Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: sOqbjfD+bfH/2Ve/KxrtUHGfpeWbjdtgaMrArKlq6RA=
Subject key identifier: 84:34:4B:68:92:50:0B:28:5F:7B:D3:54:C6:8F:14:FC:1A:FC:01:52
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 0197B77C844C6346C2392F4F8E2847F66BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 0359
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: srfFHNW/qk7Of/1VKIyyxur+LDEkmJ4JdmhnmOL0zsA=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:84:4c:63:46:c2:39:2f:4f:8e:28:47:f6:6b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=84344b6892500b285f7bd354c68f14fc1afc0152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:37:e2:bc:ff:4d:85:aa:58:55:fa:4e:41:
5d:1a:40:37:cb:ff:b9:86:aa:99:a9:d0:3c:85:7f:
0b:64:64:67:71:6c:fd:9f:ad:39:d3:00:0e:ae:ed:
da:71:4c:03:49:97:ed:5c:e8:99:05:4e:c9:3f:b3:
96:44:3c:9e:8a:20:e1:10:88:c0:7b:13:90:ba:18:
c8:12:d5:66:bc:9b:90:3a:d8:61:74:a2:b0:18:b8:
bc:6e:05:32:15:b5:6d:c1:d0:38:7d:dc:e7:d9:3f:
f9:23:c1:0c:a5:92:9b:87:c1:f8:12:af:db:dc:87:
4f:c9:f9:fa:b6:2b:27:5a:4b:ce:ca:e3:84:fe:75:
df:f6:04:f9:c1:6d:4f:02:aa:fe:0d:ea:f6:3b:9f:
4c:1f:4f:a9:55:8b:1a:b8:a6:fc:75:1a:ab:b7:5d:
70:92:86:d6:5e:29:e7:06:58:29:58:0d:54:5f:a2:
ad:57:d8:b9:2a:66:23:2c:8e:97:c9:fe:aa:94:60:
39:2b:ed:9f:80:28:bd:d7:5a:a6:c0:b4:17:3a:36:
08:5d:bc:dc:5c:1d:9f:08:a3:04:1c:83:26:fa:11:
d5:a3:7a:b5:5f:09:44:f2:f1:6a:af:77:24:92:82:
a8:13:be:15:db:7e:37:38:16:38:cd:03:c7:5d:e5:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:4B:68:92:50:0B:28:5F:7B:D3:54:C6:8F:14:FC:1A:FC:01:52
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:0f:6c:4c:a2:bf:d4:65:6c:09:62:a6:a0:d9:23:18:de:
90:98:a5:b9:f1:39:91:14:83:ce:8f:3f:46:70:59:6d:5b:eb:
ec:c1:1b:21:a8:8b:a9:a0:c0:ea:03:f5:40:ed:6c:2f:c8:0a:
0e:51:ad:48:93:8c:da:02:24:86:79:45:0d:5f:54:3b:9c:57:
b6:fb:4e:ee:0f:1d:8b:d7:c6:d7:18:a0:26:d2:0c:15:03:1e:
d2:b1:28:11:d1:7e:8a:84:20:9b:19:00:a3:90:d6:52:5f:98:
8d:0d:da:c1:94:a4:1b:6f:69:02:ef:a5:11:5a:23:e0:72:79:
32:14:40:a8:11:21:47:e4:bd:64:1b:77:2d:b4:ce:80:08:29:
4c:40:90:db:b2:f8:e7:61:09:2a:7d:3e:d4:11:81:a2:10:ee:
e4:5f:c5:84:d0:f7:26:48:98:f8:c4:58:81:0d:e9:57:16:e8:
66:c8:49:f9:44:d0:c0:2d:00:23:d2:62:6c:a5:f9:eb:d1:ce:
b5:35:c3:36:a9:df:10:9e:55:bc:d7:ba:d2:be:e0:02:2d:9c:
f4:9a:a8:78:8a:94:bc:14:fb:0b:fc:0d:67:d9:70:41:d7:e4:
44:c7:64:5c:13:4b:52:84:62:77:f0:85:84:4c:e3:e5:48:5e:
f1:a9:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:01 2025 by rpki-client