Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: ss/3lNjL7owbRfW8LmAG7fSwnhRzjnx4RJxkTRcIgm4=
Subject key identifier: 64:4B:32:BC:CA:78:C0:63:D9:AC:42:7E:2C:3F:5E:4F:EC:7D:F2:95
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 01976C623DAB3CA1EC993CFCD17340AA6876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0664
Signing time: Sat 14 Jun 2025 03:01:06 +0000
Manifest this update: Sat 14 Jun 2025 03:01:06 +0000
Manifest next update: Sun 15 Jun 2025 03:01:06 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: JIS8GT1h2vb2x0TaFV0JX2UdpglOeWwizn3Ekc7MoHw=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:3d:ab:3c:a1:ec:99:3c:fc:d1:73:40:aa:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jun 14 03:01:06 2025 GMT
Not After : Jun 15 03:01:06 2025 GMT
Subject: CN=644b32bcca78c063d9ac427e2c3f5e4fec7df295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:6f:26:9c:d5:cc:ab:86:3d:2f:71:c4:9e:
ad:7e:11:1e:8b:b4:17:1f:22:97:01:7a:69:4e:82:
79:d8:12:a3:f3:3d:13:c4:19:b1:cf:53:01:91:b5:
0a:28:cd:e2:ab:a1:26:53:98:08:4b:13:9b:df:fd:
92:e4:6c:94:3b:08:8a:27:6f:52:69:9c:df:33:87:
c6:80:f9:36:1e:03:91:d9:68:17:c8:1e:7b:c3:cd:
4d:70:b7:e3:34:c2:3f:e1:43:8a:19:e0:cf:a8:98:
95:0b:ac:e3:96:3f:5d:47:cc:c0:4e:54:e3:65:61:
8d:c8:c8:a0:9a:73:0f:66:28:6a:e7:48:71:2c:9b:
13:55:b5:b6:24:5f:1d:df:d9:e8:c6:5f:85:50:e2:
12:d8:7a:e0:fa:d1:1a:5f:05:39:a8:d5:c0:3a:78:
8e:62:6f:97:e1:48:8b:15:a3:e5:61:db:2c:29:77:
fb:88:5e:81:87:40:ae:83:f4:02:c4:ee:f6:01:13:
d6:da:e4:b9:90:34:03:46:aa:a7:ed:41:c7:8d:bc:
c2:69:1b:36:71:9f:f9:f1:6f:be:ec:b6:d9:ba:76:
fd:bb:9c:93:cb:51:56:8d:a5:11:b8:5c:33:f4:7f:
5d:a6:b6:03:24:a9:8d:da:01:fb:9c:17:ec:c5:14:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:32:BC:CA:78:C0:63:D9:AC:42:7E:2C:3F:5E:4F:EC:7D:F2:95
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:58:05:26:f5:e2:d1:74:3e:48:5d:6b:2f:c3:e2:ac:14:
64:c2:2b:9d:9a:bd:f8:2e:cb:ce:6c:eb:c4:b4:42:dc:db:07:
f3:7b:82:a7:d5:fb:c5:ef:dc:f2:4e:0f:2e:a9:25:20:91:a8:
2e:96:84:09:d5:5c:69:e9:66:e9:7a:e2:85:3a:07:a0:6d:86:
4a:23:c6:6d:90:a9:bb:9d:ed:22:49:c7:31:9f:81:b4:33:b4:
83:26:aa:e4:52:a0:07:bf:03:62:00:d4:2e:57:94:a4:bd:b5:
53:85:e7:5b:ec:2d:0c:89:a3:10:7c:71:d3:57:98:df:c7:9e:
b8:cf:e9:92:58:7e:a1:2d:a9:89:00:1c:ed:e8:ee:eb:e4:d1:
17:09:fa:27:5a:33:c7:70:6d:45:ee:19:46:11:fd:31:cb:a4:
e4:d2:9a:3e:4d:dc:24:f1:51:e0:87:b7:72:1b:06:b1:90:a3:
e1:18:70:4f:15:c3:67:b1:a3:b5:d7:dd:93:6e:9a:49:a2:08:
4a:6a:05:5c:3c:cd:1d:78:6f:12:25:25:a1:00:7e:e7:a4:c5:
21:4f:92:12:0c:ba:88:a9:37:90:e3:5e:ad:1f:f0:41:2a:a8:
2e:8f:30:dd:76:30:dd:c3:ce:02:25:19:46:f1:b9:45:f3:ce:
00:0c:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:51:14 2025 by rpki-client