Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: NVWFXTN33X380YX/SzdPPtaod4z8QZkUQA+jWkRtpmI=
Subject key identifier: 0A:83:6F:2F:9B:1B:29:6E:D9:D8:56:3A:C3:E2:D8:B9:F3:77:DB:7D
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 019855DFE2EA6F38916B39C30C3BD3F697FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 11:09:52 +0000
Manifest this update: Tue 29 Jul 2025 11:09:52 +0000
Manifest next update: Wed 30 Jul 2025 11:09:52 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: U9joDyUoY2jVP9rW4ZuPtgEEF7qd7AhtDfexmaFllk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:e2:ea:6f:38:91:6b:39:c3:0c:3b:d3:f6:97:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jul 29 11:09:52 2025 GMT
Not After : Jul 30 11:09:52 2025 GMT
Subject: CN=0a836f2f9b1b296ed9d8563ac3e2d8b9f377db7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:e1:25:2e:54:47:c3:19:db:bd:94:b3:ae:
9f:eb:f0:18:97:20:d5:52:f0:6b:49:44:74:fc:7f:
bf:a5:88:b2:13:8e:10:24:e1:58:61:2e:91:6d:6f:
12:55:07:9d:2c:24:3e:b3:81:48:42:2a:37:e6:e1:
04:c9:71:af:8b:3f:30:ce:92:3d:89:28:67:32:d2:
3a:ff:aa:ca:d2:4d:0f:6c:61:a0:1b:6f:31:3c:91:
a5:70:c4:43:3b:e7:c4:96:55:1c:ec:df:cb:50:59:
ce:a5:ae:b4:5d:af:85:d9:bc:ed:75:1a:5c:b2:b1:
16:e7:15:18:21:23:ff:d9:74:b4:fd:58:a1:cb:53:
48:a0:36:66:ae:84:6c:64:7f:eb:be:58:25:28:58:
1d:0d:56:45:73:c8:c2:18:5d:f4:3c:70:b6:4c:45:
2d:c3:da:42:fb:95:28:56:a8:85:f0:44:c3:b5:79:
f8:4d:d3:ba:1e:97:be:57:35:c0:fd:d4:56:ae:9a:
5a:ff:cd:a2:f1:76:75:80:df:17:52:c8:af:ef:de:
96:11:31:75:ad:bc:c1:17:72:42:34:f6:96:69:bc:
59:b6:5a:d7:81:b7:54:13:17:b5:51:b1:7b:32:1a:
30:e7:e9:39:18:77:5b:2c:47:45:f8:b2:c0:8a:82:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:83:6F:2F:9B:1B:29:6E:D9:D8:56:3A:C3:E2:D8:B9:F3:77:DB:7D
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7b:26:68:dd:8d:8c:57:54:e7:4d:d7:4a:d4:a9:d8:30:a5:
65:67:a4:31:33:b5:7c:86:3b:4c:4c:39:11:6c:88:bd:fe:fc:
31:16:8a:02:4f:6a:c6:dd:64:b8:f7:cb:ad:8d:94:68:ae:fe:
8b:ac:f2:5a:9c:d9:d4:f1:9c:44:85:89:21:ab:a5:30:4a:69:
36:9f:75:ed:1b:88:bc:3b:30:d7:17:cf:a4:00:7a:94:f7:31:
5d:6b:0f:19:b5:6f:c0:aa:75:82:ff:b5:61:6b:c3:b9:f8:e1:
c0:5d:e3:27:78:04:94:86:e5:f8:ee:1a:31:26:9a:40:6f:a0:
b6:9a:99:7c:7e:db:a6:a5:b6:c1:35:a0:af:50:06:ff:f1:7a:
3c:ee:9d:5e:f5:b8:05:89:09:62:4c:2e:52:75:2f:d4:6f:fb:
92:a3:e4:75:72:40:1f:e9:f5:d8:60:65:dc:6a:8b:6f:3d:7f:
e5:cc:67:46:36:9b:ad:61:69:a4:32:3d:9b:d2:e6:ff:45:5d:
c7:09:41:fd:65:b8:f7:a5:27:8f:5c:84:b4:73:85:ab:bf:38:
47:f4:95:78:da:78:c0:b2:a9:1f:18:62:d7:90:f2:09:25:86:
06:4d:09:d6:f2:56:f9:1d:53:c3:2d:a4:7c:3c:d8:89:43:3e:
cf:49:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:51:21 2025 by rpki-client