Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: vMyLSNLdI5I1QXSF/eFdcUHNtwZGPneKCK3yT+sVZfQ=
Subject key identifier: 3D:33:D3:DF:11:5D:BF:47:1A:89:15:E5:20:2D:87:C9:B7:FB:4D:8E
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 019772D1B924DA56D598026D221BC4D6721C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 044C
Signing time: Sun 15 Jun 2025 09:00:36 +0000
Manifest this update: Sun 15 Jun 2025 09:00:36 +0000
Manifest next update: Mon 16 Jun 2025 09:00:36 +0000
Files and hashes: 1: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (hash: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=)
2: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: uvdL7VdBUlYdbR1KXuyfRL0JXKd4mVmjfuEzVX8keTs=)
3: N16JeWvOmOgFnFHegC3uE95HfCM.roa (hash: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:b9:24:da:56:d5:98:02:6d:22:1b:c4:d6:72:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Jun 15 09:00:36 2025 GMT
Not After : Jun 16 09:00:36 2025 GMT
Subject: CN=3d33d3df115dbf471a8915e5202d87c9b7fb4d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:3c:f6:77:ec:c9:36:8e:83:fa:90:97:d6:
af:f4:ce:05:70:0c:2d:57:00:52:1a:bf:1d:6b:ff:
cb:df:89:4d:4e:b9:3a:bc:15:52:a3:7b:4c:b4:3d:
07:53:3f:dc:a9:ad:d0:21:56:de:01:81:26:26:89:
30:01:37:e0:da:84:b6:af:37:0e:f0:3f:f8:88:84:
6e:8f:3d:3b:3e:6a:7f:e9:ed:fe:58:99:59:30:e4:
2f:19:fb:50:04:a3:45:4f:d8:24:78:e6:af:96:3e:
90:46:fb:f4:53:36:3e:30:50:cc:e7:e9:93:2c:91:
f4:51:ec:c6:3b:55:b6:57:1b:a8:02:a2:8d:41:f5:
e3:18:4d:c0:1c:0f:cb:62:e5:6d:5b:d9:e4:2e:8d:
a8:74:0c:97:9e:b3:48:2c:8f:f6:d1:cc:6a:48:f9:
13:7b:1d:ca:f0:ff:cc:40:23:8e:1f:f2:3f:ac:a8:
af:c0:cd:01:16:fc:7d:44:d4:ce:0b:c5:72:ee:4c:
8b:4a:ff:75:1f:6a:82:17:e1:f8:7f:b8:46:ba:6e:
79:84:93:83:56:64:3f:f1:a5:53:b2:90:37:0b:7b:
ad:a0:06:df:3e:ad:a1:5a:6a:3f:ae:7b:33:48:77:
3d:94:67:ac:1f:fc:ca:f8:cb:84:ec:1a:1e:2f:82:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:D3:DF:11:5D:BF:47:1A:89:15:E5:20:2D:87:C9:B7:FB:4D:8E
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ef:8e:90:98:d5:ff:84:d7:f9:c4:46:b3:eb:24:ad:e5:85:
8a:d2:76:62:2e:15:6c:ef:60:e1:46:d5:83:aa:6d:98:d1:c0:
22:b3:d1:f4:ee:5a:89:40:b5:5c:3e:fb:97:13:2d:82:f7:f8:
35:0c:39:b8:5f:57:96:aa:3f:05:a4:2d:2c:5c:1f:ea:9a:c9:
ad:29:00:a6:cb:dd:0b:1b:f2:d5:63:25:0a:a9:26:04:5a:ad:
36:a9:9e:0d:14:3d:17:ad:6a:a7:26:97:44:ed:14:2b:61:94:
63:ec:ca:3d:f2:b3:71:39:7e:15:30:d7:96:29:b5:94:52:a0:
ce:96:94:5a:c1:57:4b:bd:c3:14:8f:73:fd:5a:8e:ce:76:29:
86:8b:07:67:b9:28:f3:13:5d:91:da:95:e9:de:86:d9:29:05:
60:c1:74:e7:a7:2c:03:8b:47:a3:90:74:8a:f8:ba:81:93:f2:
11:61:8e:33:9d:0c:e6:35:8e:87:32:a8:6d:3d:ed:f7:62:08:
59:57:f7:e2:07:64:4a:69:15:8f:bb:44:f4:9e:a4:86:b9:31:
fc:b9:32:6d:9d:0e:11:83:07:4d:d5:0e:53:52:03:07:a8:32:
54:f9:80:8e:8f:16:e4:97:7f:dd:6d:c6:89:e9:99:a6:28:13:
d4:6a:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:03:20 2025 by rpki-client