Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: JNehokDrGl5+C+8AyDfrajvoiD48MdZy272Mxca81uQ=
Subject key identifier: 23:49:B6:CF:94:2F:10:AC:64:0A:C6:30:57:31:22:21:B4:D4:1C:6A
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 019768BC498219D37773CF51A66CDE21EC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 04BA
Signing time: Fri 13 Jun 2025 10:00:59 +0000
Manifest this update: Fri 13 Jun 2025 10:00:59 +0000
Manifest next update: Sat 14 Jun 2025 10:00:59 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: Eh0zH2s7NapK//bZpEwKywCecq8v7ZMhC0JQPToX3HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:49:82:19:d3:77:73:cf:51:a6:6c:de:21:ec:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Jun 13 10:00:59 2025 GMT
Not After : Jun 14 10:00:59 2025 GMT
Subject: CN=2349b6cf942f10ac640ac63057312221b4d41c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:18:ea:3d:d6:d4:50:c0:9d:05:2b:57:d9:
27:5b:78:1a:a6:44:2a:a2:bf:01:5a:f3:c0:29:91:
36:82:38:58:38:7b:c7:25:0c:ae:e4:e1:38:36:79:
6e:da:25:43:dc:92:00:2d:1f:1e:46:cd:43:8a:4e:
e4:cc:14:43:37:f7:eb:8d:a8:79:c3:52:d8:58:13:
0c:45:ba:e8:36:51:5e:61:29:b1:b9:aa:24:c5:ad:
0d:05:ae:a1:bd:8f:73:4a:30:21:b8:31:59:54:37:
75:60:86:85:d4:5d:ac:ae:df:5f:e7:51:ca:fb:f2:
db:3c:53:c8:c8:ed:3e:b6:13:cc:b6:4a:a6:0a:ab:
c9:99:0c:ad:aa:02:d9:9a:ed:ab:69:b6:11:68:b5:
0a:eb:fd:7a:05:61:58:bc:bb:5c:f1:7a:a6:4d:39:
6a:bc:5b:8f:55:3c:48:93:66:bc:d8:a8:63:aa:0e:
10:76:1b:9d:f0:dd:da:d0:15:32:46:ce:98:3b:d1:
70:0d:8b:16:27:5b:84:88:b0:b5:be:64:2b:5a:99:
ca:12:65:40:5b:42:55:b7:65:b4:72:72:18:ac:3e:
19:08:33:ea:90:a9:e9:69:30:41:5d:30:e9:06:09:
a0:88:b2:be:0d:7f:92:1a:05:10:41:e1:8f:07:e9:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:49:B6:CF:94:2F:10:AC:64:0A:C6:30:57:31:22:21:B4:D4:1C:6A
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:89:e6:c6:7a:77:67:19:ef:75:75:b8:51:c2:34:b8:67:49:
e3:08:b2:2c:62:ea:bd:11:0d:c5:41:5d:89:67:ca:d7:c6:f6:
e6:0b:ce:a4:2a:58:7f:4d:94:0f:f0:e9:07:b9:d7:f5:d0:48:
1d:7a:2d:08:7b:e5:10:1e:fb:07:5e:96:0d:9d:6e:66:1a:49:
46:9b:09:d3:4f:44:68:fa:30:eb:30:88:48:1c:07:f6:f3:c9:
24:ea:e1:5a:6e:0d:4d:80:6c:a1:ce:2c:4b:cd:b5:48:4e:28:
34:ff:c6:d3:04:b4:8f:e3:51:54:3c:da:d4:6f:9f:4c:4c:b0:
3e:f8:d2:a5:c9:a3:90:b0:79:25:13:2f:85:d0:2d:1b:13:06:
51:69:c4:de:07:18:22:0d:61:00:be:ad:e5:b1:58:e9:57:0f:
02:d4:dd:56:f1:b0:65:cc:b1:c3:ad:ef:19:ef:38:9f:62:f5:
9a:7d:19:bb:ba:6f:87:f9:f3:0b:bc:e5:95:6d:22:0e:f6:68:
10:33:8e:aa:14:dd:0b:c1:90:38:40:5f:6b:4e:dd:dd:25:dc:
79:b6:72:f6:42:1b:fb:fd:7c:bb:2a:fd:0c:23:02:6e:37:13:
82:32:45:fa:da:0f:21:df:6e:ec:eb:b7:83:22:bc:f4:ba:2f:
40:91:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:40 2025 by rpki-client