Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: 1FA2jsYYiaHYOXrdcsZ9szlCEe0OeqqCSxCTKHL8iOw=
Subject key identifier: 41:5F:63:C6:23:63:05:44:54:84:8C:95:B3:BB:8A:BE:E5:73:28:AC
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 01977188A8AC8A797FE35553B73AA2646404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 03:01:10 +0000
Manifest this update: Sun 15 Jun 2025 03:01:10 +0000
Manifest next update: Mon 16 Jun 2025 03:01:10 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: enZD9x7/qRdzaJiB+GEVyVDswhlmfZDL5Krhywr1YE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:a8:ac:8a:79:7f:e3:55:53:b7:3a:a2:64:64:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Jun 15 03:01:10 2025 GMT
Not After : Jun 16 03:01:10 2025 GMT
Subject: CN=415f63c62363054454848c95b3bb8abee57328ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:18:e8:8e:b4:28:40:73:44:9d:33:98:9e:
fe:88:e1:9e:df:05:db:27:e8:9b:71:5e:81:b9:0c:
e9:1b:0f:3e:c4:a1:df:83:76:e6:3e:0e:3d:a0:66:
1b:ff:fe:3f:b0:04:6a:94:19:de:24:21:97:70:b2:
f0:13:36:22:79:9f:34:b8:1f:ff:8a:6e:f8:e2:c9:
bb:d1:de:8b:c9:b7:95:d8:8e:48:39:42:2a:64:25:
47:de:bc:24:02:0d:19:39:0b:20:fa:39:cd:34:91:
a2:a3:a1:34:14:6b:09:03:0f:9a:82:0f:e3:98:8f:
ba:ed:07:37:1b:39:c0:86:f1:19:d6:50:d9:03:91:
f6:7d:10:23:0e:98:09:e7:4a:c7:d6:88:69:ae:74:
dd:7f:9f:a1:c8:a5:3e:81:fa:37:21:00:4e:46:26:
4b:55:78:3f:eb:06:8b:ee:8c:cc:1d:24:5f:36:7e:
e3:e3:e1:e1:98:82:38:c1:d3:48:eb:fa:9c:15:53:
f1:2e:11:fb:96:dc:67:ab:f3:62:94:fe:80:8a:ff:
c5:93:1c:a4:65:c7:44:46:49:28:a7:6f:9b:4c:91:
94:73:e6:cb:c5:13:c7:58:69:7e:e3:2a:53:e9:81:
64:0e:67:f3:80:d4:05:b9:60:67:07:d2:4e:a5:7a:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:63:C6:23:63:05:44:54:84:8C:95:B3:BB:8A:BE:E5:73:28:AC
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e4:ab:5b:f9:6a:b8:33:bb:b4:cd:06:32:78:d6:7c:1b:b2:
f6:b2:b7:49:25:2b:56:a0:07:34:36:78:dd:49:49:53:3b:04:
21:a3:cf:d3:49:03:7b:61:83:32:65:c5:e5:5f:d1:d5:dd:eb:
38:89:8a:b6:ff:2e:9d:95:15:22:ec:a7:07:10:93:3d:d0:db:
e2:0b:f1:a3:e0:85:ba:aa:9b:a1:56:dc:9d:8c:dd:01:a3:cd:
4a:52:7e:c9:5b:34:ba:f6:8d:f0:79:58:9c:02:80:95:67:ed:
2a:55:49:84:a3:32:07:f6:dc:3e:0e:a1:a6:15:7e:db:ce:95:
8f:d3:e2:72:10:ac:7e:d2:c0:a1:e8:ce:cd:2f:51:f8:b4:16:
5c:13:d7:02:00:0a:7a:8e:c2:df:15:6a:1f:61:ca:99:48:e8:
f8:3b:d3:b9:4e:cf:38:f7:3e:76:4a:d2:59:f0:c1:8a:9e:5d:
8a:99:6a:a1:e0:43:ed:78:b7:09:a5:77:bd:30:40:1c:b2:5d:
78:56:c0:9d:38:5b:48:92:e7:fb:87:06:6c:84:9c:05:f0:97:
dc:3e:83:f4:eb:db:53:9a:30:ed:d7:f9:60:85:27:95:11:02:
92:52:25:e1:3b:ae:40:60:80:16:2a:d8:43:b1:ff:48:b9:10:
f5:2c:76:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:00 2025 by rpki-client