Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: dolWf0MmMABAaaz+OwypjP/tWlviDDwICvbSeqSewUQ=
Subject key identifier: 41:07:04:3D:FF:2A:9D:D3:68:B2:A5:40:76:FE:20:45:64:D2:7A:92
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 01983CF2F6889251D416D93257FF2C569E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 06D0
Signing time: Thu 24 Jul 2025 15:00:12 +0000
Manifest this update: Thu 24 Jul 2025 15:00:12 +0000
Manifest next update: Fri 25 Jul 2025 15:00:12 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: LPebk6SEXt1+vqRXQlhwbNv8bhhsahR1Wt8nAv51xE8=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:f2:f6:88:92:51:d4:16:d9:32:57:ff:2c:56:9e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jul 24 15:00:12 2025 GMT
Not After : Jul 25 15:00:12 2025 GMT
Subject: CN=4107043dff2a9dd368b2a54076fe204564d27a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:70:45:b9:0b:a0:71:75:78:ab:a1:0b:c7:
d3:7b:79:d5:01:07:bb:5b:43:6b:8e:22:52:e6:7e:
a4:ec:82:5e:e7:fa:32:d9:c9:2e:4a:43:a6:53:c6:
df:9f:ef:00:93:e7:4a:86:12:17:81:c0:87:86:94:
75:38:92:f0:78:dc:12:41:33:85:dc:0d:c7:11:24:
d5:58:d7:46:d9:9b:4b:27:4d:8e:fe:0c:31:1c:ab:
56:b9:7f:5b:40:53:34:80:94:6d:f6:39:c8:09:99:
f8:9d:5b:a5:87:77:b7:4d:81:53:fe:a2:63:dd:f0:
a2:7c:6f:2e:ef:24:ea:2d:a4:88:d9:ee:09:a7:2a:
07:44:b4:9f:ac:47:0f:33:5f:5c:67:cc:35:5b:60:
12:73:5e:cb:46:96:c7:8d:16:b4:d9:47:67:b6:5d:
45:37:8f:b8:35:d1:7c:dc:e1:c8:51:ca:ab:10:d6:
27:58:71:54:61:aa:b9:1c:f2:15:2e:f1:43:c1:ef:
1e:96:a5:d7:bd:8b:03:0f:b3:84:86:ec:28:7b:a8:
6e:fc:9d:ab:dd:cf:20:08:4a:50:5b:d6:6e:45:93:
d8:e0:9c:58:0a:0e:d7:51:a7:e9:9b:16:cd:fa:86:
c4:e8:82:c3:53:46:9b:4b:72:9b:89:97:73:8e:97:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:07:04:3D:FF:2A:9D:D3:68:B2:A5:40:76:FE:20:45:64:D2:7A:92
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:07:0a:52:00:06:70:90:30:d3:63:c7:5d:97:8e:01:4f:3f:
fb:00:79:ac:45:81:58:19:35:4b:9f:f8:73:94:dd:51:27:3e:
29:67:fa:97:b2:c4:85:88:80:2c:0b:86:cf:3a:fb:15:cc:00:
47:13:92:1e:c5:23:cc:8c:f0:14:94:e9:fb:a0:fd:b6:01:43:
ef:fa:f7:9a:76:f7:28:88:c5:4b:71:ef:15:21:7a:84:ab:7e:
0f:e1:14:8d:9d:3e:cc:29:ac:89:03:1b:0c:0b:91:b1:23:81:
cc:81:2f:f7:c2:b8:30:f1:68:58:2a:fd:a0:55:e9:4f:0a:35:
c8:47:13:57:70:3f:13:0c:10:9e:72:aa:31:82:34:71:1c:01:
f4:b0:86:37:b3:0f:68:36:78:e2:2f:7b:45:5e:5a:3e:a9:63:
eb:68:d6:ff:a8:8e:0d:5f:62:e0:de:c7:58:1b:92:47:7a:65:
e4:40:3e:82:27:73:e8:0d:22:f6:4a:7c:59:b0:f3:aa:d5:f3:
c5:e8:45:3c:0b:9c:72:75:9c:5f:3d:42:5d:86:3b:13:d0:2e:
19:1f:33:9a:e7:53:8c:9a:93:d6:a9:f2:63:83:59:55:9c:97:
91:c9:64:63:b2:2e:5d:eb:c4:50:2c:e7:71:9c:83:b2:5c:dd:
64:5b:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:30:51 2025 by rpki-client