Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File: mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier: GzNN9zRRFW+7DO1+qBaRsN443+LXPSuIOxfnW7LJpDI=
Subject key identifier: 0D:65:03:FE:D2:1C:9A:0A:FE:E9:63:6B:B3:92:A3:C5:5D:0C:20:FC
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer: /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial: 0198394DBF9332AA3AFC49D42A731952721B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number: 0B53
Signing time: Wed 23 Jul 2025 22:00:53 +0000
Manifest this update: Wed 23 Jul 2025 22:00:53 +0000
Manifest next update: Thu 24 Jul 2025 22:00:53 +0000
Files and hashes: 1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=)
2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=)
3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: U17FmRiopCYv5+Bc1/oEprMyojyPlJm6tyD+GBhRU1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:bf:93:32:aa:3a:fc:49:d4:2a:73:19:52:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Validity
Not Before: Jul 23 22:00:53 2025 GMT
Not After : Jul 24 22:00:53 2025 GMT
Subject: CN=0d6503fed21c9a0afee9636bb392a3c55d0c20fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:77:eb:ac:d8:34:8e:c0:d7:a9:06:c9:d6:c2:
1d:21:10:ec:e3:b3:54:75:3a:79:23:58:b7:90:03:
82:42:34:70:76:ac:63:27:33:b6:6b:d2:89:e6:8c:
5f:38:b0:0a:a5:48:77:f4:2c:19:50:8d:71:d1:cb:
e9:a2:0b:3c:e5:d3:26:12:d4:8c:22:f3:81:39:84:
27:79:25:0f:9a:14:53:60:1f:cf:0f:8d:12:72:eb:
45:69:aa:40:61:89:2a:c6:13:26:ae:d3:dc:82:28:
d0:53:a2:10:33:ca:65:1b:45:0b:03:49:be:55:54:
b4:7e:5d:83:cf:a9:42:2d:1b:e1:ba:0e:48:6d:d1:
36:9c:ef:54:6f:94:e0:ac:b3:cc:d6:19:e9:b3:8a:
32:13:7b:d7:b3:bf:f4:8a:07:50:f0:e7:80:ca:c5:
2a:a4:4a:6c:3b:5b:6b:48:fc:0a:9b:11:b2:1a:29:
16:69:35:2b:d0:b8:f7:38:5f:d0:c3:8f:9d:c0:47:
11:1d:70:cd:36:25:0d:38:69:14:b9:e8:9d:e5:cf:
4e:4d:12:de:c9:a7:e9:72:5b:a7:12:76:91:0d:cc:
43:5e:c7:c2:cf:74:6e:e6:c3:96:42:67:66:12:06:
71:91:8e:55:e3:b2:19:26:3c:39:66:58:b4:ab:52:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:03:FE:D2:1C:9A:0A:FE:E9:63:6B:B3:92:A3:C5:5D:0C:20:FC
X509v3 Authority Key Identifier:
keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:66:10:79:24:11:3f:54:88:56:79:6a:bf:1f:8e:eb:d3:18:
07:c2:d7:b3:50:27:8d:b4:54:e4:b2:21:66:4c:ec:22:c9:26:
b7:dc:8d:45:ca:58:fd:16:a8:21:fe:1d:ca:56:21:c1:17:ed:
90:e8:35:da:b6:12:e5:5b:e9:e2:69:00:d4:2d:4a:ab:d3:52:
e3:56:ae:ee:02:cc:75:60:af:70:b0:c3:5e:ce:f7:79:ee:6c:
65:1c:3e:ed:96:fa:18:a0:5c:0a:06:bf:bb:fd:ac:b9:94:c0:
79:8f:0d:a1:cc:b7:27:f7:82:d9:f2:ea:d3:23:05:9c:62:00:
4a:1b:39:1c:f7:07:8d:5e:bd:b2:12:d0:ad:f8:dc:51:a7:6e:
1f:7e:94:5e:73:4f:82:b5:3e:db:9a:02:00:e3:35:db:0c:19:
bf:7c:56:c4:82:58:b3:33:24:55:72:8c:7f:86:eb:0a:1f:90:
2b:5c:33:d2:ae:b2:c5:76:d2:3d:9f:43:ad:25:8b:dc:35:52:
a9:63:e3:bb:5a:b6:ff:05:f7:6e:1a:93:c0:2f:cb:3b:01:8c:
9d:56:b3:0c:c3:19:23:f5:61:41:10:f1:65:f1:5a:72:57:01:
f9:a7:8d:47:03:fc:cc:44:bf:a0:86:7a:4e:67:0f:92:b6:7f:
6e:f0:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:21:02 2025 by rpki-client