Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: KPmODvOXVPO+lzwreoBS4+7909TTh0hSzddy0zUcZ4M=
Subject key identifier: 2C:67:03:AB:82:07:E9:C9:36:9C:14:B3:7B:F3:7D:E7:D4:AD:36:E4
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 01976885347E8F9BF8371EC469D9B1507E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 0537
Signing time: Fri 13 Jun 2025 09:00:49 +0000
Manifest this update: Fri 13 Jun 2025 09:00:49 +0000
Manifest next update: Sat 14 Jun 2025 09:00:49 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: XYbC+mUI5KpVOGJEsvgQP1mfSlLY2iH6pGvNTfnhCkI=)
2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:34:7e:8f:9b:f8:37:1e:c4:69:d9:b1:50:7e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Jun 13 09:00:49 2025 GMT
Not After : Jun 14 09:00:49 2025 GMT
Subject: CN=2c6703ab8207e9c9369c14b37bf37de7d4ad36e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:e0:19:61:e5:52:87:45:b0:11:67:20:b6:
28:87:7b:ba:c9:eb:11:43:2e:14:4b:cf:f5:b3:82:
90:86:80:28:e4:36:8a:c4:8e:61:0f:de:27:1a:11:
0b:33:c2:b2:c0:82:55:cb:f1:9c:b0:a8:87:7a:15:
0e:67:7a:27:03:ed:da:12:a7:ff:19:f7:d0:42:65:
0d:42:27:73:47:7b:49:a5:4c:65:64:36:22:24:5c:
43:8d:fb:16:91:f3:e2:49:be:af:f0:98:ab:e4:44:
29:ab:a5:df:17:05:f4:6e:2d:82:da:12:81:51:41:
48:db:bf:5f:3c:76:f3:d7:3a:80:f2:dd:30:4a:c2:
de:0f:4c:88:d5:9f:02:22:ba:c7:cd:ea:1c:f2:ac:
6e:15:c0:45:f8:02:23:4b:59:2a:2a:5c:3d:7a:d3:
e2:d6:17:60:c4:b6:91:ef:44:04:7a:f6:98:db:08:
bb:36:4b:92:b5:b4:85:39:a2:1e:c0:a9:01:e9:12:
3d:60:2a:40:14:8c:a0:6a:4a:67:f3:72:72:76:b7:
c9:d8:f1:20:d5:0c:18:ef:e3:cc:d6:bc:4b:a0:e4:
fb:5e:25:96:77:74:51:7d:46:14:2e:11:d3:26:83:
0e:2b:42:af:a1:88:66:38:84:a5:5d:f5:bf:08:5a:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:03:AB:82:07:E9:C9:36:9C:14:B3:7B:F3:7D:E7:D4:AD:36:E4
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b7:a1:ee:c3:24:74:61:6c:57:4a:92:52:f7:f1:25:db:07:
07:67:7c:df:28:dc:38:d6:ae:88:fb:b2:78:50:01:02:cd:79:
a7:da:0e:e8:47:a4:ed:16:a9:d1:2f:d8:ef:46:31:a7:c5:ed:
8a:ec:13:56:f5:2e:59:ee:28:77:18:2f:e6:5a:c7:51:82:4d:
58:87:77:21:76:19:cd:8c:85:07:4e:f1:76:d3:53:3e:b3:e1:
88:33:ec:ee:35:48:9a:2d:16:8b:87:60:82:29:fc:fe:18:54:
e9:f9:87:3a:1f:73:8e:62:f0:68:da:44:e2:49:1a:58:e5:ae:
86:c7:91:5c:2d:17:4e:14:16:84:47:ee:0c:fc:65:fe:38:23:
e5:e2:d4:7e:22:af:6c:ad:4f:d9:30:97:7d:46:d2:76:b3:85:
8e:c8:18:d7:dc:20:22:8d:31:0d:b4:c3:83:d7:3d:5d:b6:dc:
a3:f0:c1:5c:5a:39:80:5a:04:a2:40:de:59:ba:50:7b:03:a3:
94:fa:64:36:22:c4:6f:10:66:86:59:07:e6:7e:40:ef:35:e3:
84:26:19:30:e4:66:98:76:d7:86:fb:df:3a:52:3f:99:a5:e1:
17:8b:c9:15:40:b1:48:ba:b7:44:94:5a:2a:e5:48:0f:35:f7:
4e:79:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:39 2025 by rpki-client