Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
File: MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft (raw, json)
Hash identifier: ziiuf20D86nvsnMYFmKJdhPl6dI9Kua4K0zQPQOhscM=
Subject key identifier: 74:49:34:D8:AC:87:41:B0:92:50:5A:6C:D2:A5:D7:85:00:18:8D:25
Authority key identifier: 31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
Certificate issuer: /CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Certificate serial: 0197820DC53EE234B82DB099543F82965B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
Manifest number: 1214
Signing time: Wed 18 Jun 2025 08:00:29 +0000
Manifest this update: Wed 18 Jun 2025 08:00:29 +0000
Manifest next update: Thu 19 Jun 2025 08:00:29 +0000
Files and hashes: 1: 1-VHrNTKPE5li_5D6_S7bqwdp74.roa (hash: D8+eyIa/n1dX91YGJmeaTQ892LZ6O4dV4y7sAsmFXOY=)
2: MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl (hash: +l5XHX1rRhDXh5D3TWPqdJzoriClsAbj6zsOwFbUIXU=)
3: aJNwYmFgr6ViKkuqW5xEof9PXUo.roa (hash: G3zXA4vf4Y9OKHnEoVuD2Dc38Mxm/gXmn8/iv6aZLz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:0d:c5:3e:e2:34:b8:2d:b0:99:54:3f:82:96:5b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f85188d082fd5640b5c3fe1221f60c501edb5
Validity
Not Before: Jun 18 08:00:29 2025 GMT
Not After : Jun 19 08:00:29 2025 GMT
Subject: CN=744934d8ac8741b092505a6cd2a5d78500188d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:df:24:9b:3d:67:a7:a0:b8:37:bb:17:3b:
74:19:d1:40:32:d9:32:bf:73:c7:a7:5a:79:78:fe:
fd:63:f3:2c:e7:2b:95:9f:bd:94:10:28:cc:3c:27:
16:36:16:b3:d7:c0:f4:4d:61:71:7b:48:48:84:0b:
c6:22:ec:8c:ff:ca:f2:d5:da:73:02:11:cb:d7:e2:
b3:d7:76:44:90:c8:b3:08:b2:93:14:62:b7:a8:11:
8e:d7:4b:fb:12:72:41:61:22:db:1f:08:15:87:6d:
b8:2e:f4:1f:1f:77:fc:db:c0:9f:73:01:31:0d:e8:
df:de:c6:4a:df:cf:69:04:11:70:42:81:03:db:9f:
83:8d:d6:04:d8:80:fc:22:d5:42:18:dd:e2:3e:af:
ef:4d:f0:44:3f:11:f7:34:23:aa:ff:bc:c1:0b:22:
77:40:b4:82:22:b3:ec:22:95:63:38:30:87:17:f4:
3f:c3:73:28:70:8b:26:fc:ef:f2:31:1a:c4:ef:d3:
87:29:49:28:20:b9:41:23:d7:87:3b:e7:49:39:8a:
e5:b5:e4:8d:f6:c7:1f:91:aa:60:34:c7:17:56:3c:
af:8e:dc:5e:68:74:f1:29:33:09:bc:4f:f7:4e:33:
86:00:86:84:75:1f:a5:27:8e:29:e2:c2:11:c6:fe:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:49:34:D8:AC:87:41:B0:92:50:5A:6C:D2:A5:D7:85:00:18:8D:25
X509v3 Authority Key Identifier:
keyid:31:1F:85:18:8D:08:2F:D5:64:0B:5C:3F:E1:22:1F:60:C5:01:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR-FGI0IL9VkC1w_4SIfYMUB7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8fc395-b674-4137-bc75-9bbd1eebe33e/1/MR-FGI0IL9VkC1w_4SIfYMUB7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3c:c2:15:e8:d2:3d:e8:86:5f:c8:7b:ca:fa:a8:9f:86:e1:
50:7c:49:a6:b1:bf:7e:60:d4:05:27:43:bf:5c:86:fa:ca:c6:
69:50:30:80:0d:b9:10:7c:d1:70:5a:ab:18:c6:e7:11:b6:39:
b6:62:60:98:43:62:30:f0:97:de:a7:5b:48:28:52:72:84:97:
c0:82:f3:45:d4:13:3d:48:89:fc:12:93:0c:cd:b5:76:91:4a:
a5:02:b6:6e:be:94:32:81:60:ea:c7:2e:bd:88:1b:77:2e:45:
49:0a:d3:b7:a3:eb:82:21:80:68:e4:71:d0:66:0e:33:8e:7d:
10:e9:82:14:b0:17:92:b1:2a:f5:15:75:0d:0e:77:1b:d1:92:
de:20:71:81:4f:3d:7a:63:77:fa:4a:3f:9f:f5:84:16:9f:fb:
b0:52:04:b5:d0:0f:f8:88:a3:3b:56:c3:c7:c8:8a:47:68:9c:
57:14:5f:4c:d1:19:d6:eb:87:cb:a3:b8:05:7a:0a:c2:5a:cf:
ac:88:2a:93:55:3d:d8:82:d6:56:70:a9:23:fc:46:66:86:4f:
e0:b0:4c:58:4b:68:23:e2:cb:71:49:d3:c3:cf:a6:91:ba:95:
34:03:cc:b6:6f:23:17:ce:26:ef:3e:5b:24:ae:b3:38:8e:74:
31:8c:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:49:21 2025 by rpki-client