Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
File: MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json)
Hash identifier: fb77rlkoV2TuuOmdLCpZBCIAuruVqdDA5UGVO6kkqWA=
Subject key identifier: A8:DC:08:FE:C3:7E:B8:E6:F4:66:DC:FC:EA:69:3A:3D:F3:A0:D5:95
Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
Certificate issuer: /CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Certificate serial: 0197BA7D7BAEC26B295636561C173EAD38C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
Manifest number: 0926
Signing time: Sun 29 Jun 2025 07:01:15 +0000
Manifest this update: Sun 29 Jun 2025 07:01:15 +0000
Manifest next update: Mon 30 Jun 2025 07:01:15 +0000
Files and hashes: 1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: LpPLNJRUrepCKUrULSVTmRVTxhu1VjBxJ9xemw4vd64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:7b:ae:c2:6b:29:56:36:56:1c:17:3e:ad:38:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f
Validity
Not Before: Jun 29 07:01:15 2025 GMT
Not After : Jun 30 07:01:15 2025 GMT
Subject: CN=a8dc08fec37eb8e6f466dcfcea693a3df3a0d595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:1b:68:69:66:3b:ff:73:96:f6:8d:18:1b:
29:a2:39:9c:1a:1c:4c:11:4b:bd:6d:69:a1:ed:a8:
13:a7:14:89:ff:5a:31:9c:b0:48:32:18:ca:2b:4c:
96:d1:c6:b1:32:aa:23:df:58:1f:a8:6d:ba:72:aa:
2c:1b:e1:8c:3c:98:a6:0b:47:c0:6c:6c:8b:21:cc:
5c:94:a9:56:03:2f:ff:75:fa:c9:4d:90:f1:58:ec:
ca:8b:76:ea:bd:93:6d:0b:fc:a5:94:e5:7f:21:bc:
4c:ff:eb:a4:4b:bd:8b:c1:e1:8d:b8:65:c5:32:51:
9d:6c:2f:9f:3f:85:1f:b3:cc:90:9f:c2:18:da:96:
23:28:e9:68:db:46:0d:30:fb:ae:79:23:fb:7d:52:
11:4b:bc:43:b2:46:bf:31:61:ec:4b:91:56:8b:17:
9c:0b:ce:06:2a:1e:44:c5:0e:9a:2c:28:1d:c3:3b:
4d:f7:57:f5:ed:10:75:1c:d2:7a:77:7e:ae:8f:13:
41:65:47:80:70:5c:cd:43:4e:8d:82:f7:a7:9a:5d:
6c:05:96:e5:2d:9b:28:ef:79:59:3b:36:e4:97:60:
0b:c4:f8:7a:dd:2e:03:2a:2a:d3:93:76:12:82:9b:
33:e3:b2:13:ef:0c:11:36:8d:da:06:2b:59:0c:d1:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:08:FE:C3:7E:B8:E6:F4:66:DC:FC:EA:69:3A:3D:F3:A0:D5:95
X509v3 Authority Key Identifier:
keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7f:7a:92:46:0d:29:23:6c:f2:a3:44:d2:65:ed:5e:17:17:
65:b1:9d:6a:d9:d7:6e:83:f4:4f:4d:01:b6:06:80:52:16:42:
c4:9b:f7:a8:b2:9e:06:9b:f4:4a:3b:23:e8:84:8e:72:49:ad:
70:f1:27:65:de:68:aa:e4:71:ce:7c:13:7e:c1:da:6f:f6:14:
7c:a7:12:26:21:21:f5:38:b5:b2:f5:37:7d:67:39:ab:bf:24:
34:92:1f:64:33:36:d2:03:4f:bd:90:be:f6:7a:ea:39:c5:07:
c1:77:13:d0:7e:78:e8:86:35:44:30:e6:ac:9b:c9:d4:de:14:
b1:c2:31:9c:f4:3a:c4:37:fd:a7:32:4f:4f:b5:3a:71:76:a9:
cb:15:0d:71:0a:f1:ec:2e:ae:21:10:29:60:b8:96:38:56:f5:
85:ee:18:c2:b2:cf:f2:b9:31:5a:9f:51:04:82:d8:7f:db:6a:
5b:91:ef:15:ed:6e:96:ad:a6:03:59:3c:e1:df:e4:a9:73:0b:
9c:75:20:0b:c1:16:e8:44:ce:fd:49:cd:36:23:0e:5b:0e:cd:
df:82:5f:5f:4f:7d:db:4e:c2:be:15:a5:52:3a:58:a2:15:2b:
10:03:3f:31:aa:da:a9:c4:16:9f:bb:7a:f5:de:ba:d6:6b:04:
df:25:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:49 2025 by rpki-client