Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: 2Y4UJFb2myy3RI8s+IEXRoc+QTgVyCOmzOCsTEW6w4c=
Subject key identifier: 0A:8E:B5:34:CA:1A:9F:85:C8:C1:DF:AD:6D:25:38:59:E7:A5:42:38
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 01984777015FA7E1B3CF9A4A32F463D1B69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:00:38 +0000
Manifest this update: Sat 26 Jul 2025 16:00:38 +0000
Manifest next update: Sun 27 Jul 2025 16:00:38 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: MT5TY7hRyI/bmCXuijcXGk+3SZPfDxOt5+O/YNNVTfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:01:5f:a7:e1:b3:cf:9a:4a:32:f4:63:d1:b6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Jul 26 16:00:38 2025 GMT
Not After : Jul 27 16:00:38 2025 GMT
Subject: CN=0a8eb534ca1a9f85c8c1dfad6d253859e7a54238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:14:66:05:c3:7a:99:27:1f:02:92:03:54:
94:5d:d6:d7:5d:42:f7:ae:e3:3f:d0:73:01:98:83:
f9:83:11:a9:75:90:a6:be:bd:b2:4e:d8:fc:bf:73:
bc:e3:0d:1e:f9:72:b9:09:ad:5c:94:49:0a:c6:53:
78:60:24:05:4c:d6:80:b7:a3:93:e4:af:41:68:57:
d5:08:85:e7:1a:5d:2c:06:bf:b3:45:b4:b3:92:33:
bf:d5:4f:9a:92:ed:75:d3:8b:c3:ed:a3:b6:f4:30:
ac:e9:eb:fb:a5:62:c3:d1:a2:e8:73:2d:3b:92:94:
a3:bf:65:58:a2:36:9e:5c:c5:1e:e8:80:ed:3b:29:
7a:e0:f9:ca:7e:b3:3e:fb:b4:d0:23:c7:1a:ae:40:
cc:71:48:eb:1b:c6:76:03:a7:75:22:66:b1:2a:47:
b7:d9:13:1f:dc:f6:ab:21:48:3d:60:3a:01:3f:cd:
5f:26:07:f6:45:02:0a:c4:f8:17:e5:ea:3c:5f:0c:
10:64:30:3e:3f:3d:7a:32:bb:76:aa:75:c4:71:97:
2d:d4:1d:6f:89:c4:87:c0:d0:41:13:ff:5d:42:6f:
af:f8:e0:1c:5f:d8:cd:ee:e2:79:58:de:c9:17:ec:
53:c7:91:38:a6:7f:ea:6f:bb:ff:14:53:c2:36:5d:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:B5:34:CA:1A:9F:85:C8:C1:DF:AD:6D:25:38:59:E7:A5:42:38
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a8:a8:a4:85:35:7d:06:ab:af:da:9f:71:af:95:b2:8f:ad:
78:c1:27:f5:ee:d6:7d:17:6a:4d:c2:1d:97:2e:f9:a2:ff:9c:
78:31:83:9b:8b:b8:b4:f9:ae:1b:5c:7a:ab:35:42:2c:dd:75:
6f:00:b4:89:bf:c5:e1:5f:28:b7:79:60:ad:72:4b:5f:fe:5f:
e9:0b:02:01:c6:51:a8:dc:4f:b7:d1:7b:09:e8:b1:62:65:11:
fb:8e:a4:40:70:10:6a:c2:d6:6b:7b:40:2c:82:3c:67:c0:fc:
5f:1c:0a:92:94:0c:6f:fd:a8:78:1d:f7:c5:78:59:8f:e8:9f:
6e:9a:52:a3:0a:12:b9:5a:40:15:a5:8a:44:f4:14:ae:51:d3:
ec:56:61:4f:eb:be:96:1c:01:ce:1e:6f:cc:ce:70:43:99:fb:
3c:e8:7a:01:15:c0:87:ac:73:49:ef:f8:eb:76:b7:fc:77:f6:
7f:d8:c9:9a:73:03:23:83:4b:35:d3:6a:14:bc:87:02:ff:b4:
41:41:8c:4d:aa:ab:0a:f3:e3:83:2b:31:4a:37:81:f0:62:d8:
23:2b:e8:25:65:da:9c:8a:96:6d:7c:8a:f0:66:cd:ef:64:6a:
90:78:4f:cc:77:dd:20:f4:ed:e2:04:7b:6c:18:7b:f8:22:10:
3f:ac:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:56:44 2025 by rpki-client