Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: 4rb5cBn+IDoYdi6he93FUEuXzIkN0ideJsOpsjO6ddk=
Subject key identifier: E4:A6:65:0E:D1:C9:2F:42:0E:F4:C7:60:B5:8D:BA:7D:E2:37:23:D2
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 01976B8666648128A1ABD0B60CEEEC5DC491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 12DD
Signing time: Fri 13 Jun 2025 23:00:59 +0000
Manifest this update: Fri 13 Jun 2025 23:00:59 +0000
Manifest next update: Sat 14 Jun 2025 23:00:59 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: /GpqXfKkJ5fLemaoQII4tgrLIRFovGGEbkFpQg0US/s=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:66:64:81:28:a1:ab:d0:b6:0c:ee:ec:5d:c4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Jun 13 23:00:59 2025 GMT
Not After : Jun 14 23:00:59 2025 GMT
Subject: CN=e4a6650ed1c92f420ef4c760b58dba7de23723d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:f7:2a:fe:10:61:35:39:df:3b:e3:dd:2f:
26:02:ae:b2:df:8d:11:d2:bb:94:f4:d9:13:ae:68:
79:f6:8d:4e:9c:a9:fe:ca:7d:05:a1:f5:80:d4:95:
b2:cb:50:59:e1:94:15:71:69:bf:c5:db:00:fe:fb:
b7:62:ae:9f:a5:18:36:17:08:fc:90:92:96:35:57:
0c:76:a7:e6:d6:06:46:c0:aa:62:b2:c5:fd:7f:36:
14:15:07:fc:92:b2:dd:4b:aa:ab:b8:96:7d:a4:94:
49:31:a3:8b:29:17:79:c4:23:f0:af:a4:83:ba:6a:
59:2c:2b:26:00:af:ca:b9:56:86:d2:14:f5:16:50:
a6:a8:eb:31:05:24:53:6f:5e:8a:54:19:eb:a8:e8:
25:62:6d:ed:2a:27:13:f2:10:87:e9:68:82:38:c8:
56:f0:93:dc:16:70:c9:bc:80:b0:ad:04:8a:6a:48:
56:eb:22:23:cc:e7:fa:91:f3:2d:7b:54:7c:87:ac:
f3:2c:a8:11:1f:97:d9:f5:d5:18:0c:57:4e:ef:72:
fb:d5:3e:41:c3:3e:34:71:44:45:b8:4e:a5:d4:7d:
c5:1b:2b:bf:56:85:e9:ac:66:4a:32:71:c9:38:ad:
f2:1f:80:b6:84:3e:aa:71:1e:3c:46:a1:93:e9:66:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A6:65:0E:D1:C9:2F:42:0E:F4:C7:60:B5:8D:BA:7D:E2:37:23:D2
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:93:14:a5:95:f2:9b:93:1c:f1:5d:64:d1:cf:3e:34:38:
b0:14:d2:02:97:8d:8c:ae:88:da:68:c1:86:c3:f2:c9:02:6e:
db:24:f2:09:6b:6f:c9:dc:5d:26:81:4f:73:87:e2:84:2a:e6:
0b:88:9c:42:6e:b7:0c:4e:31:a5:a0:6e:2b:da:44:44:3b:7f:
32:af:59:88:4c:2b:24:71:ab:18:39:d0:0f:79:ae:6a:4c:c0:
be:9c:c7:54:6a:b4:e5:60:27:02:3b:82:65:68:05:0f:25:7d:
93:c1:2f:65:44:4d:ab:f0:44:91:69:02:8d:95:e1:0a:c2:0b:
dc:ab:de:a2:d8:e5:76:10:bb:2e:8b:07:7d:4f:55:ff:b4:ef:
07:be:80:c4:be:3d:ce:d3:66:8e:4f:97:08:6c:67:64:fc:65:
d8:73:11:b7:c9:ed:9f:fb:bb:d6:28:35:a1:84:85:18:2c:fa:
d5:4f:8a:0c:2d:b3:d8:c7:9e:63:a4:95:2d:3a:95:31:3d:96:
a4:49:8a:26:f5:c4:23:9c:e5:76:3d:dc:5e:f3:0d:b7:b6:ec:
32:2b:01:44:12:b5:ca:2c:90:ca:06:ff:c1:93:e1:bb:1a:98:
55:bd:0b:36:1e:53:8a:de:2b:29:c5:42:9b:c9:ab:25:dd:b3:
2c:36:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:53 2025 by rpki-client