Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: uQ2CZ03uJNDlH9C4/cMfm8RA9rWapOO56/UA8/CPnX8=
Subject key identifier: 37:F5:02:6F:9E:04:86:7B:22:E2:6B:ED:D0:AF:33:D0:0A:EB:C3:FE
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019768BC0CC8981E1B17DC6C13B1ED2C865B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0BBA
Signing time: Fri 13 Jun 2025 10:00:43 +0000
Manifest this update: Fri 13 Jun 2025 10:00:43 +0000
Manifest next update: Sat 14 Jun 2025 10:00:43 +0000
Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: ZoYUVDFCwxQEbuR+EGpk9vDWXMYMJWNJLkbUc+KKrv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:0c:c8:98:1e:1b:17:dc:6c:13:b1:ed:2c:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Jun 13 10:00:43 2025 GMT
Not After : Jun 14 10:00:43 2025 GMT
Subject: CN=37f5026f9e04867b22e26bedd0af33d00aebc3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:15:b8:85:c2:09:72:67:fa:db:64:76:8d:
a6:fc:67:90:96:1e:e8:d8:0f:7b:4d:01:11:59:c4:
80:a3:15:83:47:29:cd:13:f7:8e:16:a8:31:de:e3:
ed:55:60:1b:c5:fd:0b:4c:95:6a:63:ce:b0:03:7d:
25:d5:13:5b:fe:59:02:b5:7d:12:9d:c6:3d:1a:a7:
ab:a3:e7:67:68:57:b4:0d:1a:e9:4c:68:25:e6:f8:
bc:75:4c:6c:cb:fe:99:83:08:53:c9:df:34:4e:ae:
4a:23:45:13:ea:f3:b8:06:64:af:a2:44:b1:e2:fb:
84:6b:20:7a:5b:5e:52:a8:01:e5:cd:4b:e2:08:b7:
d3:72:06:b3:a6:17:91:9d:53:39:db:2d:5d:b1:70:
70:cb:05:84:b8:48:03:6d:f1:24:d5:96:81:2f:c2:
a3:cc:bc:63:c8:4f:17:af:b0:6e:85:5c:dc:8b:87:
74:18:88:a3:a7:ab:df:9f:1a:c1:e4:2c:dd:2c:d7:
57:4c:ee:3e:1c:db:a0:29:51:dc:86:e5:6f:8d:e7:
3f:d2:05:2d:96:72:a2:87:73:95:87:7f:3b:66:b5:
dc:55:67:e0:1a:42:3c:4a:99:d9:88:bb:83:b4:f5:
be:8e:bf:70:31:ab:81:86:35:88:b3:32:df:20:d8:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:02:6F:9E:04:86:7B:22:E2:6B:ED:D0:AF:33:D0:0A:EB:C3:FE
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6a:7e:ba:f5:f9:7e:19:f8:a8:f4:5a:aa:e9:44:7d:e5:a5:
cd:d1:b8:7c:84:4a:d4:f2:c0:f0:bd:98:91:ce:69:f1:a0:16:
10:d9:eb:84:e7:66:43:41:be:16:16:ea:3a:2d:6e:dd:6b:7b:
a0:71:ba:c0:3c:ac:0d:36:d5:26:3b:82:a9:ea:79:a7:96:e6:
ae:b8:e1:5e:e7:25:0c:23:05:44:2e:05:42:f8:94:f1:64:7f:
40:e2:6a:ba:d0:f6:9e:29:76:30:af:18:fd:dd:49:63:e3:92:
b6:b1:f6:c1:3b:8f:32:a6:8c:f9:7c:4b:3f:74:24:9b:01:bb:
49:95:0c:18:26:49:e6:1c:7d:7f:7e:1b:76:4d:d9:e6:c3:0d:
cf:06:a3:ad:85:9c:21:5f:14:2c:cb:96:28:d7:fb:ed:01:c1:
2a:e1:6c:1d:1c:0a:b2:ca:35:7a:e5:3d:49:02:fa:39:8b:ff:
d1:e9:24:10:7c:ab:48:fe:b3:ec:9c:dc:73:84:a0:8c:49:6e:
b3:af:c3:df:ab:ef:38:31:bd:1e:61:47:b2:a4:49:e6:8d:e4:
df:3c:44:6b:b1:53:63:30:e5:8d:4d:f9:56:1b:2c:45:59:b6:
69:59:b1:9f:18:66:ce:a5:6d:0a:37:ff:97:e5:1a:29:76:cc:
5f:4a:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:24 2025 by rpki-client