Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier: PeZk5woEP1y3y6h9gj08n87j8Nox7S+lXqS9CQJ59bY=
Subject key identifier: 0B:B5:71:D0:AA:AB:D6:37:2F:11:71:B6:FB:5B:B2:74:F7:AD:F3:DE
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 019776098940D80015A3C2DA2C9B200A5766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number: 10D2
Signing time: Mon 16 Jun 2025 00:00:25 +0000
Manifest this update: Mon 16 Jun 2025 00:00:25 +0000
Manifest next update: Tue 17 Jun 2025 00:00:25 +0000
Files and hashes: 1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: vj7dDCmwSta54s/vSU2n3La2VP81+VdGR12JFusEI4s=)
3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:89:40:d8:00:15:a3:c2:da:2c:9b:20:0a:57:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Jun 16 00:00:25 2025 GMT
Not After : Jun 17 00:00:25 2025 GMT
Subject: CN=0bb571d0aaabd6372f1171b6fb5bb274f7adf3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:cb:8b:66:de:1f:15:f5:c4:29:f5:a9:1d:
79:ab:89:ec:71:02:73:36:6a:63:39:be:47:77:a2:
c5:2e:de:6f:03:94:1f:14:02:69:f8:39:12:14:2d:
ca:c8:63:0a:be:30:e5:c9:0e:49:81:e6:dc:03:ae:
54:72:53:35:50:95:df:7b:63:a7:37:9e:a6:88:f8:
4d:69:15:fe:83:a4:f8:ed:0b:b5:0c:87:53:16:51:
a0:50:81:8f:6a:8a:23:1d:ee:26:18:d5:44:6f:0a:
c7:21:30:0b:c6:71:c0:25:bb:23:34:26:21:cd:43:
8d:6b:41:96:78:53:f2:34:0d:da:21:30:9b:06:f6:
f4:9a:f1:5f:a8:02:05:13:21:89:ca:33:59:e3:c0:
39:56:cf:71:96:ef:ae:8d:e8:94:8b:1a:88:65:fa:
bf:d0:92:44:45:32:86:e0:75:17:80:ed:00:5c:3a:
b5:87:cc:e8:9d:e6:a6:5d:b6:86:d9:4a:f4:00:d4:
0f:84:e5:4d:b8:4d:cc:0c:77:b1:89:ef:5e:fc:9e:
23:12:a3:e5:2a:58:47:2b:e7:b6:e7:e5:2a:17:94:
b8:aa:d5:22:79:a4:d1:35:59:d3:05:ed:47:95:32:
d9:8b:a5:d7:1c:59:88:b0:c5:54:a0:80:9f:1e:16:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:71:D0:AA:AB:D6:37:2F:11:71:B6:FB:5B:B2:74:F7:AD:F3:DE
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7e:6d:a5:ff:5f:aa:49:a7:d3:40:d5:85:ca:4b:53:b0:f6:
d7:11:15:b1:e3:02:32:84:36:10:18:89:60:d8:c8:16:c3:83:
fc:d4:11:a9:51:b4:57:69:40:fa:d9:69:d6:6e:c6:ae:44:87:
89:58:40:b6:3f:b4:fc:bc:15:29:86:13:96:87:0f:31:b6:a1:
e1:97:1f:a7:d2:7b:4a:bd:85:bb:02:52:55:9e:37:53:33:75:
63:e8:02:37:56:a1:40:22:63:8e:47:98:a6:28:42:89:f2:1d:
95:f1:d3:00:ae:ec:2d:68:ee:32:18:0b:34:b1:5d:53:cb:37:
9f:f3:65:de:fc:af:d9:5d:bb:1e:5d:d3:e7:2b:6b:36:c1:87:
cd:d3:64:53:ca:c5:13:43:55:d7:48:0f:06:f9:42:9a:ad:0d:
b8:e1:cc:8c:a3:7e:12:eb:ca:37:75:a4:ee:76:14:f9:be:3f:
f7:23:77:36:60:c9:d1:9c:42:47:e9:3b:d6:8c:b1:05:d9:9d:
f5:2f:dc:f6:bb:4e:7e:58:cf:66:51:8d:44:27:4c:e5:a5:dc:
a2:79:78:5f:41:01:ea:0c:7b:0b:d1:7d:50:6a:65:5b:79:bf:
f4:8c:30:2c:79:7d:25:cf:83:b3:b7:d6:84:ac:a5:63:e7:89:
c2:9a:c0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:46 2025 by rpki-client