Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File: mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier: mIuO335ZxXY2jTi2/QEwffYM+0VJoq0uusJS495Th1I=
Subject key identifier: 1B:C6:22:05:73:F1:46:D7:CE:17:A7:96:E4:E4:DD:45:51:E5:67:96
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial: 019775655A853F1813F3B6DF180BEC658890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number: 0448
Signing time: Sun 15 Jun 2025 21:01:05 +0000
Manifest this update: Sun 15 Jun 2025 21:01:05 +0000
Manifest next update: Mon 16 Jun 2025 21:01:05 +0000
Files and hashes: 1: WvHTHUW2Hu_mDZctFQeVwGysiHE.roa (hash: 0IRIumTzEnldnjuLK5Mty3ubumeenKJPjlLba1MpsmY=)
2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: ti548tJIPrXj1o3SiuqpYUNw/tu83gSmEyU00Q36/Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:5a:85:3f:18:13:f3:b6:df:18:0b:ec:65:88:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Validity
Not Before: Jun 15 21:01:05 2025 GMT
Not After : Jun 16 21:01:05 2025 GMT
Subject: CN=1bc6220573f146d7ce17a796e4e4dd4551e56796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:9f:64:64:58:88:7c:4d:84:49:7c:aa:3a:
a4:61:5b:11:d2:4c:ad:19:e4:4e:73:fe:73:a4:3e:
05:83:b9:78:e6:24:d8:a9:82:b7:1e:23:e2:a7:22:
39:48:9f:ea:45:82:ec:95:e3:4f:fd:45:fc:59:e9:
44:d0:4c:58:29:e8:62:af:de:0a:e6:71:e5:74:19:
c6:73:d4:42:2c:e5:32:75:97:6d:17:62:91:d4:90:
df:fd:03:60:2a:6c:db:00:24:36:73:0c:2c:50:7a:
59:cb:af:51:80:3d:f2:c0:cd:f8:4c:49:76:c9:be:
22:66:50:cd:63:fd:94:09:ce:df:3b:6f:2e:93:ee:
c9:f7:3b:aa:9c:b2:48:d7:be:7f:d9:7d:cb:8a:c8:
d4:44:df:f7:d6:b4:81:09:b2:44:d0:02:c6:0f:89:
42:a0:c4:ba:c1:31:89:57:15:f2:51:c2:08:3a:54:
3b:88:e3:cf:10:b0:aa:ef:4a:dd:eb:ce:ee:b9:03:
0d:c2:f2:e2:6a:9d:02:9c:d6:74:d4:07:0c:bb:ba:
fa:fe:41:5f:70:d4:56:c3:2e:2b:a8:d0:d2:d5:d9:
fa:73:6e:9e:44:60:3f:53:5f:b7:b3:54:b8:23:27:
76:70:27:ff:e7:f4:03:09:bd:96:7e:e1:99:57:9f:
94:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:22:05:73:F1:46:D7:CE:17:A7:96:E4:E4:DD:45:51:E5:67:96
X509v3 Authority Key Identifier:
keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:19:76:b4:b6:e1:d2:28:90:dc:e1:e0:69:f9:c9:6b:4e:c1:
b6:b3:55:59:d1:09:c1:13:16:e3:6d:7c:e5:ae:12:a1:68:91:
c9:8d:0a:99:14:6e:a2:ab:f1:19:91:57:06:12:bf:3c:91:44:
16:b8:e9:27:9b:9b:82:a6:6e:28:73:fe:60:4c:a0:0d:bc:9c:
ef:78:9d:1f:a7:0b:21:6a:2f:76:73:11:4b:14:72:cc:c2:b8:
e7:a7:99:ed:98:06:c9:b7:3e:42:f8:f4:6d:5c:57:6f:46:0b:
e5:e1:d9:83:1b:6f:d9:43:45:26:ae:94:ab:49:27:6d:35:f9:
c4:59:db:30:26:7a:79:cf:4a:80:fd:c2:ee:85:03:9d:72:9a:
3a:75:4f:d4:76:c7:10:bf:a7:73:06:2b:85:4d:ba:80:10:8a:
8f:db:bd:5e:12:7f:3f:d3:5b:0c:2c:89:25:d0:01:f1:e3:e6:
12:a3:96:24:f8:b7:2f:3e:fe:0d:c9:db:9f:e8:af:29:9c:61:
bd:5b:44:ff:1f:cb:07:7e:98:42:7f:98:c3:7c:73:ca:05:95:
4d:5d:24:e0:82:59:56:fc:57:ed:2c:79:3b:d5:36:4b:42:63:
16:57:9c:58:aa:72:d7:39:1b:e2:d1:cd:83:fe:65:3d:b9:f5:
78:b1:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:21:35 2025 by rpki-client