea:85:4e:67:34:06:80:21:98:88:39:ef:0c:79:4e:00:1f:ab:
13:28:14:8f:e1:02:d5:12:42:6f:58:ad:51:e4:c7:d1:5a:2c:
8d:f5:6c:a4:57:f7:6a:64:05:5b:37:23:8b:88:82:bb:3d:33:
e9:77:90:6d:3f:82:47:e6:df:14:b9:5f:fe:cb:f8:e6:fd:b0:
5c:84:40:2f:46:79:1e:50:fa:43:11:17:1a:30:da:ab:18:1a:
b0:72:26:a4:29:3b:55:64:c2:a2:82:ed:05:90:d2:42:af:15:
54:71:38:c7:83:72:71:5d:53:c6:37:f9:d0:4f:59:70:e4:fc:
74:a0:d9:3d:f1:43:b1:3b:a4:bb:df:b3:8a:de:ac:8c:8c:42:
5f:63:a3:19:2d:38:ca:0f:c1:45:74:7c:79:e5:f7:f8:ba:fd:
d7:c5:0a:5b:a8:ac:a9:b1:6c:2b:ef:19:0d:ff:f0:b0:47:a4:
93:0b:af:32:3b:ba:4b:d1:c6:c3:01:f0:7c:e0:1d:72:5d:18:
10:c2:e1:85:f5:55:cd:83:58:c3:a8:d2:04:9e:ed:75:7d:9a:
1d:81:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:13:14 2025 by rpki-client