Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: oVi8JY1nqW3G6KQO81JQuNH+UL0mxLrU/4vLQAygas8=
Subject key identifier: C8:0E:1D:44:A1:0E:16:CF:45:D8:9E:51:A6:83:D0:5B:B4:6A:B2:96
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 0197711AD088F4E665472CF093185C2D365D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 01:01:12 +0000
Manifest this update: Sun 15 Jun 2025 01:01:12 +0000
Manifest next update: Mon 16 Jun 2025 01:01:12 +0000
Files and hashes: 1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: D0sCKu8YnHOIfNzNYm0Uc7dP6HT4z7A4IltapFkbP1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:d0:88:f4:e6:65:47:2c:f0:93:18:5c:2d:36:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Jun 15 01:01:12 2025 GMT
Not After : Jun 16 01:01:12 2025 GMT
Subject: CN=c80e1d44a10e16cf45d89e51a683d05bb46ab296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:21:99:e8:67:38:3f:63:ae:8d:af:57:6d:
1a:69:75:2a:39:f8:e7:c9:13:7f:18:b2:31:ee:32:
39:86:b2:00:1f:b0:32:b3:ea:e2:92:40:d1:e7:0e:
cc:df:da:3b:89:a8:a8:7c:76:51:16:cc:21:d4:3b:
59:ef:f2:f3:94:5a:56:88:a3:91:65:b0:76:54:fc:
c7:63:c7:ab:18:d3:b9:f2:b6:d1:21:fc:0b:ee:3e:
95:23:ee:26:58:d8:9d:58:dc:8b:f7:4c:39:53:30:
7f:7b:b3:78:ba:21:23:14:cc:f4:c8:97:02:60:21:
94:aa:2b:bb:52:91:ec:88:6c:c9:0f:94:cb:ad:09:
ae:35:4d:e8:83:ce:20:a5:79:4b:6a:d4:58:47:3a:
f5:1a:39:8a:21:55:ba:51:db:8b:f6:f1:1d:38:f1:
df:66:25:bf:26:fb:ac:ce:18:03:b3:e1:96:0b:e4:
f4:6c:85:32:c2:3f:bc:b5:dc:fa:45:27:6b:2a:74:
cb:f4:e4:83:70:e7:8b:a9:a5:4e:cf:0a:09:ac:e7:
8f:ab:75:6e:c6:aa:ec:af:81:5d:96:0f:7b:58:d5:
a2:52:74:b5:91:1f:19:1d:83:e9:ad:57:f8:21:bf:
62:a0:26:84:30:8f:e3:97:68:21:2b:86:58:36:11:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0E:1D:44:A1:0E:16:CF:45:D8:9E:51:A6:83:D0:5B:B4:6A:B2:96
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ab:ee:01:0d:e4:d0:d0:0a:66:d5:4c:52:47:41:45:4d:2f:
af:79:56:39:1b:f5:b9:18:fd:08:29:20:76:f3:ab:5a:82:ec:
bd:18:58:8f:5b:87:5b:be:be:c4:d1:81:21:86:1b:02:02:e0:
f1:15:51:e2:f1:c7:79:6e:62:d6:ba:3e:85:4e:81:ab:0e:0d:
80:ad:e1:96:04:d8:5e:05:a2:18:90:2b:41:53:2c:0b:77:8b:
69:27:e3:39:b7:e1:19:27:6b:02:61:78:66:bf:49:d5:a1:bb:
76:d8:09:a6:c3:05:ab:36:6f:b3:3a:8f:72:fa:36:ad:ca:bc:
22:9a:22:9f:f0:ae:c7:75:41:d5:9e:43:37:92:e1:e0:b7:11:
30:45:d1:ca:d4:52:e4:8c:5a:19:d4:4b:53:81:c1:a2:f2:f3:
30:b9:62:91:2d:e4:d4:e3:ff:31:05:88:54:e6:33:9b:69:06:
dc:6b:49:c2:90:20:14:0e:3b:7d:13:f4:91:b5:35:ef:77:52:
54:b4:ba:0d:4c:9e:69:ec:be:3a:fd:3e:f8:a8:a9:d6:00:b3:
0d:77:aa:f3:58:04:da:10:58:9f:6f:6f:06:eb:c0:a9:e6:25:
55:ae:3e:90:46:ea:0c:e1:de:74:cd:f2:f5:e0:5b:fe:98:6d:
a0:67:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:51 2025 by rpki-client