Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: FXAa/71T8XFjrM6MT8Od0k7F4nx2fVwfwqAi04gFDHo=
Subject key identifier: AB:AA:94:AF:99:E8:DE:F7:39:67:26:F5:6C:00:26:E6:3A:1F:D1:C4
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 01976C61C923A99EC803B336A9479B57CEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 12BE
Signing time: Sat 14 Jun 2025 03:00:37 +0000
Manifest this update: Sat 14 Jun 2025 03:00:37 +0000
Manifest next update: Sun 15 Jun 2025 03:00:37 +0000
Files and hashes: 1: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: vEg7BP/4ZKRMu8V8qGUsH9w/Q17527XzhmObHR0Mlko=)
2: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=)
3: zmcBckUxuKaBoSS2-IE8qAAieFk.roa (hash: zuTF25+EetsvafVF215FiE6HAdQFZXfOVRgob3VxMdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:c9:23:a9:9e:c8:03:b3:36:a9:47:9b:57:ce:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Jun 14 03:00:37 2025 GMT
Not After : Jun 15 03:00:37 2025 GMT
Subject: CN=abaa94af99e8def7396726f56c0026e63a1fd1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:d2:8a:8a:4f:4d:40:21:e5:3a:d7:86:49:
a1:4c:17:31:ff:ab:e5:1f:82:ea:0a:31:8e:d0:19:
80:38:9f:08:ce:81:ca:ec:17:f4:8d:15:61:67:f3:
19:2e:32:7e:14:57:ca:44:8f:13:a8:be:0f:21:98:
22:cc:40:5f:63:63:d5:1d:45:a6:53:d1:69:86:c1:
c6:f1:00:fb:dd:b0:22:2e:77:37:43:76:d4:a2:8b:
df:41:9d:ac:61:73:ae:26:07:9b:a1:e0:ab:d4:da:
a2:44:64:ef:50:bb:24:aa:49:57:4f:0a:65:39:f0:
56:71:68:ab:61:25:22:7c:60:9c:1a:3f:d8:7d:d9:
47:3d:34:6e:c2:28:cf:cc:d4:ec:4b:57:5e:cc:b4:
51:20:e1:37:d5:16:df:58:59:14:db:6b:a9:91:30:
80:fe:e5:4c:2d:56:23:c5:ab:f8:06:c4:5c:ae:fd:
70:86:3a:28:ee:38:7e:02:3f:95:12:24:33:ae:2d:
be:7c:f5:b6:ca:4b:2a:45:ec:f7:f1:29:ec:53:6c:
5e:c0:19:74:51:c5:c7:e4:ce:b6:81:32:6b:44:47:
94:87:60:70:cc:54:be:70:41:91:1f:21:b6:8c:3c:
5d:21:b7:de:52:0d:a3:0a:84:51:fe:97:08:f0:6c:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AA:94:AF:99:E8:DE:F7:39:67:26:F5:6C:00:26:E6:3A:1F:D1:C4
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:25:d5:ad:d0:e1:06:4d:c7:ab:04:54:a4:d8:2a:65:02:6c:
a3:41:c2:57:52:81:cc:bb:b2:39:3d:22:2a:d2:4e:37:87:48:
15:fa:40:26:a7:51:63:24:8b:cc:f7:af:92:7a:e4:8e:3a:3d:
13:42:79:3e:05:42:e0:83:df:b4:fd:14:08:9d:f1:c1:e1:14:
e1:31:bd:e8:49:41:40:fa:b8:1c:7f:86:dc:31:59:3f:82:98:
d5:72:13:55:7f:26:bd:60:4d:2f:8a:00:5a:a0:65:84:d8:aa:
5e:31:f0:97:72:ae:68:b0:37:03:08:9d:fa:29:58:2e:3f:01:
43:02:ea:a4:93:fe:4f:be:c7:eb:48:3d:bd:a7:d8:ab:87:9f:
a8:bf:b1:d6:83:93:d8:7b:e4:d8:9c:9e:bd:32:97:cc:4c:e5:
44:38:8d:48:84:57:22:77:6a:81:c3:98:cb:10:fc:3d:d0:59:
29:1e:af:42:67:04:97:c4:76:dc:48:78:20:dd:9f:c9:1e:cf:
3c:e7:29:7d:5e:31:70:4f:6b:00:ce:0c:a6:75:4b:1d:2d:ca:
2c:b6:97:26:a3:98:fd:2e:5a:38:1f:24:d9:b8:da:2b:bc:d0:
7d:29:64:16:6a:f2:32:6c:3c:63:eb:97:6c:76:bf:26:9c:23:
93:8c:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:53:49 2025 by rpki-client