Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: 4hTdGFaKBEbBDCdGUw786Tz1fnQbUcz5caV/CU76m5U=
Subject key identifier: BB:15:F2:B3:FD:35:36:4D:B8:CF:B9:FD:50:62:A1:B8:4C:B4:E0:9F
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 019769CE7BA9087441CC4D1F72D30872BADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 12B7
Signing time: Fri 13 Jun 2025 15:00:29 +0000
Manifest this update: Fri 13 Jun 2025 15:00:29 +0000
Manifest next update: Sat 14 Jun 2025 15:00:29 +0000
Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=)
2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: 7ZoRf75d6VhUMo6RittruvOTAuQu7Okn638ZyBqWKCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:7b:a9:08:74:41:cc:4d:1f:72:d3:08:72:ba:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Jun 13 15:00:29 2025 GMT
Not After : Jun 14 15:00:29 2025 GMT
Subject: CN=bb15f2b3fd35364db8cfb9fd5062a1b84cb4e09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:fa:a4:bc:74:b0:68:ea:00:5d:31:25:71:
3f:c3:52:06:db:ce:50:5f:21:50:d6:45:36:14:67:
b6:0a:35:d5:90:c2:d3:b0:53:b4:68:34:1c:62:f2:
b0:8e:8b:d6:d9:ec:93:ae:d3:f0:21:2b:da:dd:b6:
27:fb:94:da:1b:11:4d:8c:90:67:94:92:93:01:74:
28:97:0f:cb:fc:34:e1:bc:4f:5e:94:9d:56:c3:3c:
dc:be:61:b5:38:03:d6:ad:fe:52:64:ab:3e:0b:b6:
0c:65:81:ff:57:e7:42:5f:fe:2a:50:1b:3d:6e:ef:
67:72:5f:5c:cf:dc:bf:07:d3:ce:fb:5e:a6:a2:c9:
6d:dc:b3:31:b3:c4:40:87:5b:2d:c7:58:91:fb:a0:
b7:0d:c9:ce:84:29:4a:78:b7:2e:aa:29:a3:3f:c9:
13:33:d6:5d:e7:41:7e:96:cf:ba:86:2a:8b:dd:23:
ff:64:37:c4:d8:65:b6:93:08:a8:1f:dd:37:98:4d:
f5:86:14:39:d8:c6:4b:98:70:10:de:8c:bb:59:cf:
d7:e1:0d:0b:f0:d5:bc:6c:52:4d:56:ad:4c:f7:e4:
ea:7a:a5:62:f7:69:3f:af:ec:5f:81:c6:2b:b3:f3:
90:8e:9b:c8:35:41:7d:75:29:f9:25:84:01:b9:31:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:15:F2:B3:FD:35:36:4D:B8:CF:B9:FD:50:62:A1:B8:4C:B4:E0:9F
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ba:16:61:2c:df:4a:c4:32:72:81:33:7d:3f:cb:fc:db:ea:
90:2f:78:d5:7d:b1:6d:e0:43:e8:25:ce:8f:d1:5a:14:a1:50:
83:41:1f:c8:3d:00:b8:88:6c:c9:2d:9b:41:54:aa:25:c0:bf:
99:7f:ec:92:6b:78:00:aa:61:b6:9c:ec:1d:1a:55:fb:59:df:
cc:0d:b6:4c:29:84:72:e1:c0:41:9b:de:62:45:08:00:0e:78:
ba:de:3e:40:6a:83:90:85:6c:3d:29:be:a8:08:1f:e7:86:53:
fa:26:62:51:8a:01:ee:fe:9a:8b:f1:34:4c:05:4d:56:73:bb:
ca:eb:c3:e3:76:01:83:1b:7a:90:b5:12:25:2f:69:e1:6d:fa:
2d:e9:bd:2e:8f:15:d8:03:f7:5c:39:6e:dc:04:af:2d:e8:be:
6c:a9:38:03:f7:22:29:53:e2:60:9c:59:c6:bf:0c:5a:00:a5:
83:d1:c3:b2:17:cb:e2:23:11:09:17:e5:1c:50:5f:08:81:b9:
72:72:c6:59:93:b8:08:ff:68:73:4a:0f:99:35:28:d4:50:ba:
98:f4:1d:51:d9:6b:f6:f9:3e:79:27:d4:98:a1:ab:d2:cc:6b:
4c:d7:d2:ce:1d:ed:e7:7c:df:d9:26:f8:e6:6e:49:4c:20:14:
14:c7:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:44 2025 by rpki-client