Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: yVXwf2AlloIRjqjjJIxLqNPO/3G+Y0RkUZwTEfhtVcI=
Subject key identifier: 38:DC:72:7F:89:CF:35:60:EA:F3:A2:33:99:69:36:F1:8D:1D:81:F4
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 01974B8D8741A48F94B94D924E90AC1AAA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 0653
Signing time: Sat 07 Jun 2025 18:00:55 +0000
Manifest this update: Sat 07 Jun 2025 18:00:55 +0000
Manifest next update: Sun 08 Jun 2025 18:00:55 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: kloGhVDjBvXM3B4P6u4NJB4eMeiSggUtpe1H2Z4W7C8=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:87:41:a4:8f:94:b9:4d:92:4e:90:ac:1a:aa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jun 7 18:00:55 2025 GMT
Not After : Jun 8 18:00:55 2025 GMT
Subject: CN=38dc727f89cf3560eaf3a233996936f18d1d81f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:01:71:b6:e0:0b:fe:4c:36:86:f2:0f:dd:
d2:e7:dd:4c:6c:7a:f1:ea:bf:f0:fa:ee:c5:a9:4e:
78:b3:22:75:c9:83:67:a4:0b:f4:03:69:6b:6f:90:
5e:4b:b7:6f:10:b0:52:8a:78:0c:9b:73:3f:6e:d6:
05:2c:3c:51:97:74:bf:03:87:bf:f1:bb:f8:e1:0b:
5e:53:7b:26:10:36:5e:f7:e9:50:1c:15:57:80:0a:
a8:0e:d0:cb:95:7c:82:3a:9d:00:19:61:26:81:9a:
92:29:74:b6:74:04:d0:fe:8f:c2:af:e9:5e:91:98:
cb:0b:a6:e2:00:ed:55:43:5d:6c:fc:fe:18:13:ea:
d1:69:07:99:2e:0b:2a:c9:ad:cb:24:53:ae:0f:c5:
4d:d2:12:ef:d1:f5:c5:05:0d:82:8c:98:bf:29:3d:
b7:b8:b9:71:be:99:27:e3:ac:a0:27:0b:c4:0f:82:
23:15:1b:69:f7:bb:cc:9d:6a:60:6d:95:bf:38:c7:
9f:09:84:cf:c5:00:bb:55:65:7f:76:64:4c:f1:a1:
6f:74:a8:ec:e5:c2:8d:81:9f:04:58:ab:31:97:5f:
f5:32:63:61:e1:99:b0:8c:90:9f:c9:6d:6f:b9:00:
27:23:d8:44:50:18:e0:bf:66:9b:37:75:b7:d6:8a:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DC:72:7F:89:CF:35:60:EA:F3:A2:33:99:69:36:F1:8D:1D:81:F4
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bc:6a:a2:c5:cb:c5:4d:ce:12:76:09:65:83:6e:32:a8:38:
a5:f7:48:2f:97:ae:c7:3d:86:ae:58:18:c5:8a:fa:da:63:7b:
cc:aa:82:a3:5e:07:ec:40:b8:43:3b:96:54:43:79:06:a2:af:
f3:eb:02:e5:db:c0:a7:bd:6b:2b:4a:c1:6d:b6:d4:1f:05:38:
26:ac:e9:c8:f0:b5:6a:46:13:92:07:c7:e9:dd:50:04:2d:de:
05:ac:9f:54:89:95:c7:90:fd:04:ff:e4:a9:4a:d3:00:2c:4d:
30:3a:73:28:9e:be:11:97:fa:e4:7a:3f:be:d7:a9:32:5b:cc:
d5:15:1f:ef:41:83:b8:8d:98:53:65:7b:88:d0:8a:ba:bf:b5:
57:45:05:99:31:10:d3:dc:ed:39:b1:09:4a:e0:5a:c0:b5:f4:
1d:6e:44:f1:5e:8d:5f:0e:f8:73:9a:74:36:21:60:c4:d5:83:
f9:2a:88:f0:e6:79:e6:56:c6:55:78:50:e1:65:f2:4d:33:9b:
c2:e0:e7:da:99:df:4e:b5:2f:62:2a:3b:b4:16:76:97:76:2a:
ed:0d:71:16:8f:a1:eb:90:57:f3:ae:d7:9d:4c:1f:c5:98:04:
5f:f3:03:aa:3c:a5:95:5b:d1:97:b2:0f:7a:fb:fa:ba:a1:5e:
d8:07:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:07 2025 by rpki-client