Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
File: MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft (raw, json)
Hash identifier: bsCC5K1sfgCshXygslAmX1MkDcntvV7GRVQrJC0VCcY=
Subject key identifier: D4:7E:57:7E:BA:37:20:54:E0:B6:C9:14:99:2C:FA:BB:F2:66:96:EF
Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Certificate issuer: /CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Certificate serial: 0198451A47B890DB026ADE0EA8F0819A4386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
Manifest number: 0DFE
Signing time: Sat 26 Jul 2025 05:00:06 +0000
Manifest this update: Sat 26 Jul 2025 05:00:06 +0000
Manifest next update: Sun 27 Jul 2025 05:00:06 +0000
Files and hashes: 1: MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl (hash: gYNNVGwSUxrCM2JnSOUfTV32SPYDl0yejEaLP0veTf0=)
2: QXjAwQSpvYGLG9EKG43DcrvrWjg.roa (hash: /g3NGPvML9niLWrxGUEsCrw0JcuhbxCMPrgB31IKq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:47:b8:90:db:02:6a:de:0e:a8:f0:81:9a:43:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Validity
Not Before: Jul 26 05:00:06 2025 GMT
Not After : Jul 27 05:00:06 2025 GMT
Subject: CN=d47e577eba372054e0b6c914992cfabbf26696ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:b0:04:9b:d0:ea:82:3a:b1:9e:78:61:a2:
05:26:d2:79:d4:33:26:a9:4b:8c:94:8a:c8:b6:99:
ac:da:77:da:5f:86:ce:5c:fc:f3:e3:d0:58:ec:1e:
2b:11:af:12:47:23:f3:7b:b5:ea:60:18:23:50:d8:
8d:79:53:d9:3f:e2:1d:c2:c4:66:76:f3:5b:ee:17:
09:40:14:50:05:f8:d0:5d:ca:99:a6:c4:8e:5e:ed:
57:56:51:d2:e5:e5:29:68:10:e5:33:fc:8e:b6:a7:
da:72:8d:95:8e:90:35:bf:84:a2:e8:85:e3:34:cc:
ab:9c:0f:f8:94:9a:a2:d0:3a:d0:df:f7:82:cb:ff:
f2:5f:48:c0:fe:fc:13:55:8e:b0:5f:d2:49:cb:09:
85:f3:74:e4:10:33:19:b5:ef:33:fc:8b:e6:82:6d:
bb:f8:cb:a2:45:29:89:86:44:db:b0:b5:c7:78:dd:
d6:4e:36:a1:49:9a:86:db:5c:16:8d:cc:0f:9b:50:
eb:4a:e2:04:07:5d:3c:c1:07:b9:c2:51:ef:46:90:
81:a8:8a:5a:fb:e0:89:0a:84:12:ad:6a:4d:ed:3b:
cf:34:67:85:fb:39:83:2e:78:18:50:ac:a3:09:b3:
e8:09:2b:b2:a4:99:93:bb:3b:b8:c0:4e:3a:41:12:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:57:7E:BA:37:20:54:E0:B6:C9:14:99:2C:FA:BB:F2:66:96:EF
X509v3 Authority Key Identifier:
keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:db:30:c8:3f:6f:7e:38:45:5a:be:d5:4b:7d:d8:24:71:31:
80:68:8e:e1:6b:af:96:ce:b5:b2:ac:ff:0d:73:17:97:8d:08:
bc:8f:d2:e3:6b:b5:f7:65:88:df:5d:d1:5a:33:b1:c8:f5:ee:
b1:81:40:3b:b6:60:6c:2a:3c:f1:b9:f7:2a:eb:de:15:cd:63:
a1:09:a5:20:6f:49:51:cd:57:ed:47:4e:93:61:0f:bd:c2:f1:
0d:87:f6:00:ec:d1:6c:de:d4:fb:48:1c:99:0f:1a:e7:55:89:
28:38:06:4c:04:c2:8f:fc:84:c4:e3:0f:00:3f:32:15:cb:f5:
60:d1:76:ed:7a:03:30:89:e9:a2:9f:59:3a:d9:a2:55:60:7d:
05:ac:d2:6e:73:ed:e7:42:79:78:04:93:d8:7a:0b:25:37:26:
82:a9:1d:68:30:ff:8f:a6:75:31:6c:ff:d1:e9:b5:bd:ad:e9:
08:b8:84:29:f3:7f:cd:9c:1c:04:c5:77:e6:db:3a:68:21:8b:
6c:33:7f:b4:73:c6:81:63:c3:ad:94:ae:37:6d:48:92:55:be:
ef:75:ff:70:08:ee:88:4d:9f:55:29:a9:1b:73:1f:f9:3d:a0:
94:cc:76:e9:4a:84:d1:c0:36:f0:5a:fe:25:05:a0:75:ee:e7:
c4:73:29:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:23:33 2025 by rpki-client