Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier: J50ihcymDd1md1P5qBCuabJ2Ls5+BdBHxMTKc5jHOW4=
Subject key identifier: 94:7F:44:C4:9D:D6:96:FB:1C:25:0B:3B:7F:98:D2:3C:F9:7F:1B:37
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial: 01976929D115C3531CC42E1203E6F99E40A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number: 03D6
Signing time: Fri 13 Jun 2025 12:00:37 +0000
Manifest this update: Fri 13 Jun 2025 12:00:37 +0000
Manifest next update: Sat 14 Jun 2025 12:00:37 +0000
Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=)
2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: djPRwYdzptlhOu9hfJ1THbmpzbj5SoLPS4vyZmD5HgE=)
3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:d1:15:c3:53:1c:c4:2e:12:03:e6:f9:9e:40:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Validity
Not Before: Jun 13 12:00:37 2025 GMT
Not After : Jun 14 12:00:37 2025 GMT
Subject: CN=947f44c49dd696fb1c250b3b7f98d23cf97f1b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:b8:fc:8a:94:7f:40:31:9b:18:dc:72:e5:
76:fe:14:fe:68:ee:89:db:d5:10:06:c9:11:8b:39:
c5:90:1a:32:e2:37:9d:98:06:3e:10:e8:e5:ed:4c:
e6:fb:9a:bc:fc:f7:5b:45:26:6a:94:dd:9e:9a:0e:
be:b1:76:26:81:cd:14:d1:53:6a:82:c7:eb:55:14:
e0:e3:86:3b:9e:97:65:12:31:0e:d8:59:54:d3:8e:
dc:62:3f:14:7d:6e:01:f1:4b:d1:2c:9a:88:18:c5:
cb:0f:7d:bf:60:63:ca:50:c5:6b:ed:d9:9f:9c:68:
99:7f:8a:b1:a6:6d:93:0d:dc:7a:18:53:d6:a4:cb:
5f:e1:b2:0a:25:b2:c3:4c:6d:09:0d:0f:99:8a:a7:
64:b6:00:6b:8d:d1:60:93:f3:42:8d:45:1c:2b:52:
aa:cd:66:46:c1:7d:a1:51:06:0d:bd:48:c0:c5:1a:
c1:74:a5:01:98:12:40:21:fd:00:39:23:1e:a3:46:
c8:c6:2b:a2:89:42:e2:fd:12:ac:5f:c6:bc:c9:45:
ee:54:f2:af:9a:43:a3:ee:d7:ca:53:1e:df:56:21:
7e:ef:06:60:74:71:77:2e:cf:57:32:9f:33:54:7c:
1c:b2:14:6d:c7:a8:d0:76:5d:53:28:40:8c:e9:f8:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7F:44:C4:9D:D6:96:FB:1C:25:0B:3B:7F:98:D2:3C:F9:7F:1B:37
X509v3 Authority Key Identifier:
keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:95:43:33:fb:51:f6:64:4f:be:4e:73:9d:89:1a:58:c5:d0:
03:c9:1a:06:40:97:db:57:96:fe:64:aa:a7:e2:b7:bb:10:e8:
f8:2e:3d:ef:06:c7:11:c2:a3:e7:cb:02:04:32:29:3d:e5:70:
32:10:37:ab:8a:52:50:2f:8a:bc:0e:1e:85:40:ad:c2:8b:a7:
82:bf:a3:e7:77:81:0a:a9:77:8c:67:d2:3a:8b:82:02:dd:52:
cf:42:8b:2e:0f:59:28:9b:7c:b9:af:46:77:bf:96:03:8e:40:
77:c4:a3:3c:21:7f:eb:18:62:15:0a:1a:5b:6b:b8:43:0a:cb:
b4:61:16:d4:31:5c:a6:56:f2:ba:b8:bb:7f:e4:be:6a:62:e7:
29:e1:e3:92:49:3a:57:61:7a:8a:b4:07:e8:27:59:01:58:21:
08:b7:c2:9c:63:3a:67:56:eb:4b:eb:a6:0a:ea:2d:be:59:1e:
b8:3d:42:ee:f3:48:8c:b3:82:31:90:33:9d:36:40:05:ea:cd:
d6:fb:7d:8d:34:be:26:8e:d4:a0:33:d2:e2:1a:0b:cb:a0:34:
de:b2:84:e8:37:45:28:24:94:8c:c0:c6:7a:d9:ce:a2:bb:56:
58:75:ba:37:50:7a:d4:d1:14:9a:21:1a:84:6e:96:39:a8:e7:
49:42:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:09 2025 by rpki-client