Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: 7QmC9tMVzisyQ/VvDfRHv8PZ/3rg8zJV9Kb66wTpVJc=
Subject key identifier: EA:78:44:64:B1:42:31:16:75:30:82:D3:0A:76:55:28:41:32:DE:72
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 01976E8752BF0B3A0011B0D723BDF4702B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 13:00:51 +0000
Manifest this update: Sat 14 Jun 2025 13:00:51 +0000
Manifest next update: Sun 15 Jun 2025 13:00:51 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: ZmhbFpUsUJlaLi4P4GoslLZcH9XlDPgoXF0OjxW82M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:52:bf:0b:3a:00:11:b0:d7:23:bd:f4:70:2b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jun 14 13:00:51 2025 GMT
Not After : Jun 15 13:00:51 2025 GMT
Subject: CN=ea784464b1423116753082d30a7655284132de72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:44:87:d0:05:c2:87:76:fd:75:0e:0d:7b:
a7:34:8f:55:7b:86:9c:44:9a:29:8b:55:eb:32:37:
35:b4:2e:81:14:96:e7:ca:ab:8c:6c:c0:3e:f8:63:
d7:9b:f5:21:3a:1d:3a:03:2d:31:4a:7d:cf:30:0f:
d7:cc:31:1e:01:cb:71:02:ea:d6:aa:47:0a:f1:92:
20:68:be:4d:44:28:95:6c:1b:d1:6f:6c:17:0b:33:
f5:85:f6:da:1f:d4:6d:b6:80:1a:d5:e3:44:ef:2d:
3f:a7:fa:ec:e2:37:ac:ee:c3:f4:df:4d:71:00:67:
24:24:87:70:9d:3d:79:a3:22:20:c2:32:51:bd:32:
41:34:33:89:74:b7:5e:d9:5d:fc:18:cb:65:01:53:
58:89:cc:2c:7e:19:44:73:bf:8c:72:9d:1b:2a:98:
34:41:f4:0e:08:5f:03:23:a8:4d:47:7c:27:38:8d:
eb:a4:31:ba:a0:9b:1e:eb:ff:ec:bf:6b:53:93:50:
5b:32:d6:00:57:b8:bc:3b:08:93:c8:ad:1c:c0:0d:
06:2d:91:ff:d9:48:43:5f:22:63:57:a5:5c:d9:0d:
fb:1b:16:2e:24:c7:dd:2b:27:ab:e8:35:31:08:41:
68:94:fd:b4:ca:1a:1c:a6:a3:23:f5:82:5f:8b:bb:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:44:64:B1:42:31:16:75:30:82:D3:0A:76:55:28:41:32:DE:72
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a7:fd:f7:e2:e3:29:ad:f8:70:3a:1a:82:a2:66:3c:a6:a6:
d0:62:00:ff:75:d7:f3:21:ba:45:c6:28:c7:46:4a:1d:9d:71:
8b:bc:79:f8:65:8b:b6:4a:73:d6:c3:e1:1a:4d:f8:48:eb:e7:
57:14:a5:d0:d8:b1:71:11:ae:06:3b:3e:18:04:62:ac:7f:05:
b6:ea:e1:16:e1:bb:be:2a:a4:cf:f3:d6:5e:75:58:00:c9:da:
93:35:01:0f:ba:5b:6d:fe:12:9b:7c:5b:d7:53:5a:73:14:06:
c4:be:c2:1a:17:f4:7f:5a:0c:26:02:cb:ba:46:c2:99:81:61:
73:78:ac:f0:3f:ca:60:8b:1b:d0:8f:75:86:dd:73:25:b3:c0:
16:be:be:e7:21:32:f7:2a:e3:5f:30:1c:65:bb:be:a8:f0:17:
8f:56:cb:66:73:be:de:26:58:45:78:6e:84:9d:ee:44:9c:d8:
67:15:7c:d9:30:4f:b9:8a:e5:35:a7:b2:58:6d:0e:f7:31:c7:
78:5d:6c:71:d7:58:03:27:29:b5:1d:20:43:2e:b7:1f:c9:da:
3f:3c:ec:aa:b1:3a:d9:27:cc:15:95:44:fb:76:e9:eb:0b:cf:
2c:57:32:ac:4b:f8:4d:46:f2:31:8e:09:95:c8:82:0a:a7:d0:
5f:52:63:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:52:39 2025 by rpki-client