Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: LKxuLu8zY+shVBR+if4XYb4iIWzT9WhGc/kKGe5gT5A=
Subject key identifier: 75:FD:7C:E6:93:F0:44:D6:28:FD:0C:EE:9A:E8:A2:ED:2E:8D:A3:49
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 01984AAEBCC6C6A8CA53FEBD026C8A20E3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 02F4
Signing time: Sun 27 Jul 2025 07:00:22 +0000
Manifest this update: Sun 27 Jul 2025 07:00:22 +0000
Manifest next update: Mon 28 Jul 2025 07:00:22 +0000
Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=)
2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: iOZCZPPBvTKPMvLCI5Znf4G/sj43OBJ0+d4V+KWy/K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:bc:c6:c6:a8:ca:53:fe:bd:02:6c:8a:20:e3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Jul 27 07:00:22 2025 GMT
Not After : Jul 28 07:00:22 2025 GMT
Subject: CN=75fd7ce693f044d628fd0cee9ae8a2ed2e8da349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:5f:23:bd:c0:44:fd:2e:cb:57:e4:3d:49:
9f:6d:c3:3a:7a:96:4a:80:5c:c1:ce:2f:80:b0:f7:
2c:7b:65:0d:67:bf:aa:b7:74:df:3a:04:0a:8d:f1:
49:40:4e:32:fd:92:94:af:f4:9c:30:7f:90:4d:de:
b6:88:82:6a:5d:45:a4:a0:75:f5:6a:06:eb:36:36:
b4:dc:d6:82:3b:d2:9e:eb:b4:d7:2d:07:13:33:24:
d5:83:61:2b:d4:b7:61:c9:29:89:aa:c0:51:ef:ac:
ac:f7:c2:ff:51:88:c8:95:24:ba:e8:0b:88:c5:2d:
a0:1e:01:a4:27:6d:27:60:41:37:bf:4b:d1:fc:76:
b3:a5:c6:e4:3d:d0:92:cd:01:51:7e:f6:49:32:ae:
30:e3:54:a5:db:e6:e4:d3:bc:aa:c4:6c:d1:e6:30:
55:b1:3c:dc:d5:50:04:15:0c:7e:2b:15:91:97:14:
9b:fa:17:19:45:ec:7e:e0:97:91:54:9f:9c:85:ec:
f4:c4:1e:82:fd:be:c2:26:32:96:83:33:73:20:4b:
e2:d2:c5:b4:46:5a:ad:06:e8:a4:8e:33:cc:25:10:
97:a0:11:0f:ca:4d:18:b9:a5:05:cd:c6:b9:ae:f0:
ba:1c:11:30:c1:3f:fb:5b:2a:fd:bb:5f:07:d8:18:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FD:7C:E6:93:F0:44:D6:28:FD:0C:EE:9A:E8:A2:ED:2E:8D:A3:49
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e3:7e:82:7f:b5:8c:44:b6:56:75:cb:2a:14:6d:95:42:a9:
e6:be:e1:aa:87:0e:7f:69:8b:e6:15:96:65:0d:4c:69:2e:f6:
33:e5:a4:d8:e2:85:ba:5f:2a:ed:8a:90:ea:b1:71:6c:c1:e4:
d9:4a:67:8b:d5:bd:a6:15:c4:7d:99:4a:ca:fb:29:68:13:d2:
ff:db:88:a4:e4:ae:16:06:40:3a:61:63:81:45:2d:8c:7a:08:
c7:da:da:2b:3b:06:79:aa:9b:fa:18:41:de:32:fc:c5:1b:1c:
06:80:a3:eb:f8:9c:5b:65:e3:65:4c:91:da:60:b8:0a:23:d1:
15:b3:77:c5:a4:7b:77:46:a6:61:21:23:13:e8:5f:c4:db:b3:
51:c8:7a:64:b6:44:1c:6b:66:37:57:fb:86:93:1f:eb:46:81:
0d:68:21:8f:5c:0e:3a:20:9e:e8:f1:9d:2a:2e:0e:87:39:73:
e3:be:eb:f7:38:de:7f:a8:85:f4:82:20:a4:b9:3a:cb:c4:5b:
50:84:fe:d7:c3:08:ce:04:d4:19:0b:ff:b8:46:cc:45:8b:8a:
a5:64:b0:02:39:35:f5:11:4b:09:aa:37:f2:38:56:5a:e1:67:
f5:67:9e:78:ea:05:79:af:9a:81:92:38:8c:d4:94:04:84:55:
8b:f1:70:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:44 2025 by rpki-client