Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: ZVbD9R7b+qL5IDnvnkOLUAvfc2r4yO8HiwRdwrtfbi0=
Subject key identifier: 2B:AB:81:22:3D:D1:20:1A:B6:BD:2A:EF:85:4F:60:AE:3E:20:5C:A9
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 019849D3965048E4D4AB722059A5B58BB7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:01:00 +0000
Manifest this update: Sun 27 Jul 2025 03:01:00 +0000
Manifest next update: Mon 28 Jul 2025 03:01:00 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: NAoZPzpl+NCb+YslthIEMpALVnZ4AXaTMmvWEcbiF64=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:96:50:48:e4:d4:ab:72:20:59:a5:b5:8b:b7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Jul 27 03:01:00 2025 GMT
Not After : Jul 28 03:01:00 2025 GMT
Subject: CN=2bab81223dd1201ab6bd2aef854f60ae3e205ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:60:63:c0:35:27:40:d7:11:e9:0a:ea:17:
56:4a:52:b3:80:0a:75:31:60:8f:f8:2d:cb:23:56:
ce:2c:84:75:c0:75:df:73:fa:6f:03:a9:0f:4e:2d:
13:e4:9b:82:53:1d:2f:0a:4b:12:a1:5d:33:13:81:
32:af:c3:ae:c8:c4:f0:46:b9:7f:e4:43:c1:84:5f:
c0:70:d5:21:f5:f7:7c:d8:2d:32:ea:be:f2:d8:4a:
34:fa:c4:b9:2b:0e:df:4a:5a:d3:88:6f:33:f6:5d:
e2:fe:d8:30:60:19:84:6b:73:4a:7c:6d:00:0b:fa:
5a:ae:85:7c:b7:d7:d6:aa:73:e5:e5:e6:32:a6:aa:
20:33:b2:5b:15:66:77:bb:59:8e:2a:c8:8a:a7:96:
24:25:df:05:ee:16:07:cb:54:bc:47:80:2e:81:d7:
ba:52:c7:3b:93:7a:1a:6f:10:f1:1f:d5:1f:37:d3:
43:d4:58:ff:87:1b:6b:44:a2:33:b9:e6:1d:3b:c4:
c6:89:5a:94:bb:8f:b4:3e:2b:63:d4:fb:e6:51:5f:
de:17:8f:34:cd:12:9d:16:35:6e:9f:35:25:f5:a7:
a1:80:6f:1b:8a:e6:ce:85:70:da:fd:c7:98:02:4f:
80:db:6e:c6:21:65:f1:37:f0:02:35:8c:72:d6:b9:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AB:81:22:3D:D1:20:1A:B6:BD:2A:EF:85:4F:60:AE:3E:20:5C:A9
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:83:89:84:79:ff:ae:d8:fb:b9:9f:d3:c9:d5:30:15:66:48:
fc:5e:98:d2:28:4a:1c:f4:be:0a:03:93:96:81:97:cc:01:43:
a3:5a:2b:78:ea:4e:e7:65:0f:0e:2c:9d:ff:da:bf:2f:6a:48:
da:a7:05:88:1c:3a:a8:b2:64:a0:58:fe:6b:3b:f5:2c:18:d1:
1c:17:b9:36:16:15:4f:35:9b:ce:cc:35:f1:11:65:5a:ef:70:
8b:ec:cd:45:b3:c6:be:82:b5:fd:1f:15:ff:a4:66:e8:78:39:
f2:7d:9e:59:a7:7f:9d:bd:b7:9b:00:23:c4:bb:19:54:7c:4b:
5f:ad:c1:44:5f:86:10:ab:00:e7:70:1e:81:5d:ef:93:69:6d:
f4:fa:6c:a7:5c:8b:c6:02:68:58:b0:e3:c5:a2:b2:db:26:9b:
e2:f5:52:2f:77:f1:9b:fd:7f:a2:8d:60:22:66:89:35:5c:4e:
1c:35:57:19:54:45:70:a0:f1:01:19:64:de:30:19:15:15:5b:
31:f8:ff:fb:f9:43:92:ff:cb:a2:56:f3:5e:27:a4:2e:21:52:
d6:74:9f:04:f0:14:fa:6a:bb:22:29:54:00:3c:80:ee:aa:c7:
78:43:d8:d7:fa:78:6a:dd:08:90:89:cf:7a:17:ad:c4:51:93:
7b:eb:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:26:18 2025 by rpki-client