Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
File: m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json)
Hash identifier: /6+Y4Khcbgbk0VLUrkNHig3nj00hOpbX6OaIbxlyHQY=
Subject key identifier: 3B:72:C5:60:90:46:34:6D:1D:AC:50:7F:61:EE:6D:07:0D:A5:92:65
Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Certificate serial: 01976C61E8E4B0F07CEDC906BF677095DDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
Manifest number: 0127
Signing time: Sat 14 Jun 2025 03:00:45 +0000
Manifest this update: Sat 14 Jun 2025 03:00:45 +0000
Manifest next update: Sun 15 Jun 2025 03:00:45 +0000
Files and hashes: 1: GFs318vhhs43UeJYStMCcJcloVE.roa (hash: W8/O6hKTgxLPwLzEgTm/PKRsS6eSZm8+16PIQciHYr8=)
2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: xDISkXvIU5ecnEqfzvsOidKGJCkX5BT9VqnVXQ6C+qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:e8:e4:b0:f0:7c:ed:c9:06:bf:67:70:95:dd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Validity
Not Before: Jun 14 03:00:45 2025 GMT
Not After : Jun 15 03:00:45 2025 GMT
Subject: CN=3b72c5609046346d1dac507f61ee6d070da59265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:2d:6d:89:fc:d1:cc:43:00:3c:60:b7:7e:
0a:2a:4c:d1:51:00:5e:95:37:e7:93:c6:ca:c0:0c:
f5:ff:43:24:06:cf:e4:45:f2:a5:d7:ff:43:20:9c:
57:ab:24:a1:d8:22:f7:7d:1e:e0:c4:0c:e1:71:68:
03:cb:a1:f9:2f:9e:49:68:c8:09:ef:61:c4:52:31:
9f:a1:50:ab:98:9b:ab:f7:16:e6:7f:84:e6:cd:1e:
ae:53:32:c4:aa:03:e8:85:1e:2a:74:8a:33:72:d3:
33:74:31:53:af:36:23:e2:f4:27:b6:01:e8:a9:12:
8f:7e:ae:d0:57:90:c4:1d:c2:5e:0e:b4:1a:81:63:
59:9a:5c:a4:1e:66:a7:d0:c7:56:51:ad:89:e8:5d:
88:27:bb:53:b3:6d:9e:0e:e4:43:30:0a:8b:a8:b4:
db:fc:37:80:c5:50:05:24:d5:85:4d:ca:bc:0a:2a:
3f:48:24:3a:2f:0c:c2:b2:bc:9d:3e:e9:7d:1f:c9:
ca:f7:14:ca:98:a4:6f:66:38:ac:77:6e:b9:17:0d:
1b:eb:5b:4c:29:ae:bd:28:e3:70:f1:f4:06:eb:4c:
af:82:1d:11:34:1a:40:29:19:c4:ef:5f:05:79:36:
5b:b1:ac:59:15:7e:df:fe:94:51:ce:e3:7f:f6:cb:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:72:C5:60:90:46:34:6D:1D:AC:50:7F:61:EE:6D:07:0D:A5:92:65
X509v3 Authority Key Identifier:
keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c1:36:87:6f:e4:e0:7c:32:34:e3:da:1d:86:22:82:34:d9:
e0:9b:94:b5:03:6f:43:f6:61:ef:67:19:98:91:ff:8a:06:9a:
2e:e5:00:9f:ab:97:1d:52:f0:53:62:39:e6:77:fa:b7:71:9b:
bc:d7:d8:b1:59:bf:9b:cd:59:38:70:07:5b:bd:ae:ba:12:93:
7b:cb:d4:43:c9:0c:a3:03:d2:25:48:1b:06:45:52:b1:d8:06:
c5:3c:0e:24:26:b6:50:20:86:c8:6d:2b:81:ab:2d:85:39:68:
e4:73:05:f9:2f:9b:4e:68:09:2d:0a:a5:ca:8c:ef:14:e8:b5:
bc:ab:c8:51:44:db:a6:96:15:29:e5:ed:61:d6:02:1d:c3:b7:
78:5b:b0:77:b1:f1:3f:36:d3:f7:d0:39:a7:e1:62:23:dd:6c:
cb:3d:db:f7:d2:44:e1:97:d4:52:5f:73:e9:77:41:62:21:5d:
cd:17:b4:57:ac:49:96:f6:d9:78:88:c3:41:7f:5f:94:f3:5a:
ac:2d:31:6f:76:50:10:a1:2d:e3:11:62:be:bf:00:aa:cf:6a:
d4:4f:84:f3:64:dd:35:07:b8:40:ba:00:1b:b9:84:d8:63:95:
98:81:46:eb:cd:61:c5:2d:d9:0a:59:a3:e0:0e:74:b8:87:ee:
53:fa:1a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:40:37 2025 by rpki-client