Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
File: MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft (raw, json)
Hash identifier: DyxLFtlGBtxmzI1bJvI7yxYguHsIJbLeJ0f0ttSuRQE=
Subject key identifier: 12:7C:46:FA:D8:E3:67:A1:C8:BE:AC:2A:AC:B0:6F:84:D7:FC:7E:96
Authority key identifier: 30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
Certificate issuer: /CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Certificate serial: 0197733F92DE034D9E393B995F0CADE35795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
Manifest number: 1128
Signing time: Sun 15 Jun 2025 11:00:35 +0000
Manifest this update: Sun 15 Jun 2025 11:00:35 +0000
Manifest next update: Mon 16 Jun 2025 11:00:35 +0000
Files and hashes: 1: BBdbuotjTMjXRl3JAeP7HEvXWvI.roa (hash: oe7eC03oYJfwYH0zG5KTjbcXBldNHb2+R11az4Gn4S0=)
2: MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl (hash: hjxS6O25GpPjECgzZLSzbYdQ4FJE5N/tV1pOH2q7Tjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:3f:92:de:03:4d:9e:39:3b:99:5f:0c:ad:e3:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Validity
Not Before: Jun 15 11:00:35 2025 GMT
Not After : Jun 16 11:00:35 2025 GMT
Subject: CN=127c46fad8e367a1c8beac2aacb06f84d7fc7e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:bc:0c:d0:7f:06:18:27:b9:34:62:9f:20:
f8:12:7b:cd:b5:29:6a:77:d9:39:8b:c4:90:c6:59:
7d:ad:80:7c:ed:3e:3c:ae:43:23:55:f4:ea:20:18:
1d:20:c1:43:a1:e9:4e:c2:d8:b9:24:09:8e:24:db:
a1:12:09:7a:ac:cb:e9:18:a4:99:86:b4:75:75:f3:
0c:ed:71:51:75:bc:32:82:b4:6b:0e:bd:76:ee:83:
c4:f4:3e:52:03:91:56:d4:fd:7a:d8:97:3d:b9:39:
46:b7:ed:71:03:92:6b:83:92:e6:45:78:b8:00:56:
e9:4f:ea:0e:f4:31:69:17:08:f1:c8:31:95:b6:03:
82:65:f7:02:1a:83:40:7b:06:97:96:a3:9f:6c:22:
be:68:9c:a1:d3:8e:8b:a3:f8:d7:e8:a6:a0:39:aa:
f3:14:a4:15:32:c5:e3:ca:bc:72:7c:6a:fd:8c:5a:
52:47:1b:8c:8e:cd:7f:32:a1:99:9c:5b:7b:73:ea:
b4:10:62:6d:d3:9c:b0:ef:94:31:68:57:af:75:7c:
78:1d:07:ea:f8:17:b3:60:08:9a:bf:2d:a8:17:0c:
a1:bd:5c:7d:f9:e4:17:0a:65:d8:28:da:0a:ae:94:
5d:31:95:e1:26:8b:9f:5a:27:00:ec:73:11:39:fa:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7C:46:FA:D8:E3:67:A1:C8:BE:AC:2A:AC:B0:6F:84:D7:FC:7E:96
X509v3 Authority Key Identifier:
keyid:30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:65:62:f5:96:51:14:5c:72:81:12:89:33:d0:c2:71:99:81:
40:13:d6:bd:61:72:19:5b:b8:2e:f5:60:23:9f:54:99:a4:14:
bb:90:88:a7:37:84:cd:b5:1c:5b:ef:5b:48:ba:9b:c3:7b:7a:
c3:20:ea:1e:e2:bd:7b:3d:b2:7e:82:b0:ff:c0:77:c9:16:8b:
88:5a:a6:93:39:09:39:17:37:65:83:49:13:1a:6f:4d:7b:ba:
a2:56:84:46:08:93:1a:30:3c:8b:49:a9:6a:58:9e:75:e6:eb:
80:9e:33:66:fe:49:2d:ac:60:1c:8f:48:d2:ef:83:9b:61:c0:
21:2c:d3:54:66:68:8c:69:a4:66:97:82:9b:b9:4f:8b:78:24:
ed:99:32:6f:79:fc:38:5f:7e:ea:94:ed:a3:c7:dc:90:b9:62:
4c:c3:81:2f:c7:87:74:c1:7a:d5:00:e6:51:11:09:4f:5a:fd:
09:2d:0a:24:df:54:6b:2a:d5:43:ed:64:95:7c:3c:8d:dc:ba:
49:14:18:27:b8:fc:fa:e7:34:c1:c7:55:17:07:22:3e:e9:f0:
d5:69:12:07:a9:f5:aa:72:5b:83:c8:30:cd:a6:13:35:39:c2:
3f:d1:fa:6e:a2:c6:72:f7:b7:fe:0c:1e:b1:cb:92:67:c7:66:
d0:6e:72:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:53 2025 by rpki-client