Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: Apf+rlHD+yfWBzo1BnSXoHM5pffs+rx8av/tYAetL5k=
Subject key identifier: F3:B1:3F:D2:86:0E:C3:6D:A0:EC:04:3F:9C:EB:04:8A:99:74:59:EF
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 01978244B0D1119F9171E38C0059CB5B111D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 1297
Signing time: Wed 18 Jun 2025 09:00:29 +0000
Manifest this update: Wed 18 Jun 2025 09:00:29 +0000
Manifest next update: Thu 19 Jun 2025 09:00:29 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: tpedN10/dYPaICex8mDqh3Dgct8C/8MjyJwPUoJyGmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:44:b0:d1:11:9f:91:71:e3:8c:00:59:cb:5b:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jun 18 09:00:29 2025 GMT
Not After : Jun 19 09:00:29 2025 GMT
Subject: CN=f3b13fd2860ec36da0ec043f9ceb048a997459ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:a0:d8:b2:28:9e:79:b8:56:00:ef:3b:51:
54:59:4f:29:20:2a:8b:89:f2:a4:4d:50:96:97:c6:
17:4e:7e:fb:34:f7:5e:27:22:2c:5d:d3:91:66:62:
6e:45:7b:49:d0:1a:22:db:71:12:dd:e7:9f:91:48:
fa:8a:cd:f0:23:5d:5a:bd:88:16:2d:17:03:23:d9:
e7:d2:49:d3:02:d3:ed:17:0b:33:13:46:04:01:33:
5f:ab:da:80:e3:4d:ae:a0:bb:b7:0a:3d:dc:fb:f6:
40:5c:81:23:bb:ab:e0:25:d5:7b:bf:ea:18:41:53:
a3:95:5a:12:16:15:01:ef:1a:19:77:c4:f8:f1:6f:
40:54:10:0e:49:64:6f:b1:59:70:dc:a3:18:b5:cb:
b1:24:84:93:25:ff:b3:a6:b2:11:aa:db:71:11:9e:
e9:10:73:81:6c:27:2d:df:e0:60:4b:0f:7a:d4:a0:
68:2e:f8:bd:33:bb:86:0d:0e:6b:9d:72:3d:45:13:
33:4a:09:16:12:b2:1e:80:1a:1d:68:fd:a6:b8:1b:
63:65:b8:ce:7c:11:d5:58:4c:3e:30:05:8b:0f:ba:
c6:cc:11:d6:01:88:47:1a:d2:1c:2d:3d:6e:f8:79:
f6:14:ab:aa:c3:d2:88:33:e4:a3:00:e7:cd:3c:22:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B1:3F:D2:86:0E:C3:6D:A0:EC:04:3F:9C:EB:04:8A:99:74:59:EF
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c9:6f:18:ba:7a:53:73:44:88:f8:15:df:81:bf:82:80:40:
1a:7e:41:29:96:bb:f7:27:05:c6:7d:6f:7a:42:76:a4:ac:25:
83:65:10:66:f0:45:77:81:30:4f:1d:94:5e:fe:16:44:b6:fb:
f6:88:e9:db:6b:5a:1b:0a:f5:15:b2:da:a8:09:5b:64:95:76:
63:b8:09:83:b8:11:29:1a:c8:e0:d6:72:9e:6f:45:40:ff:26:
53:4b:7f:d8:3b:04:7b:d1:fe:85:a6:5f:0c:a3:a4:3d:a3:b5:
a1:fd:5d:2c:bf:74:e8:6a:ab:29:c1:27:90:35:d4:02:af:6e:
17:4c:27:2b:68:e3:50:98:8a:a8:d3:6f:12:2b:1b:96:ba:3e:
bb:83:9f:f5:c6:a8:8d:77:45:84:34:95:1f:8e:d5:de:0f:4c:
55:7b:d8:37:a2:ff:16:74:ce:f3:df:a0:80:b7:52:eb:e5:1e:
9c:c3:c7:43:64:d6:63:40:39:20:19:22:46:c2:97:28:14:09:
c3:d1:c7:46:5d:6f:b2:8d:77:ef:2e:d1:f5:1c:c3:40:c0:1c:
0a:44:ca:84:16:fd:40:34:4f:e3:05:3d:be:08:84:cf:6c:39:
8b:f0:c1:e8:13:5c:23:35:06:7a:10:e9:30:3b:9c:d3:76:9d:
1e:47:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:13:13 2025 by rpki-client