Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: R2AqXrd9ihNIHjB23+uLpcmDJeqGIr5eG2Ln8hqsVPg=
Subject key identifier: EC:1D:8E:7D:4B:82:2E:BE:4F:4D:05:BD:09:4B:8A:8A:76:29:C1:3E
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 019768F2CEF202D6C3220D265B27ED14F666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 11:00:32 +0000
Manifest this update: Fri 13 Jun 2025 11:00:32 +0000
Manifest next update: Sat 14 Jun 2025 11:00:32 +0000
Files and hashes: 1: 2JXcaA80r7d-EIDaMijpbBPasoc.roa (hash: gf95/nywAYIZdNJbfxynwrtY4coqSX3R7aiF8YJONgo=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: +E2eVzU6E4H+wmN7NrIf+YA2qdP43GOQj1/QXMxSpdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ce:f2:02:d6:c3:22:0d:26:5b:27:ed:14:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Jun 13 11:00:32 2025 GMT
Not After : Jun 14 11:00:32 2025 GMT
Subject: CN=ec1d8e7d4b822ebe4f4d05bd094b8a8a7629c13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:33:ac:88:ac:52:db:e2:35:55:1a:a1:46:
51:ae:f3:63:d5:02:b7:d8:87:f9:b6:01:40:12:49:
3d:86:8b:45:6f:7a:ac:4e:63:d4:88:1b:d6:b8:62:
a8:3b:11:fd:c5:14:31:d5:da:eb:f5:6a:b6:d9:f4:
08:05:be:72:06:67:28:de:64:54:68:2f:6d:33:bb:
4e:a5:c0:33:0c:3c:77:8b:fa:58:9c:b8:27:8a:32:
bc:f5:65:2e:1d:cb:3b:0d:b6:20:39:bc:8f:ab:56:
ca:48:99:ed:20:dd:8e:63:dc:a6:44:19:4a:59:b1:
7f:eb:4d:fd:61:b5:15:e9:89:11:07:ee:d4:61:d7:
f8:69:f6:85:d5:09:35:a3:1e:5f:a2:ad:1a:a1:39:
3c:6b:92:d1:ce:7d:b4:34:74:ab:ec:95:7c:29:35:
82:21:8c:90:0f:c7:71:2c:15:3f:ad:d3:10:9b:48:
ad:f0:9d:f8:bb:21:d0:6a:68:ee:6d:e6:fb:97:d5:
48:19:16:f1:e4:0f:eb:52:8e:20:06:4f:96:40:d9:
ce:9e:d2:c6:74:ce:bb:c7:3b:7f:f4:c2:04:83:4b:
b2:dc:05:f2:d9:7c:13:16:f0:99:b7:16:66:2e:27:
20:4a:d2:1b:7a:c6:03:f9:ec:47:48:81:ca:35:99:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:8E:7D:4B:82:2E:BE:4F:4D:05:BD:09:4B:8A:8A:76:29:C1:3E
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:db:2c:d4:7e:3d:ec:a8:0f:51:66:74:8a:04:52:51:af:5c:
07:c6:ee:26:0f:89:0a:af:09:41:99:29:0f:3e:d5:9b:4c:14:
1d:d0:c6:f7:88:a6:49:e3:c1:a9:a4:6d:68:e2:ed:de:a4:54:
2a:fb:24:b7:16:67:fb:e2:38:af:40:9d:56:27:5b:55:3f:22:
a0:8a:a5:09:36:6d:17:7b:e6:63:22:70:bc:73:40:71:23:15:
50:78:22:aa:50:80:a9:de:07:ae:10:64:24:f6:86:fd:8d:6e:
6f:17:93:6d:d7:4a:ab:19:d6:e0:55:07:44:80:cf:26:21:23:
19:c6:58:37:e1:a1:46:9b:e7:11:f8:2b:58:3c:48:69:71:2e:
7f:1e:e4:fc:0b:4d:ad:30:80:13:97:57:9d:98:0d:68:e5:01:
a3:94:be:d0:39:6d:ad:8a:73:fe:23:f4:4b:2b:2d:12:10:71:
93:36:72:55:d2:bb:5a:1e:30:41:53:11:36:ac:49:3e:d8:ef:
a8:76:0a:46:d1:b6:d0:ac:e6:65:53:e1:05:44:81:13:40:13:
22:bd:9a:29:6e:fe:bd:9f:9b:9f:92:dc:5b:12:79:87:a4:02:
02:b6:8b:23:7f:30:90:d8:3f:5a:f4:b7:c5:3c:9e:cd:a9:0f:
e6:b4:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:41 2025 by rpki-client