Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: nGynB277Bu1i7SmsKkgNlFq6lEsV4UqEd192CzT5k0U=
Subject key identifier: EA:76:D9:0B:98:EC:02:99:B9:CF:0D:CF:E6:08:3D:E4:91:92:1E:C5
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 019779AF9FE8BC52BDA9567B198AC82C7C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0A00
Signing time: Mon 16 Jun 2025 17:00:42 +0000
Manifest this update: Mon 16 Jun 2025 17:00:42 +0000
Manifest next update: Tue 17 Jun 2025 17:00:42 +0000
Files and hashes: 1: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: WkbemfWDoAlEoqfA1HfE/0JKfOVooca5C+ccsxXnFzU=)
2: TFll5ENpjCR3fFAI_0E-ikt6_GM.roa (hash: cdCSDqZSpIOGUxCTSX+KjodpOB497W7vlYLMjlGxydw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:9f:e8:bc:52:bd:a9:56:7b:19:8a:c8:2c:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Jun 16 17:00:42 2025 GMT
Not After : Jun 17 17:00:42 2025 GMT
Subject: CN=ea76d90b98ec0299b9cf0dcfe6083de491921ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:5c:72:e3:d7:73:00:47:da:1e:96:3c:0f:
6c:b5:6f:17:c6:b1:b3:19:26:fe:8f:2c:05:77:96:
6d:ba:5c:9f:44:ac:fc:d4:51:89:d0:0f:f1:02:bd:
8f:36:65:0d:ec:b8:ee:60:03:96:e0:1c:b2:30:04:
c4:7e:cc:a7:c8:5a:cf:83:2b:c1:e6:f6:6e:8c:63:
b7:dd:52:15:0f:ad:02:93:45:b7:e5:a4:ad:c7:40:
8f:f7:cf:72:43:0a:b2:c3:d1:0b:96:25:d8:cb:99:
ca:a9:b0:86:5f:d9:94:7a:1e:b7:d8:a3:87:d8:68:
64:2a:19:2d:be:98:11:ab:4c:bc:9d:08:0f:fa:81:
82:97:56:28:b5:2f:a2:89:a1:41:e6:fb:ef:87:86:
24:f7:29:34:29:a2:28:fa:af:1a:de:e7:82:3e:a7:
e0:bd:61:2a:e9:c1:7f:3d:db:ea:ce:09:12:ac:65:
ec:5f:47:3a:74:de:d4:79:86:2a:a1:25:56:26:3f:
f4:f0:46:af:ef:fa:9d:13:a5:58:df:b8:17:1f:a7:
02:c6:35:b8:7a:4d:52:80:44:46:29:4a:59:8e:00:
b7:32:a6:bc:12:90:6a:70:09:ab:6c:18:df:19:75:
03:fc:b3:ff:ce:73:96:da:c0:dc:f3:15:ed:c2:43:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:D9:0B:98:EC:02:99:B9:CF:0D:CF:E6:08:3D:E4:91:92:1E:C5
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8c:a6:4b:5b:d3:04:a3:49:32:df:c3:0a:71:0b:a3:46:65:
05:13:02:f5:27:1c:af:a4:53:23:9a:82:30:0e:42:40:73:12:
4f:17:80:21:6a:44:a2:be:b5:d5:18:94:7c:38:6f:3f:14:10:
bc:4e:38:0e:c8:94:4c:b8:c7:bc:7c:a5:03:9f:1a:61:a1:67:
3e:bf:0d:48:7b:1c:c4:82:a4:5a:25:16:db:8a:3b:32:c9:7b:
94:6d:dd:52:19:12:79:d7:8e:d6:c6:c5:f9:fe:ec:c4:02:9e:
0f:f5:0b:ac:57:0f:70:af:88:08:a0:a0:9d:13:32:a1:6c:44:
0b:6c:92:60:6e:33:e4:2f:13:8f:a1:46:6f:15:91:67:75:4d:
0f:07:f1:ea:c5:f0:0e:22:93:97:aa:2f:49:58:c4:c1:fc:bd:
9e:63:dd:81:6a:a0:c6:09:a0:d4:ab:b7:46:36:07:cc:4d:44:
93:87:0c:74:34:fc:93:48:d6:3a:d1:aa:17:b9:9b:a0:6e:fd:
ea:f9:3d:b8:84:2d:f4:e4:84:90:7b:67:59:64:bc:c0:ba:c5:
9f:83:ee:77:3b:b4:95:c4:ca:6b:86:3e:04:06:a1:f0:2f:b8:
88:d1:95:77:87:72:c7:0a:a9:02:b7:74:73:21:b1:d5:19:ad:
49:2d:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:09 2025 by rpki-client