Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: OI1kZY0SDi5PjMqUrciM3QKwi+KMQogjVF0jh2iYRz0=
Subject key identifier: 79:69:6B:0E:B9:D5:1D:47:00:09:CC:C9:C9:84:89:C7:12:15:D1:31
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 0197B6A1BD0F4AA983B8D7020C4EC10F8007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 1498
Signing time: Sat 28 Jun 2025 13:02:22 +0000
Manifest this update: Sat 28 Jun 2025 13:02:22 +0000
Manifest next update: Sun 29 Jun 2025 13:02:22 +0000
Files and hashes: 1: 2z0NeYZe1xNl9FiaXMK1zDvmewM.roa (hash: cOILWkUhsnduTiBD7sHiLuG2BYfCl/U6Tpdfh+0XXP8=)
2: 5Sxq5_88aKl6Q1AixLmSpdxssj4.roa (hash: 930p4kPdeb7NPu1eD23W3ram0O2yZZYGtkILA0nswPo=)
3: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (hash: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: sXfxkcHlnzUCmI1tT7wedYQ1rD0a0BCI5yTGOTMYD+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:bd:0f:4a:a9:83:b8:d7:02:0c:4e:c1:0f:80:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Jun 28 13:02:22 2025 GMT
Not After : Jun 29 13:02:22 2025 GMT
Subject: CN=79696b0eb9d51d470009ccc9c98489c71215d131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fb:70:47:b4:67:b8:30:e9:ac:2e:e5:3c:59:
d0:01:1c:b7:c9:5b:04:93:51:8f:46:33:66:ce:67:
fa:b6:38:37:65:35:6a:3d:52:a2:48:6b:4e:67:67:
af:d3:0e:06:83:54:46:d4:5d:23:eb:9b:88:80:40:
8d:58:82:fb:23:22:d2:cb:2c:1c:97:eb:d9:78:c0:
92:14:9a:4d:4c:1e:91:36:78:e8:7a:6f:14:79:29:
3c:ef:ad:63:ce:69:cb:ee:d1:39:b3:09:0d:58:e6:
0f:2e:85:5e:8d:02:55:42:38:06:da:c9:f9:12:83:
01:31:44:d4:39:a1:e6:e4:e9:b0:6d:f3:90:43:62:
d7:d8:ac:52:fc:b9:77:21:e6:03:8b:ff:e0:04:32:
cb:6c:72:a9:e7:d5:e2:c3:95:ba:67:1f:a1:ee:2b:
84:29:df:2f:a8:2d:4b:92:79:5d:3d:2d:7c:98:b8:
c2:5e:df:7d:a5:8f:a7:6e:c9:63:43:46:98:2b:66:
41:76:bd:a2:18:ae:4d:7b:f2:50:0c:da:bf:82:eb:
48:35:8c:7c:45:3e:2a:d3:70:72:3a:2d:55:e9:c0:
e8:76:a5:6e:c1:5c:23:0a:49:49:d3:95:ae:3e:db:
65:f4:39:ee:41:2d:08:cd:0f:8c:d1:e7:5d:fa:7e:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:6B:0E:B9:D5:1D:47:00:09:CC:C9:C9:84:89:C7:12:15:D1:31
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:31:5c:9a:38:88:37:a5:e3:92:42:45:bd:e3:8b:68:e9:4f:
56:31:61:d4:2e:8e:ca:44:ec:35:ba:53:e0:be:0e:86:67:c2:
75:40:5b:b2:f3:9e:9c:3c:5a:54:97:12:78:af:cc:d1:0a:89:
75:65:7a:43:73:85:d4:15:f7:97:7b:80:e0:32:5d:89:90:34:
f8:ae:fd:f0:d1:3c:67:31:03:0c:8f:5f:ae:8f:d2:c4:04:10:
10:da:bb:7b:fb:b2:32:9c:1a:f4:e9:a3:cb:ab:36:14:f4:7c:
6a:ca:23:01:ec:53:83:a1:8d:96:cf:e2:a6:40:26:3d:b9:9d:
5d:ff:f9:04:0e:b0:66:4d:77:5a:df:35:9a:c9:80:52:13:91:
b5:a7:0d:0f:8d:0e:63:83:b0:8f:dc:cb:fe:2d:51:64:dd:02:
37:dd:e8:9b:0c:c1:8d:9d:e0:67:28:37:3d:7a:8a:17:18:3b:
6a:fa:38:8d:da:8a:a3:3b:a6:d6:f3:3e:db:2c:9b:46:58:9b:
9b:4c:e5:52:eb:fa:6f:24:f3:45:92:0b:be:ce:91:cb:25:15:
72:ea:25:eb:b0:23:af:77:7e:1d:87:cc:91:a0:3e:e2:9b:75:
b1:d4:22:52:0b:f8:4a:a6:e1:3c:4d:22:7a:51:ee:c4:5c:e0:
70:4f:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:54 2025 by rpki-client