Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: R7UrKWw8NJAoRynckzxjV0n28nHLLMJ9dAhZBAbUySI=
Subject key identifier: F4:16:F1:0E:9D:07:41:C4:EA:74:99:D3:CC:75:AB:F1:D4:3F:08:B0
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 019771889781FD22A3155E6F8F2F0CA9A22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 12CC
Signing time: Sun 15 Jun 2025 03:01:06 +0000
Manifest this update: Sun 15 Jun 2025 03:01:06 +0000
Manifest next update: Mon 16 Jun 2025 03:01:06 +0000
Files and hashes: 1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: Gc3i2GgYg+xmDGiLUt9aPlZJJWV5TiyX96Y3IpaKt/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:97:81:fd:22:a3:15:5e:6f:8f:2f:0c:a9:a2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Jun 15 03:01:06 2025 GMT
Not After : Jun 16 03:01:06 2025 GMT
Subject: CN=f416f10e9d0741c4ea7499d3cc75abf1d43f08b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:7c:8d:43:d3:e7:36:1b:a4:8d:65:c7:e6:
f1:15:a0:10:ab:0c:41:aa:ae:77:90:0d:b2:d2:22:
fb:f2:b2:fb:4d:96:91:38:80:49:c0:46:aa:fd:f5:
62:da:6a:5f:57:46:d2:4c:40:45:72:c9:b6:75:40:
88:fd:38:23:53:e3:8f:7f:52:78:54:78:6e:93:f1:
65:9b:9a:14:da:df:1a:eb:4f:b2:4f:8f:9e:83:5b:
08:dc:9c:0e:02:ca:9a:79:ad:d9:11:ad:78:3c:bd:
0b:8b:53:9b:c9:22:68:18:62:b2:47:41:9a:a3:35:
14:a5:46:3d:f2:89:b3:68:14:9d:20:3d:bd:3c:36:
6d:de:2d:75:33:6e:d2:05:da:42:84:db:36:66:f9:
fd:bb:5a:ef:68:dc:87:ab:bb:83:76:c5:24:7d:4d:
24:cd:ea:1e:14:fb:34:12:11:27:b3:78:d3:54:ab:
f7:fc:1d:f3:fb:19:d6:c0:ae:fb:e2:b9:d8:43:99:
a8:00:c4:91:e1:6c:d1:4b:2c:60:af:e0:db:c8:af:
17:96:8a:49:48:30:83:39:22:76:6d:ae:9b:23:f2:
2c:da:a5:02:4e:c8:4f:54:5c:44:cd:05:17:bb:b0:
b1:37:d6:d8:70:da:2b:62:39:a3:bf:43:c1:cb:67:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:16:F1:0E:9D:07:41:C4:EA:74:99:D3:CC:75:AB:F1:D4:3F:08:B0
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3d:c3:c8:f3:cb:16:11:36:e1:70:a1:e1:b5:ea:ad:47:0a:
0d:d4:8a:04:b1:71:37:6d:77:d4:9a:f0:7f:72:15:6c:fb:f4:
8f:27:37:8a:8c:e9:c2:c9:c8:65:66:e2:7f:b2:33:90:42:5a:
0b:34:16:1b:a1:08:56:e9:f1:f8:3c:26:72:4c:f7:05:29:69:
80:06:e6:96:9c:07:1f:1d:19:96:b9:b3:9a:02:0a:c8:5e:e9:
31:6e:8c:b0:31:db:ef:e2:92:49:bb:3a:a5:54:b5:6b:41:5a:
6d:9a:82:43:78:34:e2:ff:4a:a3:1d:ab:19:24:28:6b:72:d2:
1e:ab:ca:0e:08:96:42:f0:70:58:1a:ae:08:13:dd:a6:9d:8c:
78:cd:15:17:4d:ff:84:20:1e:94:3f:38:57:7b:78:a5:4f:85:
f9:d9:a8:1f:13:2e:88:0b:f5:00:d9:87:fc:d0:e8:8c:4a:67:
69:f6:39:6b:cd:cf:6c:67:1b:7d:5b:50:d3:b9:55:7c:49:b3:
6f:30:14:10:50:1a:ee:9c:25:95:d5:04:37:47:3b:cc:1c:c3:
d8:cb:5a:08:a3:89:e4:52:3b:af:c7:ef:1b:ab:e1:45:87:4a:
da:26:ca:4c:fa:d8:ae:45:e8:21:02:a7:f6:4b:d6:e1:f9:d7:
4d:7b:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:03:21 2025 by rpki-client