Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier: p+MOFz8vCURZRZQNUE5GdI6E2YcOTTaBOKPak0u/E1Y=
Subject key identifier: CA:6F:F2:E9:32:50:99:63:40:A2:0A:9F:AB:A4:7F:B6:85:E9:04:9C
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial: 0197684DF3F0B277BF08BC2854969AFB4B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number: 048F
Signing time: Fri 13 Jun 2025 08:00:28 +0000
Manifest this update: Fri 13 Jun 2025 08:00:28 +0000
Manifest next update: Sat 14 Jun 2025 08:00:28 +0000
Files and hashes: 1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=)
2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: 5iUmTpiT8Wci2/el9+EYBTe0PJ3quxZuSvyXx7Cdvh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:f3:f0:b2:77:bf:08:bc:28:54:96:9a:fb:4b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Validity
Not Before: Jun 13 08:00:28 2025 GMT
Not After : Jun 14 08:00:28 2025 GMT
Subject: CN=ca6ff2e93250996340a20a9faba47fb685e9049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:d2:ea:c8:b4:2c:ad:1a:e1:47:8a:57:e0:
97:6f:38:73:25:77:5d:3d:f2:d2:00:3e:c6:f9:83:
d4:4a:03:ba:fc:80:a1:be:5d:34:6d:9c:2e:32:89:
b0:ea:51:69:5b:91:6e:cb:b4:80:e9:41:a5:70:4f:
70:66:a6:5d:6c:69:ca:18:65:78:88:0e:02:7e:8d:
75:b2:1b:8b:1c:bc:fe:d4:14:ca:b2:cb:56:ee:71:
db:de:d4:b9:77:56:c3:04:71:a7:59:ff:76:76:b7:
a0:67:21:1b:ed:25:6a:a1:f7:d3:07:d6:0d:9d:c9:
b8:9a:cf:06:6b:a6:78:55:79:e1:3d:fd:7b:4e:d4:
8d:bd:58:2a:96:bf:53:a1:a5:43:7b:a1:8f:2e:a3:
66:d7:16:d3:7a:56:12:0f:ab:18:70:0b:84:6d:1f:
a0:14:24:cc:aa:6f:33:6d:f4:ea:e3:46:6e:62:b0:
52:5f:5a:45:78:a7:a6:be:b6:19:70:48:5b:21:72:
81:de:84:2e:6c:ee:f2:7f:54:d5:75:c6:70:7b:07:
c7:f5:dd:8d:25:67:d9:1a:ea:a3:3f:bd:8c:7e:ae:
ee:17:fd:f7:0b:45:31:5e:e6:d0:d3:82:c7:3e:8e:
5b:31:39:05:54:b4:7b:72:67:a1:32:ee:76:42:54:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:F2:E9:32:50:99:63:40:A2:0A:9F:AB:A4:7F:B6:85:E9:04:9C
X509v3 Authority Key Identifier:
keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:11:9e:19:d1:a9:96:39:48:6f:47:3f:7f:dc:3a:ab:5b:b3:
7b:f7:f9:5e:a8:0c:fe:24:fa:47:28:cc:08:77:ff:3b:6f:34:
64:05:83:f7:5c:a7:17:78:5b:9b:8e:5b:33:9e:16:ab:de:0b:
3c:f4:04:5b:65:4b:55:82:fd:de:ee:e9:88:14:92:b7:0f:4b:
92:be:26:ec:62:61:d2:8e:2d:79:26:43:6f:2c:f3:35:95:40:
47:ca:a8:8c:c7:2d:7b:74:c3:ab:94:78:c7:12:12:06:5d:53:
4a:ce:0d:60:b3:14:94:35:9a:ba:0e:39:90:9e:25:dc:cb:6b:
4d:36:f5:13:8b:b0:08:34:3b:96:28:04:eb:70:9b:31:db:ea:
47:12:fa:b4:52:fd:d2:db:d4:e5:70:ce:d7:a1:e2:47:9c:c3:
9a:87:af:80:7d:c7:72:8f:e4:1b:b7:df:db:71:e9:1d:ff:5b:
77:fc:5b:a0:31:c9:cd:e5:27:38:3b:ff:d2:31:f6:1b:49:d2:
f8:b0:a5:cc:dc:ce:a7:b1:4e:60:3d:43:b5:32:22:43:c3:9b:
33:ae:4e:5c:f1:f6:6c:ba:51:ce:2d:f3:47:29:e2:a5:b5:c3:
67:fb:57:05:f1:ec:79:4a:d7:85:36:4e:af:8b:84:75:73:5d:
ee:25:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:53 2025 by rpki-client