Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
File: MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json)
Hash identifier: sRsvjrvyGoGi1ydc9M+POx6daW/AYocGoabXPTt5yqs=
Subject key identifier: 35:1B:65:87:8C:20:4A:23:45:9F:15:24:3C:C6:17:AA:C9:16:E0:63
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial: 019847773E44556C9D3E57CA650D98DBA12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
Manifest number: 031B
Signing time: Sat 26 Jul 2025 16:00:53 +0000
Manifest this update: Sat 26 Jul 2025 16:00:53 +0000
Manifest next update: Sun 27 Jul 2025 16:00:53 +0000
Files and hashes: 1: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: GloZEjgkOqA1XQGtbKSnwClnN14HqRnIhk4FX1CvuxM=)
2: qJ1oXPy2zR5AWITHnFOnI8zbBtI.roa (hash: 2JhWie1vdrZ9TGWL5IWneU9ysYNZV//iN2iGhnspRb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:3e:44:55:6c:9d:3e:57:ca:65:0d:98:db:a1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
Validity
Not Before: Jul 26 16:00:53 2025 GMT
Not After : Jul 27 16:00:53 2025 GMT
Subject: CN=351b65878c204a23459f15243cc617aac916e063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:12:e2:6b:60:83:fe:16:1e:85:ad:72:4e:
f5:48:ee:e3:a9:ad:04:02:d8:1c:8f:2f:79:c0:c3:
e2:79:5e:f9:bb:83:3b:98:b0:d6:2b:22:0d:08:cc:
ab:ef:16:4c:82:1e:59:8e:b6:4e:33:95:34:74:39:
83:cf:a3:a4:14:bb:f2:55:46:0e:a2:2d:9d:6a:f3:
6d:6c:3c:dd:88:ec:89:af:05:4e:cf:9e:08:c9:bd:
d4:36:db:82:7a:3a:4b:6a:93:68:44:20:83:68:07:
b8:0e:99:1e:52:1f:9d:84:a7:57:61:5e:97:96:ae:
6a:b6:72:fc:53:02:9d:3b:b6:09:ff:af:d3:37:0a:
d7:66:32:13:ca:b7:18:8c:4d:41:e2:54:6e:56:81:
0b:0c:d0:6d:db:d3:72:6d:70:09:7e:01:46:d8:91:
9d:d7:0e:d2:54:c9:18:d4:20:77:9a:6d:a9:da:49:
50:46:27:8e:ec:5e:52:3b:14:d2:ba:06:9a:70:39:
4f:c2:fd:bd:07:53:9a:5b:94:24:de:6e:5f:77:14:
cd:f3:ef:b8:63:fc:06:a1:e6:37:6a:f5:df:3b:c5:
56:d0:e9:47:ab:b0:fe:1a:4d:f9:ff:d2:fe:dd:4b:
37:a9:d4:72:96:7c:e6:3b:4b:2c:54:b2:fe:24:1d:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1B:65:87:8C:20:4A:23:45:9F:15:24:3C:C6:17:AA:C9:16:E0:63
X509v3 Authority Key Identifier:
keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:89:15:77:b4:23:5d:f9:4a:b3:da:7d:3e:72:3b:3b:00:59:
87:03:8f:e2:c8:50:ae:d0:79:64:1b:de:56:37:c0:20:b1:8d:
86:36:ec:d2:4f:e0:95:c2:e9:ce:c3:a2:e1:df:32:cb:d6:1b:
69:2a:11:e2:a7:d2:a3:8d:ec:7a:fa:ff:ed:3a:fa:0f:26:b7:
0a:8e:a2:95:f6:61:87:f9:7d:90:ed:5a:e8:ec:cf:7d:09:fa:
d8:6e:44:6d:18:da:5f:19:45:23:be:aa:85:fb:aa:44:71:25:
82:dc:56:ee:38:d3:82:10:20:f3:2d:83:f7:23:ab:44:91:48:
35:51:bd:44:c7:90:cc:9a:23:96:96:6a:08:c2:67:f1:d3:0d:
fe:58:48:9a:4f:88:3b:24:d9:15:97:9d:c1:cd:32:9b:e9:06:
81:bd:76:dd:a0:1c:b1:78:1d:8a:20:65:d3:87:a1:eb:9f:52:
9e:86:ed:6e:5f:06:69:04:55:0b:ff:b7:38:dd:f1:9b:dc:25:
44:ff:aa:19:aa:21:f3:fa:37:74:d1:11:4c:ed:d1:7b:6b:4d:
62:7b:82:4d:94:6c:18:b9:93:0a:2f:b1:99:05:1a:c2:60:d0:
2c:06:a5:59:3a:86:9b:ab:55:c2:4c:f0:e6:aa:f7:44:0a:f6:
72:0a:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:27 2025 by rpki-client