Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: RdlsJDb/Xo3/CQFts7whTkWR3BwIkdCqkIvtO5x/XmE=
Subject key identifier: FF:81:D2:91:F3:E4:78:FF:12:89:66:25:E7:58:8E:42:EB:CF:A4:5B
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 01977DC3761F6A4D8A4E01D7E8F64DE4D2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0DE7
Signing time: Tue 17 Jun 2025 12:00:50 +0000
Manifest this update: Tue 17 Jun 2025 12:00:50 +0000
Manifest next update: Wed 18 Jun 2025 12:00:50 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: 1lnrGixdczYUiAjp90o/yZwFjYrgiAqbspK5xvK2IQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:76:1f:6a:4d:8a:4e:01:d7:e8:f6:4d:e4:d2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Jun 17 12:00:50 2025 GMT
Not After : Jun 18 12:00:50 2025 GMT
Subject: CN=ff81d291f3e478ff12896625e7588e42ebcfa45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:d0:d6:dc:ef:27:d0:64:e9:a7:79:29:a3:
79:59:53:7d:a0:b4:2a:e2:13:8b:76:b3:18:fb:60:
c4:4b:d6:95:ca:47:cb:b5:87:72:d0:ef:ce:93:4b:
96:d0:53:9c:6d:d1:22:59:4f:55:cb:c7:a7:06:58:
c4:6a:b4:a6:8d:e8:20:40:18:65:d6:30:25:e5:e1:
f1:b3:28:57:e4:c2:e2:1a:81:22:29:de:31:25:ae:
be:86:70:a4:b9:26:d7:18:1d:00:32:44:09:5d:60:
6b:12:da:00:9d:7c:fd:5b:cd:dc:08:0b:17:01:ca:
36:b5:43:05:6f:7c:9e:f4:6f:cd:da:58:06:5c:d6:
a0:c2:0d:cc:19:53:04:05:52:c9:88:21:75:63:67:
52:0e:0e:b2:cf:a5:1d:eb:d7:44:c7:62:7a:7a:b3:
03:bd:20:9d:c5:b5:4e:23:e4:a4:39:bc:e2:f9:d2:
e9:d9:b8:58:f7:1d:50:ea:76:8f:53:c3:6e:41:90:
99:6f:3a:68:2d:bd:db:9e:eb:0b:98:0e:5a:ad:05:
d6:d8:6d:a5:a2:70:7e:a5:bb:5c:09:67:16:10:da:
16:d2:a4:17:03:7d:74:54:a3:98:25:5f:76:5d:64:
62:75:10:be:30:ec:22:b5:c6:6f:3f:d7:98:e2:2d:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:81:D2:91:F3:E4:78:FF:12:89:66:25:E7:58:8E:42:EB:CF:A4:5B
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:29:60:cd:e6:69:a5:75:14:39:07:19:aa:35:5a:90:66:37:
10:8d:36:9f:c9:31:56:55:33:2e:1d:b5:b5:be:92:2b:f7:ef:
eb:58:fa:47:d8:93:d8:ea:a6:09:9a:24:02:6d:dc:ba:ed:86:
bb:d7:4e:41:c2:f8:13:e4:08:8c:7c:c2:4f:89:66:19:ae:00:
20:52:6d:34:99:49:3e:a8:99:11:8e:15:c8:85:43:32:a6:13:
9f:19:d0:9d:94:a6:68:24:bd:f8:3b:46:f6:04:f2:94:e6:32:
73:e2:f4:14:6b:5f:68:66:76:d9:96:a7:dc:e3:88:6e:b0:cf:
9a:5b:60:8b:7e:d3:72:73:03:09:4a:ee:3d:c0:dd:1a:3f:6a:
a0:27:e2:8e:63:ab:88:9c:d8:25:87:18:47:d5:a0:02:92:ae:
f2:08:76:3c:0e:08:ca:4d:5c:29:0e:34:c0:f1:b7:0c:4e:24:
5f:34:0b:d0:8e:83:f1:6d:be:6b:28:14:12:f8:5f:04:c0:94:
4c:39:30:0b:b3:d5:d6:bf:c7:bd:6d:b1:f8:f4:50:8f:27:b2:
02:50:a8:36:ac:d7:bf:5d:14:b1:fb:60:5b:fd:c4:e9:4c:04:
0b:27:70:bf:ca:0c:cc:d7:3a:d0:55:6e:94:15:98:cd:d0:17:
1a:6f:f0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:32:06 2025 by rpki-client