Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: SLLqk8N40++MwzYc2511mHhW4xStDDBaMzpKgX+H4R8=
Subject key identifier: EB:CB:DD:28:50:C7:ED:A6:BC:D8:A1:22:C4:BA:99:DA:02:32:D1:C4
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 0197B821192555A8B0A8338F939D7AA10043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 1354
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=)
2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: 2xM34/R06fJw6s6na/qtKgui3J5rXCScdDaiLUA7+no=)
3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:19:25:55:a8:b0:a8:33:8f:93:9d:7a:a1:00:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=ebcbdd2850c7eda6bcd8a122c4ba99da0232d1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:50:5a:3b:f1:c9:37:c5:2c:c6:21:2f:fd:
f7:eb:b4:a9:6e:b0:f5:60:39:49:f0:82:68:2b:1d:
95:41:97:00:d9:4a:0e:9e:f8:b4:eb:53:e6:9e:4a:
21:bf:e1:78:0f:85:16:9f:8d:70:77:8d:c0:41:fe:
63:30:cf:37:90:a0:00:28:e2:23:41:97:22:13:58:
3a:81:6d:d4:68:9b:d3:9c:38:c5:4e:37:29:59:7c:
9b:c8:c9:46:bd:89:f9:d0:27:54:a8:16:67:7a:a5:
bf:89:71:1b:55:ac:61:94:cb:bd:00:ca:d5:11:10:
65:58:0f:91:e9:d1:0f:ee:a5:31:9c:d7:10:fd:a3:
57:ad:cb:00:ad:38:8e:91:fe:b7:10:5f:49:ea:35:
2f:d8:27:0e:5a:3f:13:f0:78:64:52:19:fe:d2:09:
f5:d2:02:b9:91:96:de:6c:63:3a:c9:23:77:0e:10:
57:7f:8f:e2:14:e4:4a:d2:c4:2e:4d:c3:25:c2:15:
7b:e2:dc:94:23:2b:48:61:03:24:ee:97:a8:9c:66:
b4:51:28:03:9f:53:ea:86:e5:6e:4a:f6:4a:55:77:
d5:96:f0:f6:22:07:68:43:b9:e5:44:c4:3b:c2:7f:
aa:22:71:3c:65:42:b7:7f:93:b1:a1:6c:fb:da:7e:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CB:DD:28:50:C7:ED:A6:BC:D8:A1:22:C4:BA:99:DA:02:32:D1:C4
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3e:8a:f2:86:ae:9a:0a:49:d8:50:fc:97:d3:27:6b:ba:62:
f7:3e:e3:d1:b6:52:5c:31:54:0f:f4:59:ef:bb:51:7d:ac:05:
97:49:aa:d2:88:9d:69:fa:11:0c:3e:b8:91:e0:8d:e1:e9:90:
ae:02:15:5c:f1:5c:20:b3:35:40:38:66:99:3b:db:0f:89:92:
6a:b6:c8:12:41:13:49:2c:ca:3c:8e:8a:51:fa:38:23:53:95:
26:34:ab:12:01:9f:e4:56:c3:88:b9:a3:ad:ae:07:6d:7a:21:
ad:a2:12:e1:a1:0b:dc:71:3b:62:85:f9:a1:b0:55:94:d5:92:
ea:ea:10:94:1e:cf:00:47:44:04:98:5c:a0:eb:40:6a:78:b5:
c4:6a:e9:13:6b:bb:a4:55:20:94:e5:79:d0:5f:0b:f8:8a:da:
ba:af:f8:e5:c4:cc:4e:63:34:14:7d:9e:8d:dd:ab:a7:a6:a4:
98:8b:c3:ff:81:a4:19:25:4e:e6:e3:38:11:d9:21:04:66:e0:
75:13:a7:88:81:71:cb:49:41:31:36:cb:cd:43:af:2b:0b:b9:
4d:7c:71:f1:f7:24:47:6b:2f:09:4a:b6:87:fd:48:6f:a8:1c:
0b:a7:4e:95:c5:bc:3f:51:73:e6:64:0c:15:c8:7e:75:4b:19:
aa:16:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:20 2025 by rpki-client