Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
File: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft (raw, json)
Hash identifier: LuwI3qhfgKUbHx+0f1IsEppArcXQcVJ1HxCu9F9j+Vo=
Subject key identifier: 7D:F4:B8:44:62:F8:09:A7:76:2F:41:B2:66:50:D1:BF:28:05:CD:AB
Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Certificate issuer: /CN=31533690ab184f433f1760f3feaa184c443e70f9
Certificate serial: 01984A0A352ECAA7DBBB017F921C05FB7AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
Manifest number: 05AF
Signing time: Sun 27 Jul 2025 04:00:39 +0000
Manifest this update: Sun 27 Jul 2025 04:00:39 +0000
Manifest next update: Mon 28 Jul 2025 04:00:39 +0000
Files and hashes: 1: 4H5f4KMuGUdiq20v6X15FIvWPCg.roa (hash: 1oOS4e7SC894+hZZBmJUAEBGgPQQh1AJU8M/EeMAfmg=)
2: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl (hash: H7aNGZX8dqYVV7FMA1165SSTIN4zbTxOD6dON2W0yw4=)
3: oWYw73o0XVlV6OpLKF4dF1YQeis.roa (hash: 5U7LFltASNwuXUP6x/MbRpxou9KC14KfkL67az3+D4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:35:2e:ca:a7:db:bb:01:7f:92:1c:05:fb:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9
Validity
Not Before: Jul 27 04:00:39 2025 GMT
Not After : Jul 28 04:00:39 2025 GMT
Subject: CN=7df4b84462f809a7762f41b26650d1bf2805cdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:d9:d9:61:c0:aa:4b:b8:2d:cd:77:17:8c:
22:f0:50:e8:62:50:f7:75:8a:29:c8:3e:4a:45:bc:
9e:9b:58:7b:b0:d0:39:fd:7c:5e:12:a7:1a:3f:ca:
67:5e:fb:10:82:86:22:84:74:d0:12:29:fc:4c:05:
15:a7:23:a7:50:5c:0d:7b:06:b5:4b:49:86:e4:b6:
c6:0e:83:9d:01:f0:ed:9c:27:35:4e:bb:93:df:5d:
f2:fd:70:0f:06:77:17:52:d1:51:b3:c4:2a:c6:8a:
c7:16:02:e1:6b:97:21:dd:c8:3c:53:76:90:f5:ed:
8a:03:ee:b0:5b:d1:5f:b8:f3:18:6a:28:7d:28:a0:
24:c3:1f:0d:0d:ab:29:d4:39:d0:de:38:19:ae:4c:
a1:e8:15:5e:1a:da:45:23:5a:c9:b3:7a:8a:bf:05:
b2:b1:ee:4d:e0:07:4b:f3:1f:c6:e5:4f:7b:6a:c7:
17:c6:9e:fa:79:10:af:9b:e3:05:a7:46:7d:38:7f:
0b:9c:b4:b2:0b:a1:8b:7f:52:22:cb:1e:d9:e0:a3:
79:9f:a2:c2:eb:49:7e:c3:fd:4c:ad:2f:4a:8c:fc:
ff:a5:98:63:08:17:6b:40:65:dc:e2:d4:46:a8:88:
c0:b6:b6:17:51:81:20:8e:e3:52:ac:4f:53:21:c7:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:B8:44:62:F8:09:A7:76:2F:41:B2:66:50:D1:BF:28:05:CD:AB
X509v3 Authority Key Identifier:
keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:70:ae:38:ca:bd:24:9b:cf:1d:0b:fb:98:52:d5:11:ac:14:
67:c8:b6:d9:f3:e1:78:c9:8a:7c:98:52:0d:a7:6c:12:e6:5f:
b5:73:c9:73:06:cc:3c:de:45:8f:08:c7:c9:94:fa:ce:94:e7:
59:cc:1b:c2:62:3c:e2:1e:9d:16:aa:b0:48:f6:23:dc:3a:13:
9b:cc:fb:47:5f:00:f2:89:d9:6a:f3:59:b9:7e:a2:5f:ed:6f:
d2:de:ef:c4:6f:70:8f:1a:c9:26:dd:35:4f:4e:58:df:62:83:
bd:91:f2:4c:32:26:54:b5:15:e9:85:fe:07:dd:0e:6b:2d:47:
cd:d1:28:f1:a8:e5:bd:94:33:30:63:15:27:0c:17:98:0e:5b:
db:dc:04:ac:57:85:88:72:c1:03:58:83:08:eb:55:e1:3f:48:
15:f9:17:85:2c:b0:e4:bb:43:64:70:4f:2c:24:d6:3d:40:d1:
7e:f0:ee:ff:16:15:80:15:3e:d1:a9:06:f7:b6:ea:21:3d:72:
cc:52:8d:2a:4c:31:a6:a3:f3:32:0d:62:52:9f:00:32:9c:b3:
da:71:74:3d:d0:4a:04:c2:24:b5:16:0b:7f:59:27:74:14:46:
a8:5a:ed:bc:cc:34:81:8a:25:7a:ed:6b:8f:29:1e:ff:ac:1a:
57:6a:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:42 2025 by rpki-client