Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
File: Mj4i0VNpL6h29FppimQHCr0puzk.mft (raw, json)
Hash identifier: 4HhFiHtdyP+2/B11ve2/LAq+ffYYQqp3A5IqX3wbnKA=
Subject key identifier: F3:A9:43:8C:40:CE:3C:B7:0E:4C:7E:DB:EC:6E:4D:B2:79:FC:20:B2
Authority key identifier: 32:3E:22:D1:53:69:2F:A8:76:F4:5A:69:8A:64:07:0A:BD:29:BB:39
Certificate issuer: /CN=323e22d153692fa876f45a698a64070abd29bb39
Certificate serial: 01977F0D0BABDE726DEA4A36E0A823D743E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
Manifest number: 53
Signing time: Tue 17 Jun 2025 18:00:50 +0000
Manifest this update: Tue 17 Jun 2025 18:00:50 +0000
Manifest next update: Wed 18 Jun 2025 18:00:50 +0000
Files and hashes: 1: Mj4i0VNpL6h29FppimQHCr0puzk.crl (hash: rXWFfABWzLwEiZhriLx4CoXWEJglndqLbd6PzCQZ1WI=)
2: UPOmKS-wCVFYZbdnuQ3DjxycBYs.roa (hash: wDCKtOot6cNGvhctv9YJsxtzSFcNno8Vt28nw8UusF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:0b:ab:de:72:6d:ea:4a:36:e0:a8:23:d7:43:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323e22d153692fa876f45a698a64070abd29bb39
Validity
Not Before: Jun 17 18:00:50 2025 GMT
Not After : Jun 18 18:00:50 2025 GMT
Subject: CN=f3a9438c40ce3cb70e4c7edbec6e4db279fc20b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:a1:2b:b6:e2:d5:4b:cd:b6:5a:ed:c6:1c:
7f:f9:ed:56:73:e2:58:7f:c9:27:82:6b:a5:b4:bb:
31:51:47:0a:6b:32:8c:9a:ad:a7:b3:bd:b5:0f:d0:
40:11:28:0c:5e:f6:ca:9d:c3:3b:71:2b:ae:74:9a:
05:08:29:4a:98:27:81:af:c6:df:99:38:39:6f:46:
cd:d0:a6:3b:3b:88:97:69:9e:fb:eb:9b:22:e2:43:
cd:9c:4f:9c:a8:15:be:0c:a7:f0:66:50:57:94:63:
b5:39:1a:d4:87:ec:72:39:11:88:38:ed:79:a4:66:
95:e9:ef:4d:5b:17:e6:25:de:ef:fa:28:c3:fa:80:
61:77:8e:19:15:4c:b2:c9:f4:c1:be:2b:18:a0:3c:
b1:d8:c0:24:c4:92:37:f3:5b:de:d5:ac:38:f3:0f:
5c:97:48:9c:1d:f2:2c:40:db:d3:d0:e9:b9:e3:a4:
aa:6d:a1:b5:5f:32:08:06:53:d1:e1:42:c0:29:d7:
67:7d:3d:13:2e:ec:e8:5f:c2:fe:d0:ab:48:7b:42:
bc:2c:9b:df:e3:40:71:39:b7:4a:c5:eb:77:4f:6d:
80:96:c1:44:e8:45:34:d1:a3:7c:a7:92:30:a3:62:
fd:3d:d2:7f:1d:71:0b:bc:44:b3:e9:7c:2b:9e:b6:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:43:8C:40:CE:3C:B7:0E:4C:7E:DB:EC:6E:4D:B2:79:FC:20:B2
X509v3 Authority Key Identifier:
keyid:32:3E:22:D1:53:69:2F:A8:76:F4:5A:69:8A:64:07:0A:BD:29:BB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c5:05:b9:a4:3a:c5:31:24:12:62:4b:23:66:d0:87:6c:9b:
9a:4a:ac:a0:c0:0e:28:45:12:6f:4c:e6:37:84:75:79:14:c9:
43:11:31:cc:48:52:76:d1:89:8d:7e:5b:e8:3f:d3:86:18:8d:
44:48:ae:58:bc:25:fd:55:5d:ba:63:20:56:6e:3b:89:3d:a3:
cc:54:f8:39:97:14:2a:55:5e:b0:5c:49:74:05:a3:e1:d4:8b:
a8:da:5c:8d:57:9e:80:e6:af:1e:29:dc:98:b3:b6:07:0a:0d:
c2:df:83:be:a8:bf:be:81:33:ae:38:81:45:27:17:8f:3d:8d:
58:f1:34:02:61:53:67:3d:51:a5:3e:bb:81:57:ed:50:7e:24:
69:18:f7:29:d7:3d:55:92:13:ef:09:e8:36:2f:3c:10:fe:14:
e8:80:74:fd:1c:c1:1e:1e:4d:9f:2c:c1:d0:cb:2e:4d:f1:15:
7f:b0:07:79:48:46:05:9d:ff:47:44:fa:ef:f3:ee:5f:14:69:
f6:fe:c2:df:81:38:38:b1:31:47:05:37:fc:ea:ec:7b:14:62:
60:c1:f6:a9:cb:ca:2d:74:05:96:32:07:d5:01:05:01:4e:84:
d3:e6:73:db:e3:14:2d:b0:5e:fd:5e:0b:8f:3c:93:73:9c:97:
6d:bf:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:29:32 2025 by rpki-client