Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
File: MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json)
Hash identifier: IFUuMeC1Gt36F0Aqd1/IyBAlFLo7jO7C1lgzbV67IYo=
Subject key identifier: 70:6D:E1:94:A1:87:FD:BF:78:FB:DE:1F:BE:78:89:C7:F9:C5:8E:A7
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial: 01976BBD5FFE43A8C76AC9D43F2F1D04DDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
Manifest number: 10A3
Signing time: Sat 14 Jun 2025 00:01:02 +0000
Manifest this update: Sat 14 Jun 2025 00:01:02 +0000
Manifest next update: Sun 15 Jun 2025 00:01:02 +0000
Files and hashes: 1: AV_h3jqDqBv8GTowG5NZT83IRVM.roa (hash: 7I92tp7yKWv9nRYHQ0pF0g4dedaK+rFfmKLNQHVUe28=)
2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: m/+gDJTg3jzPPM6I/Ask9+O5d8F80XifJmSgdKH7Ego=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:5f:fe:43:a8:c7:6a:c9:d4:3f:2f:1d:04:dd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
Validity
Not Before: Jun 14 00:01:02 2025 GMT
Not After : Jun 15 00:01:02 2025 GMT
Subject: CN=706de194a187fdbf78fbde1fbe7889c7f9c58ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4b:a5:95:8a:04:ba:33:7b:02:4f:39:ae:a3:
47:3a:c2:df:a6:8f:60:a6:b9:27:39:13:f8:77:a8:
2e:a9:39:c7:aa:c9:ea:1c:2d:be:48:d3:62:35:9f:
85:98:74:8a:5f:c8:85:1c:9b:18:8a:95:b6:51:dd:
c5:cf:11:b5:dd:44:a7:42:9f:7b:5b:60:fa:69:c1:
ae:7b:d8:9f:6f:2b:3a:b7:dc:78:1b:f0:5e:91:c4:
1d:e5:57:48:64:13:d1:4b:e8:18:43:ff:27:18:9f:
1f:04:fb:75:3d:8e:77:43:f7:da:29:c8:69:b6:1f:
43:3f:24:21:8e:d1:04:81:e9:ea:b7:51:c9:50:43:
7e:0e:35:1e:b9:e3:39:7f:dd:58:e8:b9:eb:0b:f4:
b9:f5:c6:9b:d8:ea:38:02:92:ad:8f:8b:87:27:16:
09:8d:29:38:17:0b:37:cf:dd:22:92:6a:e7:9e:43:
94:77:64:fb:b2:e9:62:2e:69:32:b7:0f:48:1a:fb:
88:85:41:63:df:08:66:28:e7:ba:cf:ff:51:dd:d6:
f7:b3:3e:09:c1:a2:88:8e:a3:31:e5:46:f4:d5:34:
55:af:7f:4a:9f:7b:c5:02:37:87:a6:4a:69:8b:b7:
05:de:c4:5e:2d:00:2c:d6:e4:a0:11:57:85:87:e3:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:E1:94:A1:87:FD:BF:78:FB:DE:1F:BE:78:89:C7:F9:C5:8E:A7
X509v3 Authority Key Identifier:
keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:88:5e:37:ff:fa:66:fa:87:45:94:bc:e3:ca:eb:d5:29:81:
5f:a3:bb:9b:ee:51:92:f0:44:00:03:91:54:3f:10:5b:2f:7c:
81:e0:ed:65:78:0b:34:89:cf:09:33:2b:84:67:84:fc:f5:8c:
b7:09:78:d0:c7:f3:2c:93:2a:95:0e:97:bb:62:a6:0d:b6:b1:
f3:b9:18:44:02:c8:89:d5:b8:d5:b8:3e:81:6d:53:96:96:bf:
f7:dd:c1:5a:bc:c8:b1:e2:15:38:ba:2c:e1:5f:19:5d:7d:b6:
ad:45:81:4d:f6:8c:62:fe:93:36:7c:35:1a:74:75:27:53:3f:
05:e2:6d:39:42:cd:b9:9e:36:81:1e:65:78:08:a2:9f:f3:45:
2f:99:ee:42:4e:60:f3:84:f8:c8:3d:b3:e4:3c:83:c5:41:70:
8a:e0:7d:1c:bf:f5:73:5d:ce:02:d6:b7:96:65:bb:07:3f:a5:
f2:38:74:63:88:bf:1e:4f:a2:94:a3:fb:c7:be:f1:6e:1a:2a:
11:50:d1:cc:cc:9c:1a:19:d3:fd:7a:b3:30:81:c0:d4:1f:d2:
cc:61:07:01:ac:cf:fb:00:ec:a7:f7:24:ec:95:93:be:5e:c5:
bf:0c:e5:c3:00:3f:ef:e8:b3:d4:0c:f0:3f:d8:f1:f0:8c:9f:
6b:c7:73:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:30 2025 by rpki-client