Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: aRa96IcWlTX2aX4cVLP5Yn2gpHe8qlGwmp0ZnnjpDFw=
Subject key identifier: 22:DB:50:79:07:18:E5:45:2A:E6:E0:7C:54:57:DA:C5:EA:A2:59:E9
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 01977A1D63F6AA39BDE1F5B8C9780D7169FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 19:00:35 +0000
Manifest this update: Mon 16 Jun 2025 19:00:35 +0000
Manifest next update: Tue 17 Jun 2025 19:00:35 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: glOKIagQFUQgeWcJ82b9zuu5SVMV8Av7boDcwVeYT8U=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:63:f6:aa:39:bd:e1:f5:b8:c9:78:0d:71:69:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Jun 16 19:00:35 2025 GMT
Not After : Jun 17 19:00:35 2025 GMT
Subject: CN=22db50790718e5452ae6e07c5457dac5eaa259e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:55:49:c8:0d:4a:6f:30:b1:90:24:22:cb:
9b:bb:3a:15:a0:36:30:58:32:28:1b:03:bf:02:7e:
8c:2b:1b:a4:59:56:19:1d:e6:e8:f5:e8:2f:49:08:
f2:dd:60:99:ea:e2:e5:a9:12:7b:31:b2:86:e4:ca:
6f:28:ad:0b:91:33:7e:93:88:db:ac:2f:39:60:72:
f8:92:36:06:f8:82:51:0c:38:17:62:d7:5b:92:6d:
0a:e5:44:45:bc:37:ed:b1:60:16:a0:d5:11:b1:42:
f3:8f:5e:4c:5d:b2:d3:9b:ba:f9:07:14:b8:a0:7d:
6e:c9:5a:fe:c0:03:c5:b1:bd:bd:b6:80:ab:e5:c4:
4d:1a:8d:8c:a5:d9:e8:83:e3:c9:0d:6d:27:f2:85:
23:4f:f9:fd:6b:a2:76:64:94:64:1b:4f:bf:93:ea:
2a:64:0c:45:7a:b3:09:28:8f:cb:45:3f:f1:35:03:
79:d2:35:ce:17:ff:ad:38:19:6d:96:20:71:ee:e1:
70:33:2e:e9:38:64:3f:65:22:6c:a3:98:07:d7:a2:
ca:8b:11:20:b8:85:8c:eb:33:af:4d:83:d0:7d:30:
e4:dc:42:e6:eb:a6:6e:65:ac:ee:e0:3e:8d:00:30:
00:46:4b:7f:10:3b:35:2d:fc:a8:50:6a:c5:85:82:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:50:79:07:18:E5:45:2A:E6:E0:7C:54:57:DA:C5:EA:A2:59:E9
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:be:c5:76:56:5d:66:10:01:0a:24:57:4c:aa:88:ae:d3:c8:
9a:b5:1c:2d:4e:10:02:1b:28:de:05:74:5e:52:9f:fa:f5:80:
ba:c3:ff:d7:2c:7d:07:7d:07:2b:e0:6b:f5:db:3d:50:fb:80:
72:d2:47:86:b3:da:f2:4e:34:91:59:1a:91:be:b9:64:79:0e:
9e:0e:9b:a1:7f:46:72:26:c8:07:37:c2:c9:c0:f1:f2:90:6e:
c4:d1:e9:f6:ea:76:f6:1c:6c:ab:e6:f1:78:ec:54:f9:fd:89:
57:2a:60:15:68:5c:4e:51:88:73:0e:a5:db:f1:e4:57:bf:c2:
ea:1e:bd:ed:f5:e7:27:6d:2d:4f:9d:34:d8:b1:91:d5:be:ec:
36:2c:9e:d9:da:dd:e3:0b:0a:cf:66:0d:11:57:10:ad:9f:0a:
63:21:4f:84:dc:3c:b0:d6:fc:47:ae:d2:d3:f5:a4:39:96:c4:
96:ef:9f:8e:fc:92:12:39:e2:df:40:ee:d7:85:ad:2a:b9:f4:
51:67:8b:c8:69:3b:6c:fc:16:ab:f3:78:86:a3:64:48:62:21:
4d:df:fb:e9:d6:82:03:5e:05:d8:db:1a:51:eb:f3:54:ce:8f:
cc:c0:e3:ed:07:a7:1b:bf:5f:24:2c:41:3b:31:8b:dd:1f:a9:
87:2d:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:04:22 2025 by rpki-client