Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier: SPA2GYxgyfayAQ9vtp/330Cu8gxTZDcpxua1i7MRum4=
Subject key identifier: 0F:C5:27:6C:9A:00:1F:20:BF:5F:D6:63:FA:E3:BC:BD:71:64:28:F7
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 01984B54706CE624EC27226BA2BD960CB9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 10:01:21 +0000
Manifest this update: Sun 27 Jul 2025 10:01:21 +0000
Manifest next update: Mon 28 Jul 2025 10:01:21 +0000
Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: YctA9UV+y9bQnUqjt8YfLsGik1ghINGZWIVWhcfos5k=)
2: m-mgeij2s-izZmoG2EJOGobZRbs.roa (hash: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:70:6c:e6:24:ec:27:22:6b:a2:bd:96:0c:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Jul 27 10:01:21 2025 GMT
Not After : Jul 28 10:01:21 2025 GMT
Subject: CN=0fc5276c9a001f20bf5fd663fae3bcbd716428f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:3c:dc:7d:1c:49:d5:79:bf:47:b5:dc:e8:
1c:c6:a2:2a:3e:87:41:54:27:94:a2:e1:da:09:43:
9c:b6:dc:0f:7e:f1:e6:e5:c3:7c:25:ff:b6:7d:98:
41:8d:5f:a7:0d:eb:ac:f7:be:87:b5:22:08:c0:e0:
19:b3:f9:64:ef:47:d1:2d:ef:75:fe:1c:d9:c7:bb:
cb:f1:1f:c4:47:11:2c:94:b2:12:98:08:44:f8:e5:
36:65:17:90:9e:20:2c:58:57:d9:89:6c:31:85:e9:
72:e2:90:c7:c9:0b:97:9f:08:c7:1d:ab:05:21:9c:
9e:f3:52:8f:53:bb:07:cb:fa:3e:2e:c0:82:c3:b3:
0f:9a:a4:55:e0:2a:d7:9f:10:70:c3:87:ee:99:ac:
3d:d9:90:88:ee:dd:98:0b:6d:d6:6a:77:f0:c3:a7:
fb:90:b9:b6:cc:92:a2:00:1d:da:52:60:10:d4:ba:
51:1e:cd:f3:b9:53:70:f8:4e:c9:51:44:43:59:23:
9c:84:c7:e1:da:69:7c:83:f5:e7:a3:f0:76:6d:ec:
d7:4c:2d:52:9b:1b:b0:2a:61:99:a6:a7:b9:bb:ae:
c4:db:09:23:1f:d9:ce:00:a8:5f:42:f8:54:6d:fb:
42:96:45:85:a6:9d:65:df:46:d9:b1:04:f2:15:3f:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C5:27:6C:9A:00:1F:20:BF:5F:D6:63:FA:E3:BC:BD:71:64:28:F7
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a3:65:74:01:b6:de:f1:09:f7:5b:9f:27:8e:34:5b:bc:07:
5f:91:81:de:ef:6e:a0:d3:dc:c4:c1:de:49:71:4f:97:c2:a8:
fa:7b:30:2a:af:e7:3d:55:7a:19:dc:37:fe:c5:92:81:9e:63:
9c:96:9a:07:21:4b:5a:d2:06:3d:23:81:a6:92:dd:84:36:67:
0a:f7:2a:45:0c:56:df:56:6e:1d:b4:33:bb:14:df:c5:11:bd:
2b:f3:82:a6:2e:d4:02:22:79:5b:c6:ca:22:d3:02:b1:43:ae:
31:f6:b0:fc:de:36:39:d9:a5:b5:86:1b:99:54:9b:d9:67:2c:
d2:2f:7a:61:9b:55:d5:75:ca:6f:8a:5e:7b:90:d5:42:b5:ad:
7e:d3:66:fa:c0:21:00:c6:95:c2:5a:4f:9d:a2:12:f6:11:8d:
ac:05:47:c5:3e:59:ec:6b:f3:72:8c:ee:9b:d8:3d:09:df:41:
d2:66:3c:9f:8f:fb:eb:9c:ae:04:11:c6:a6:48:58:67:4d:bd:
ae:bb:19:ae:89:d5:43:98:90:a6:a2:59:84:9e:37:1b:1e:3f:
7a:0d:65:82:99:2d:80:bf:01:11:40:e2:6a:1b:08:82:38:29:
15:b5:41:e3:29:f0:a3:09:86:76:59:9b:de:99:10:dc:84:c0:
00:53:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:39:05 2025 by rpki-client