Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
File: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft (raw, json)
Hash identifier: Ghf89yzyI8hNQpyeGU4629Vq/DjO74LmlmTMi4GiAL8=
Subject key identifier: F9:26:71:8D:3F:29:E8:2C:2A:22:9D:6E:5C:7F:FE:36:90:C6:6F:76
Authority key identifier: 32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
Certificate issuer: /CN=32b1b94b073c547991c20f842eadec167ec19e34
Certificate serial: 0197711A66CE4505339D85E9E05EBA9B1EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
Manifest number: 0207
Signing time: Sun 15 Jun 2025 01:00:44 +0000
Manifest this update: Sun 15 Jun 2025 01:00:44 +0000
Manifest next update: Mon 16 Jun 2025 01:00:44 +0000
Files and hashes: 1: HTiETFMnseisEeoALFIWItsK6gc.roa (hash: iulklaFZv7FQZ4kyFEEaoOlUffIGv7CCXTbtxR93AS4=)
2: MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl (hash: j0I0U29/OUzKZ53bGl84MtxcNb/08mL+K+jcERKS0Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:66:ce:45:05:33:9d:85:e9:e0:5e:ba:9b:1e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b1b94b073c547991c20f842eadec167ec19e34
Validity
Not Before: Jun 15 01:00:44 2025 GMT
Not After : Jun 16 01:00:44 2025 GMT
Subject: CN=f926718d3f29e82c2a229d6e5c7ffe3690c66f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:26:76:a6:3d:e4:a8:b6:98:b7:2c:d3:0b:
d9:13:b1:3a:c5:f9:fe:58:6c:04:58:a2:e5:01:5c:
8c:7e:95:aa:1f:fd:1d:52:0a:6e:3a:a8:94:05:3f:
77:20:f1:f6:62:fd:ba:50:56:38:85:6b:82:13:ba:
39:f7:34:cf:a6:4b:02:d5:74:fe:ef:0f:e0:c2:ec:
e2:53:ea:f1:88:65:3f:03:93:a6:c7:fc:fc:06:be:
5d:4d:3e:94:a0:ac:14:6d:a8:d2:62:e3:d7:d5:da:
06:a5:6d:6c:c7:a7:d8:4e:cd:f3:f1:b9:48:55:fc:
2d:e1:1c:a4:68:99:e6:9c:e0:fb:74:6a:61:b3:92:
c7:c7:61:bb:6b:c7:6d:50:2c:df:86:78:f3:9d:59:
ea:b1:66:14:a1:ba:dc:69:54:ed:bf:43:46:5b:60:
f1:22:ea:d3:09:47:d4:5b:1d:2d:48:3f:9e:a0:90:
8e:af:c2:fd:e5:78:a4:59:af:7a:48:37:b9:87:be:
2b:87:dd:35:35:05:11:54:43:91:35:50:7f:29:fe:
f2:09:d8:ba:bd:af:e5:05:a8:89:c1:1d:a9:89:37:
21:39:03:31:90:a5:77:7a:2d:23:a9:5e:3e:e3:e5:
87:66:da:83:b8:c3:6d:32:1b:e7:9a:1e:da:08:c8:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:26:71:8D:3F:29:E8:2C:2A:22:9D:6E:5C:7F:FE:36:90:C6:6F:76
X509v3 Authority Key Identifier:
keyid:32:B1:B9:4B:07:3C:54:79:91:C2:0F:84:2E:AD:EC:16:7E:C1:9E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0a206e-1788-436b-9728-bed4b99a7bb4/1/MrG5Swc8VHmRwg-ELq3sFn7BnjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b2:c3:a7:67:fb:00:31:67:0c:66:24:11:87:ad:ef:19:9c:
8a:c4:a8:ca:77:59:59:ac:7f:9a:5a:ee:d8:34:d5:2e:82:db:
71:54:46:70:9e:98:20:3c:d4:c1:4f:b1:33:0a:c1:8c:de:07:
fd:06:6c:bf:da:66:3f:7b:e7:c9:20:2a:78:95:a3:24:cc:31:
89:86:05:3e:3d:c3:da:41:f3:3e:cb:7e:16:c5:dc:85:c5:c3:
63:39:68:48:e0:42:2d:cb:e1:69:b8:a8:60:e0:49:ca:7e:6b:
2e:14:00:44:c5:4c:80:21:a7:8a:ef:e4:6b:cb:4c:e7:df:1f:
8e:54:1b:44:01:d5:68:d4:7d:1a:2b:a3:3c:4a:57:04:84:24:
e3:16:0f:64:94:4b:cf:e2:da:d0:75:7a:0a:8e:b4:40:f4:b0:
fd:24:dc:54:55:f7:77:6b:82:77:a2:64:6a:30:36:4d:d8:2f:
e2:a3:7d:87:80:79:07:0c:40:be:b3:a9:f0:b4:f2:b4:f7:28:
bd:64:d7:81:87:3f:41:2e:c0:43:8e:cb:c4:d9:19:20:a5:49:
99:a8:c7:a6:72:46:3f:bb:28:8d:61:94:b9:01:b5:80:84:83:
a5:8c:d7:3f:3f:dc:3c:33:48:00:c7:1a:3a:b1:d9:17:97:95:
85:30:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:37:01 2025 by rpki-client