Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: EryEuIVcuRjba1coWv95k0NvgrpdHY6cGj9Tp3cEvgM=
Subject key identifier: 0F:B2:45:E5:0A:3C:FC:69:08:D8:CB:C5:52:E4:73:0B:4A:ED:A1:9A
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 01977C42DE86131103A0B628BE547B7F3D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 05:00:46 +0000
Manifest this update: Tue 17 Jun 2025 05:00:46 +0000
Manifest next update: Wed 18 Jun 2025 05:00:46 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: zK7rAPhF+ixsZtfRw8NjXxxllr6HYF+3T5Lr8YfSNIk=)
2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:de:86:13:11:03:a0:b6:28:be:54:7b:7f:3d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jun 17 05:00:46 2025 GMT
Not After : Jun 18 05:00:46 2025 GMT
Subject: CN=0fb245e50a3cfc6908d8cbc552e4730b4aeda19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:0a:f3:e6:a9:8c:f5:00:f3:cc:7e:6b:9d:
0a:5e:3e:1a:e4:00:1e:3c:b8:35:54:9b:6a:59:28:
b0:23:67:68:f3:25:50:64:ca:1a:5e:ed:93:cb:29:
86:e5:99:85:a3:21:d4:60:bb:71:ef:e9:aa:94:a7:
68:25:1d:0a:44:77:c1:94:39:52:b9:91:c8:0d:67:
72:0b:d7:0b:4b:f8:07:b4:81:97:62:cd:70:73:f9:
76:cd:24:91:3f:05:a1:a7:97:3e:ca:43:f8:88:b8:
38:a6:4a:9f:ca:25:ee:d8:31:aa:9e:6a:49:d0:fb:
55:bf:d2:7c:cc:14:a3:a0:1a:64:86:6c:3e:6a:63:
9b:e5:3c:27:bd:95:e1:8d:1c:24:6d:93:9d:c4:1d:
06:fe:c2:e1:a9:28:6d:fe:05:fe:09:9e:a6:4a:97:
f9:73:5c:a2:55:9e:3f:80:46:b1:ca:68:fb:4a:58:
0d:fe:8c:26:09:d8:fe:f0:18:85:e3:96:80:36:7c:
3b:7a:0a:3c:50:e1:66:e5:67:6b:df:b3:29:97:49:
2e:f8:29:ca:50:48:79:ed:d0:88:15:75:a7:18:c7:
75:5f:e8:04:45:f9:43:07:3c:db:db:dd:de:62:3f:
1f:81:ec:b1:58:28:f5:7a:af:fa:95:cc:aa:84:fb:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B2:45:E5:0A:3C:FC:69:08:D8:CB:C5:52:E4:73:0B:4A:ED:A1:9A
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:9d:17:66:a0:bd:93:ef:31:0a:3a:bc:08:d7:e6:1a:8c:47:
1b:10:b5:2c:86:f9:b4:34:e4:26:02:2f:07:7b:ff:6e:64:d7:
b5:33:34:b5:09:64:57:17:9f:2a:29:e5:6e:8a:21:ee:a7:e1:
7b:b6:b8:23:97:3f:aa:da:42:02:77:ef:57:f5:c5:47:23:21:
11:09:aa:5b:2b:21:02:4c:9c:a7:6a:68:74:5b:6d:c6:bd:da:
03:0c:a7:34:fc:60:06:a0:39:2a:76:9a:c5:8e:34:c6:54:b3:
f7:d1:a2:0b:65:4d:21:f5:e9:04:f9:f7:16:9e:9b:df:a7:1f:
31:75:56:7a:d5:e9:eb:00:8a:c6:86:67:dc:50:04:4b:6a:7f:
c5:a9:ae:10:4e:45:27:dd:bd:2b:cc:95:4e:3d:11:16:2a:6d:
d6:16:c0:e6:ce:e6:3e:d7:66:37:00:43:c8:b1:ef:2d:37:a2:
1b:79:7c:9e:30:b1:93:50:2f:88:92:65:00:3f:d1:c3:94:e5:
71:8d:c8:91:c3:a2:c6:fd:26:ec:f5:36:8c:bf:55:f3:fd:8b:
eb:41:4d:f8:e2:47:fe:f7:30:6a:76:ef:ce:41:c9:2d:62:53:
ea:ba:f6:a7:73:43:0a:8a:78:1c:1c:90:c0:95:d3:24:ca:f7:
c2:96:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:27:27 2025 by rpki-client