Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: 7gEBCx7lxBvmW6tWMgIG44coXo5MtgOLqv9H0JLO3Xg=
Subject key identifier: 37:70:FD:BB:56:40:2B:35:F5:CF:00:96:E1:DB:88:56:14:8C:0E:2C
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 019769CEE5CE831F5E22BBC41945BF6BD9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 159C
Signing time: Fri 13 Jun 2025 15:00:56 +0000
Manifest this update: Fri 13 Jun 2025 15:00:56 +0000
Manifest next update: Sat 14 Jun 2025 15:00:56 +0000
Files and hashes: 1: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
2: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: afKmyb/1BLgpWcjwcXa6lAs8XHM1Yp4Qbx0+AvCr9dw=)
3: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
4: mgPiyECi3IMewfduoQECoQO6hW8.roa (hash: FFtqOGC8SNkaXVCBxgLc9ho6RyB8i6aMWoVYlwMrees=)
5: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:e5:ce:83:1f:5e:22:bb:c4:19:45:bf:6b:d9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Jun 13 15:00:56 2025 GMT
Not After : Jun 14 15:00:56 2025 GMT
Subject: CN=3770fdbb56402b35f5cf0096e1db8856148c0e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:95:26:43:26:ce:4c:90:d9:5c:28:6a:d2:
8b:f4:db:0f:20:21:2a:ab:93:50:d9:19:99:ae:a6:
4c:d6:6b:02:87:a2:66:60:b3:36:4c:dc:aa:ab:dc:
66:8c:52:96:ba:01:ee:cc:71:a3:26:a9:92:fb:6c:
4b:06:a3:0f:5b:52:a3:b0:c6:f7:c5:b8:a5:7f:69:
50:96:a3:f7:8d:ee:ad:55:30:cb:55:4f:90:30:fa:
2a:a6:da:77:ef:c8:99:8e:2d:b3:48:0b:e1:42:d7:
45:9a:39:3d:b4:38:e7:d6:d2:ff:5e:7f:55:75:e3:
f9:10:ca:52:f3:da:f7:ef:73:14:ad:e0:8f:9f:b2:
c5:3e:f9:0f:12:eb:1c:2c:6f:6e:3c:b1:fc:eb:61:
c6:1d:51:1b:95:54:36:5a:57:90:96:c9:2e:a8:59:
d4:f2:6a:23:a2:d1:89:25:bb:6f:c0:26:d4:b5:c7:
6c:4d:07:16:6d:f4:99:c7:e1:2e:17:ff:f9:f9:de:
eb:c6:be:af:15:fb:92:2b:81:00:ef:f3:bb:87:b8:
90:5f:b1:33:91:28:22:4c:fb:59:a1:5c:1e:1b:04:
3b:43:07:6d:58:52:80:94:94:fb:b1:f8:81:d1:85:
e8:7b:32:00:41:32:37:f7:45:7b:88:ce:4b:9c:e0:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:70:FD:BB:56:40:2B:35:F5:CF:00:96:E1:DB:88:56:14:8C:0E:2C
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a0:e4:70:ce:3d:b4:09:1c:00:fb:8e:eb:0c:ed:59:99:b4:
59:f6:bd:55:52:6c:da:30:46:ef:27:3b:e9:18:2c:9d:8b:7b:
2a:cf:d9:c6:01:6f:5f:af:9f:8d:08:77:50:b5:e0:ce:7f:c6:
54:f6:9f:ad:b9:8d:21:52:38:59:94:2e:75:27:98:05:65:ae:
36:ae:51:c4:36:07:c3:41:86:35:78:31:6f:0e:db:40:3a:30:
4a:8d:ac:18:37:e4:8b:5f:d7:b0:50:09:be:4c:93:99:a4:4d:
89:9e:f2:4a:04:c4:a5:0f:03:2b:dc:8e:7d:c0:68:d0:8c:31:
29:57:de:8f:5d:08:7b:f2:1c:4b:22:31:dc:f1:4d:76:ae:81:
e0:fe:1a:5b:e6:a7:68:de:8c:a1:47:20:dc:da:23:b5:0b:42:
22:71:c9:70:2c:67:8e:e4:a2:9e:c0:de:bd:ee:c0:31:d5:45:
3e:4b:43:9c:ba:63:01:09:c8:e4:c5:9b:ec:44:67:62:09:09:
3d:4a:85:2b:5d:bb:f1:9d:f5:88:67:0b:5e:91:2e:26:d4:3b:
2d:8f:08:52:e0:7d:26:d9:85:63:e0:f5:61:a4:2e:3f:6c:3d:
29:9c:dd:c9:2f:5a:57:49:80:6c:fe:10:e1:63:ce:10:41:f3:
28:9b:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:59 2025 by rpki-client