Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
File: MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft (raw, json)
Hash identifier: 0mpFVLs6EyZISGwNsVyPceQqN9y7pox6H+KS9Omv77o=
Subject key identifier: 0A:BF:39:52:89:44:7E:85:6C:73:35:F5:DB:47:DC:59:00:86:B2:66
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 01977865C879D1A11A0C5C3EE8ECC054080B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
Manifest number: 1333
Signing time: Mon 16 Jun 2025 11:00:25 +0000
Manifest this update: Mon 16 Jun 2025 11:00:25 +0000
Manifest next update: Tue 17 Jun 2025 11:00:25 +0000
Files and hashes: 1: LZ8uAkntmN0c-t2Y6sQNZXRHvWc.roa (hash: pnKmEkhVyamHT8q5re1u8FHw0CqLvJSlSrJsXdTnczY=)
2: MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl (hash: rabHgWlhChPYhOXEhgWKEOA5hXxTQg5f12WHz2vsp9U=)
3: RB-1Fy5sD5ZVDFZv751PSyh3H9Q.roa (hash: mxQ53KQYRRHLBJuqI/DtJ482oAxxveSfP/pLhygbyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:c8:79:d1:a1:1a:0c:5c:3e:e8:ec:c0:54:08:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jun 16 11:00:25 2025 GMT
Not After : Jun 17 11:00:25 2025 GMT
Subject: CN=0abf395289447e856c7335f5db47dc590086b266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:0b:6f:84:89:71:0f:87:9a:70:02:21:e5:
f7:cd:59:92:10:99:7b:cf:ce:6b:d8:4a:9f:83:5f:
06:e5:fc:35:c2:b0:30:e3:a3:5e:e6:f1:7d:53:b1:
72:31:39:a6:6e:71:38:bf:f0:65:72:8e:cf:e6:f0:
5b:be:5d:7d:c4:5c:1a:e6:79:e4:59:7b:41:5d:f0:
eb:32:70:a3:aa:14:a0:a8:16:b1:4e:b1:c7:e8:67:
61:c6:3b:6b:c7:ec:86:c7:2b:27:56:27:6e:de:ea:
a9:6e:dd:82:bd:11:4c:f5:39:17:3e:db:fe:55:72:
15:17:29:5d:25:eb:c3:a8:e7:e1:ee:01:41:a8:9c:
ee:4b:83:e8:41:bd:81:a0:2c:04:7a:30:2f:03:36:
08:05:db:71:59:15:58:8a:ec:73:9d:d1:25:09:5f:
ac:f2:7c:6b:98:ab:e6:ea:53:46:7c:ca:f6:1b:3b:
d2:60:a8:fb:17:5a:e8:d6:9d:1b:ac:57:6f:77:53:
0a:aa:8b:18:38:59:af:8f:89:fe:ae:9c:71:12:28:
a1:f1:31:48:d5:00:b6:b4:8d:b9:0b:88:68:ae:31:
bc:28:78:b3:00:ae:b7:07:ba:3e:34:11:cb:fa:04:
be:d2:41:e3:f5:29:ef:b7:89:f4:93:65:59:a3:b1:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BF:39:52:89:44:7E:85:6C:73:35:F5:DB:47:DC:59:00:86:B2:66
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:25:94:c5:c7:5e:1f:31:69:5c:32:6e:76:74:8e:b1:86:a4:
f5:b4:02:9d:7b:f3:4d:86:80:6a:97:d4:ad:47:85:ff:ec:ee:
2f:10:ce:de:5d:2a:e3:b0:19:a8:7a:8e:3f:ff:0d:22:8c:6f:
9d:85:cb:6a:9b:46:3a:ca:27:67:81:fe:2f:56:46:59:46:6d:
ff:65:9a:f4:a7:b0:e5:76:81:9c:e1:93:16:ad:51:c8:01:5c:
97:cc:0d:44:e4:a9:45:a8:26:8c:fd:99:7d:6f:df:02:74:f2:
f3:03:5d:cc:92:c7:cb:7f:31:fe:b0:d4:78:e6:96:21:39:f0:
7c:59:9a:ca:2f:5c:a2:65:12:ce:a4:23:69:52:8a:da:8b:1e:
0d:91:9e:6f:51:d1:c8:93:9e:92:ef:e8:b7:dc:c1:60:7f:85:
f8:ab:bf:00:82:20:6e:d9:ff:d6:60:9f:d4:7c:ed:10:d8:ce:
72:4d:f4:d9:86:59:d8:6b:57:1d:08:20:89:74:4b:48:9a:e3:
36:3e:b6:83:04:b2:56:7b:ac:41:25:34:09:b6:37:54:80:e3:
ae:ca:99:1a:73:17:cd:f8:36:a8:e5:73:63:0e:2a:3a:ed:23:
4c:1c:26:b0:54:9d:60:bb:d9:6e:fb:de:de:30:27:ad:f4:3f:
72:36:1c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:44:13 2025 by rpki-client