Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: gGuYcBq8/EnK8DQAR5BwOdrl+aloDionsgn8Zfr2yI0=
Subject key identifier: 42:E7:43:0C:9F:3B:B3:52:0E:4B:CA:57:6E:69:44:CF:5B:4C:81:20
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 01983FBDF28CEE4545E06A4096B23EAC1B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0C7E
Signing time: Fri 25 Jul 2025 04:01:09 +0000
Manifest this update: Fri 25 Jul 2025 04:01:09 +0000
Manifest next update: Sat 26 Jul 2025 04:01:09 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: 8G84orYDgb0ZjUFuBgUxecFkLNvZjW9YgiQjCiJVBgA=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:f2:8c:ee:45:45:e0:6a:40:96:b2:3e:ac:1b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jul 25 04:01:09 2025 GMT
Not After : Jul 26 04:01:09 2025 GMT
Subject: CN=42e7430c9f3bb3520e4bca576e6944cf5b4c8120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:8f:21:f8:fb:8c:14:43:88:e8:0e:1f:8f:
0a:21:6b:8e:13:7c:c0:d9:98:ef:e8:45:56:d3:ff:
8f:71:6f:56:8a:70:3d:49:08:0a:52:ae:fc:41:c8:
60:49:76:98:aa:cc:1d:93:f3:55:99:74:cf:f5:c2:
d5:30:21:37:22:e1:17:9f:c9:f7:b3:f1:a2:dd:70:
21:d7:fd:db:d4:1b:77:f4:29:13:6c:c6:c5:5a:c7:
ef:a0:b9:d3:0d:85:3a:5f:a7:b7:40:51:b3:1d:72:
84:df:1e:2b:1e:b5:3c:5e:cf:fd:46:ad:20:21:b6:
d8:dc:d0:38:ad:45:f3:eb:9d:83:a3:c3:f5:94:2e:
e5:6a:06:01:73:4e:bb:be:b6:05:f9:a7:a9:7a:4e:
09:0c:30:df:bf:4e:9e:e7:4c:74:fa:bd:34:de:c4:
1e:6a:41:bd:29:fc:d0:dc:fa:d9:6a:1e:57:ff:41:
e7:25:9c:65:be:bd:6d:66:a2:d4:e8:a5:3e:12:a2:
93:6e:6a:66:79:c7:b7:8f:97:89:57:dd:a6:c6:96:
b0:e8:48:03:7e:1e:3c:63:14:14:b7:a2:d0:dc:9d:
cb:d5:1e:4b:1e:c2:95:35:ef:a7:b1:67:ba:1a:55:
4e:af:1d:45:db:ee:1f:59:c1:88:8d:3c:93:9c:19:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:43:0C:9F:3B:B3:52:0E:4B:CA:57:6E:69:44:CF:5B:4C:81:20
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:71:04:e0:23:49:86:e2:7d:0e:13:ba:a7:aa:a0:9b:ef:3d:
f8:05:e6:fa:ec:4e:2c:9b:b4:a2:ac:c0:3a:3b:67:b1:77:d0:
a0:0b:19:1f:69:77:f2:12:aa:38:dc:db:32:8f:0c:24:23:16:
b8:ac:3a:8f:0a:67:8d:4f:8f:3c:7f:ab:0f:3a:49:7d:a0:34:
8d:0a:72:28:9f:e3:18:d6:c8:16:ba:1f:95:c3:b1:37:9e:63:
01:b2:4f:7f:43:3c:84:0c:8b:58:0b:8c:a5:ac:d4:a2:91:17:
d7:b2:51:11:57:bd:cd:1f:c2:21:52:31:1e:34:5d:e6:b8:e6:
93:2f:24:8b:be:a9:a8:ee:f1:ba:9e:af:48:08:3b:ea:e8:33:
8e:d8:3f:d6:0b:e2:4b:06:41:d7:39:ae:8f:ab:07:dd:15:0a:
70:c4:e2:bb:1f:72:f2:de:2c:a3:c2:d1:69:26:7c:60:39:08:
3e:87:34:a8:40:05:f1:bf:4c:c9:a4:e6:d3:92:8f:bf:8d:11:
e1:65:78:8e:5a:7a:95:b6:5c:81:40:68:f4:89:93:04:fa:57:
63:f5:95:7b:82:4c:e4:7d:45:db:50:c7:f6:b6:d8:6f:7a:dc:
a4:e4:09:cf:6a:23:06:a9:ec:4c:71:08:ba:02:ee:23:a1:9b:
fb:09:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:01:56 2025 by rpki-client