Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: fixGKvS/KGFbMWRdnMWTILh+t1I/AtXKtVFkQZpI5/0=
Subject key identifier: 6C:DE:DF:72:35:91:33:F5:01:B9:9B:4A:55:68:84:37:C6:5D:A7:90
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 01984AAE99E64F5C0A5B514A3ABBA915D7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0A6D
Signing time: Sun 27 Jul 2025 07:00:13 +0000
Manifest this update: Sun 27 Jul 2025 07:00:13 +0000
Manifest next update: Mon 28 Jul 2025 07:00:13 +0000
Files and hashes: 1: 67T4HBu1pG9u9uC3z_qV_yWI8m8.roa (hash: EFwv6mLYMzp3bgNxL88piWuR3/pmV9TsB1QPsdp3Sjg=)
2: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: nxqlbHv1WARqkBSM/sQCKOA41rf0aMHlZ2OZIXQwvhc=)
3: TFll5ENpjCR3fFAI_0E-ikt6_GM.roa (hash: cdCSDqZSpIOGUxCTSX+KjodpOB497W7vlYLMjlGxydw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:99:e6:4f:5c:0a:5b:51:4a:3a:bb:a9:15:d7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Jul 27 07:00:13 2025 GMT
Not After : Jul 28 07:00:13 2025 GMT
Subject: CN=6cdedf72359133f501b99b4a55688437c65da790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:81:b4:85:92:f3:ab:b8:bf:e1:b6:cb:e9:
0c:70:82:52:24:1f:e4:6e:4f:88:9a:32:8b:15:b6:
73:90:c6:08:ea:d9:fc:2d:0a:40:1d:be:3c:c8:51:
f7:a2:2c:f2:3d:3f:7c:4b:75:45:5c:b9:cf:7b:f7:
b7:f2:4c:fb:90:9a:e6:ff:64:ca:9d:a8:25:21:e5:
ab:d2:7f:45:c9:f5:f8:c7:b7:5a:24:95:5f:4b:83:
91:7c:50:3e:cc:84:22:d1:2a:69:97:08:a3:6a:fd:
4b:78:39:7f:ff:c7:d5:9f:5b:6c:00:31:e2:72:c4:
5b:ce:a4:30:87:fb:0c:0d:c6:16:ce:c8:0d:e3:b6:
f2:bd:bd:ef:a1:d9:a2:ef:18:eb:f7:17:bd:bd:d0:
94:4c:66:a9:f6:10:91:c8:84:6e:68:d3:f9:3c:c5:
89:ce:d8:27:72:3d:98:9c:5d:d1:7e:2a:01:40:c8:
3c:7b:33:25:c6:6f:57:3d:c6:8c:a2:40:95:38:b4:
9b:8b:c1:6c:31:ef:8f:62:76:44:d2:fc:a9:a0:8e:
76:26:ef:97:bb:5d:78:db:53:1d:7f:dc:e0:48:5a:
31:01:f3:9c:51:80:02:2c:29:f3:9f:af:c8:7e:67:
b2:39:2a:29:62:36:02:39:bd:fc:d0:39:e0:65:f1:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DE:DF:72:35:91:33:F5:01:B9:9B:4A:55:68:84:37:C6:5D:A7:90
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5e:f3:2f:21:0f:25:13:ed:bd:1f:9e:b0:e2:12:72:96:a9:
1d:db:69:41:65:5a:33:c9:a0:4e:a2:3e:72:f2:3f:6e:e8:bc:
f1:83:ee:da:fd:53:5a:8e:9c:0a:f0:37:fd:d1:80:c5:61:9c:
6f:d8:ef:43:68:87:a8:ee:c4:cc:55:f6:d6:18:d6:08:8d:98:
01:e9:f3:1b:1d:b2:29:fb:a2:01:e3:03:96:b7:69:61:b4:df:
40:db:88:1e:09:b9:58:73:02:54:f1:2e:be:e3:07:f8:3c:0d:
5e:c0:83:9a:4a:88:7e:90:7a:0d:17:3d:85:e5:70:4f:f8:be:
22:47:f5:c9:63:bf:32:f6:cb:e9:65:42:3b:9f:18:49:21:79:
fd:a8:98:b3:8d:ea:e8:c2:72:99:6b:8c:58:02:f8:09:cd:72:
3c:2b:e4:5a:06:f8:02:9a:fa:34:83:68:4a:62:fd:77:2f:05:
52:82:8c:8f:1e:97:17:23:93:7c:09:ca:da:b6:43:a5:76:9d:
0a:03:c1:6d:7a:20:90:b8:25:f2:d9:f3:6e:34:1c:5f:8a:0e:
ae:91:1b:95:5b:c7:ba:7c:58:46:cd:d7:29:10:f3:6e:1c:0c:
1c:42:b7:59:ba:be:3d:c0:65:29:f2:e7:4e:e6:ec:20:52:bd:
f5:99:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:26 2025 by rpki-client