Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: 9u823NAO3jZ3wCBJ2zZxShyp/X+dBqlszAQe9Q5ZRe4=
Subject key identifier: B8:4E:65:66:89:28:C2:BB:85:10:37:1F:A8:96:36:EB:5B:3A:02:AA
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 01995342328F1555528F6377F310CBD8F2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 168D
Signing time: Tue 16 Sep 2025 16:01:11 +0000
Manifest this update: Tue 16 Sep 2025 16:01:11 +0000
Manifest next update: Wed 17 Sep 2025 16:01:11 +0000
Files and hashes: 1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: H/R+NuQ4AIf86+me8IGHNpwZ+NZezaafyZyR19KMrMY=)
2: OvLZjS7E5MX30NZkLK9jxh8KFhU.roa (hash: cImSpb6PHoLXLcMRtEaZwDR7QJdikTFbgChlslLA778=)
3: SoN9k2cqGxyy_rsm3ydDmcCibzo.roa (hash: ajQGIB+pruVAaKn9625joYHZDBPfoDRUv7Hz6Vm4jnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:42:32:8f:15:55:52:8f:63:77:f3:10:cb:d8:f2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Sep 16 16:01:11 2025 GMT
Not After : Sep 17 16:01:11 2025 GMT
Subject: CN=b84e65668928c2bb8510371fa89636eb5b3a02aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:1b:0f:1e:c9:96:3d:b1:8c:3a:26:eb:14:
b8:b2:03:03:7f:71:10:48:01:72:93:83:96:09:4a:
63:28:fb:4c:56:dd:f3:e3:c2:c7:a9:b6:a2:8b:76:
d0:4a:f8:a2:35:50:7c:8e:35:5b:00:4d:ee:70:e8:
0c:64:b9:72:f3:55:e7:6a:c4:db:b0:fc:af:5a:11:
80:4a:47:5d:72:47:40:9f:34:ae:63:f2:a2:05:a9:
98:20:91:ba:1b:41:fd:82:e6:78:57:f3:8c:2d:e7:
89:e1:56:a8:3a:e2:a5:3f:b7:f3:7a:73:6e:46:7f:
99:48:fb:1a:38:b5:4a:bd:e4:93:cb:06:4f:3f:a0:
85:62:78:14:bb:c1:2d:f3:58:99:f9:19:7f:a7:f9:
86:81:d1:84:ae:ad:03:ca:32:c9:79:f9:49:44:ed:
e1:65:0f:9b:a7:29:35:f9:d7:f2:ab:ee:e7:50:b9:
37:19:f4:e7:88:7e:97:a8:cf:5d:e3:65:11:89:56:
b6:62:59:f9:7a:e7:99:bc:0c:d0:a6:4e:86:c6:7a:
ea:d3:0d:4d:c8:05:e9:3b:95:f4:c7:1d:9a:1b:3f:
b7:f7:bf:8d:51:df:15:38:ef:ec:90:6c:fb:e6:8f:
51:eb:59:ac:6b:44:2e:e0:d7:92:f0:fa:90:7b:ad:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:65:66:89:28:C2:BB:85:10:37:1F:A8:96:36:EB:5B:3A:02:AA
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f5:c8:4f:75:ef:98:dc:b4:57:62:e7:2c:0b:38:ca:e3:f8:
88:5d:f5:f3:06:2a:dc:cf:8b:cc:20:82:86:a0:96:a7:4f:38:
03:6e:39:f3:d0:a2:12:4c:9e:a1:78:a8:a7:0a:66:d1:e9:77:
56:f7:d4:5e:ae:de:06:0c:80:ac:32:d8:1a:b8:d6:4f:f5:68:
53:5d:96:f7:84:da:f2:2d:76:9a:3b:31:60:d7:f7:8d:dc:7b:
7a:47:86:b5:a4:41:4c:02:d6:9f:81:88:c6:d7:c9:aa:57:85:
df:e3:cc:a2:3a:0d:eb:7c:df:61:22:0c:d7:60:88:ab:f1:71:
31:14:ec:a9:5f:db:07:90:68:c2:7c:3e:9b:f4:d4:85:40:e8:
a4:13:ef:5e:7c:5b:24:fe:28:c9:0f:de:c3:c8:d9:14:2c:bc:
b8:e6:20:de:a5:5b:b2:6e:8c:5c:c8:2e:53:18:0c:93:96:ed:
b5:6d:cb:80:82:53:36:e9:d4:5c:10:63:b0:8f:0c:d9:b3:5c:
09:e7:3b:83:09:83:b9:dc:74:fe:b4:43:56:f3:8b:02:bb:4c:
cd:e0:7d:19:fe:ce:93:2e:49:5d:df:9b:e5:97:08:e9:5d:c5:
63:bc:b3:c9:9c:c1:51:52:e5:8a:ee:11:0d:86:84:8e:22:f8:
68:dd:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 19:59:01 2025 by rpki-client