Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: cjy7oGnPkra//YDAVYUESSV/F3mNpTH2yJj+MUxDjdk=
Subject key identifier: 72:F3:57:F8:9A:1C:BA:21:23:5A:82:A4:58:85:31:D1:6F:66:2F:EF
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 01976C625EE9B31A269757E300CC274CFCF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 03:01:15 +0000
Manifest this update: Sat 14 Jun 2025 03:01:15 +0000
Manifest next update: Sun 15 Jun 2025 03:01:15 +0000
Files and hashes: 1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: dtEUT2FLn7IXJFWBL2qQkafKj8gGY3yGXFUBE94PEFE=)
3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:5e:e9:b3:1a:26:97:57:e3:00:cc:27:4c:fc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Jun 14 03:01:15 2025 GMT
Not After : Jun 15 03:01:15 2025 GMT
Subject: CN=72f357f89a1cba21235a82a4588531d16f662fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:d3:5c:b0:5e:6b:12:7a:22:9d:50:5a:05:
d6:1f:82:73:a6:27:6c:80:1e:fb:92:cf:93:bf:a2:
b6:53:89:b0:6f:fb:a3:e9:0c:d6:87:11:41:cc:81:
56:21:1f:5a:b3:4e:47:86:9b:6e:b3:2b:69:a1:ed:
69:83:e2:91:88:d9:33:21:24:3b:a9:88:97:6f:82:
97:75:89:9f:37:9d:1f:e0:f3:ca:70:52:c6:8d:93:
71:53:a8:54:1a:8c:45:2b:55:a0:c2:20:18:c5:e1:
50:73:a8:85:09:77:90:c2:2d:e4:d5:b1:0f:4d:df:
7f:a7:13:8e:01:34:78:0e:5d:56:bb:c8:d6:5c:c1:
20:e4:49:3a:1f:49:97:b0:dd:ae:b5:25:4e:1f:9c:
fb:85:c7:05:31:9d:5c:05:cf:cb:36:73:80:96:8b:
3b:74:dd:f1:b5:7d:97:b7:3e:40:06:d3:fc:e1:c5:
52:73:e4:ef:47:9f:af:40:4d:e5:ff:65:63:1e:0c:
05:05:be:f9:78:c8:2c:2c:b1:cd:4f:b0:31:8a:23:
1c:1f:3d:71:e3:56:e6:2c:bd:b1:a5:fa:d8:eb:96:
97:3f:45:07:77:d7:39:09:26:7f:05:e6:da:c0:04:
ca:f7:77:bc:c9:41:46:c6:a4:f2:39:cb:63:54:0b:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F3:57:F8:9A:1C:BA:21:23:5A:82:A4:58:85:31:D1:6F:66:2F:EF
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d5:e1:43:f7:6c:18:b9:3b:e2:bb:5a:8c:13:d3:dd:55:30:
30:d0:3b:28:a9:dd:c5:da:73:c7:20:f2:3e:30:66:86:69:01:
91:6f:08:d4:91:4d:7c:77:ea:7f:19:7a:f8:a4:a4:af:ee:17:
9b:72:be:91:d7:2f:fc:38:2e:08:0a:94:f1:cd:ba:22:5b:eb:
8f:d7:c6:a3:f3:2d:8c:0f:21:a0:53:d7:33:a6:1c:12:aa:63:
b2:93:25:a4:20:3a:62:0b:39:36:8d:8b:0b:09:8c:ae:7b:e0:
62:e0:6e:a5:86:bc:c7:e6:f6:7b:a9:6b:35:3a:c2:e9:29:b5:
d0:8d:ca:75:4e:f5:3d:81:fd:24:6c:e4:1d:d2:f5:10:94:3f:
93:cc:93:2d:0b:23:bb:a8:67:dc:a6:18:50:19:47:f5:67:f2:
9b:5f:b5:34:92:cf:7e:6c:b8:d6:78:7b:80:d8:a6:65:e2:f2:
5d:fc:69:a7:f2:b6:5c:28:48:e7:ad:04:be:dd:c3:c9:f8:aa:
e3:28:d9:4b:03:92:88:83:05:45:90:6c:ff:2a:27:4f:3e:91:
e9:bb:c8:31:90:ee:10:13:dc:ec:fd:38:58:ca:b7:28:2f:0e:
dc:62:0e:3b:16:38:d5:a2:30:5e:d7:36:7b:19:10:39:e7:80:
5a:39:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:48 2025 by rpki-client