Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File: MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier: aTBlgLGVxzY6c1Q9VnA2VwejUBNfmFFbp1pYKmet2UE=
Subject key identifier: 78:58:8D:AB:C8:DC:1A:84:D9:F6:02:D1:29:45:97:BC:92:9A:BB:F9
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 01992330DECC9AE4E476A7BBF6CB30702C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number: 167A
Signing time: Sun 07 Sep 2025 08:00:29 +0000
Manifest this update: Sun 07 Sep 2025 08:00:29 +0000
Manifest next update: Mon 08 Sep 2025 08:00:29 +0000
Files and hashes: 1: 2hjMikwQnrrEAN1yMmo4yNGPigk.roa (hash: va6CTRy1tpKgbw+4WXa+7xdTzdjfkhLrL6uUCxg03v4=)
2: 4XJYPiN1fgyY_K6wVqkzO9GGpIo.roa (hash: HslWaDijgsXRLbUJY37P5SIKUX/YCI1vBK/fp1leFRU=)
3: 4anNvnqS_uath7Y6EK7D7BC3YzE.roa (hash: Bnv1UeMKU1sDW+whV3TipNzoS8kdERV9WO2YiJiRQJk=)
4: ATev8_uhunQc5j7herGHoXGBx0s.roa (hash: raqWEdHQFWUAKbr4xna0wvj80ivdH8FgqZZk8a2xIoc=)
5: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: nG4oDG4ESZPPCjW+fIos/omfIiOXcdHS4fKk4PgsSLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:de:cc:9a:e4:e4:76:a7:bb:f6:cb:30:70:2c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Sep 7 08:00:29 2025 GMT
Not After : Sep 8 08:00:29 2025 GMT
Subject: CN=78588dabc8dc1a84d9f602d1294597bc929abbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:63:ed:6f:e9:63:2c:09:c5:a9:19:e8:66:6b:
67:b9:04:cb:2c:24:c8:aa:31:57:fa:3d:10:e5:01:
aa:17:52:83:b1:af:e1:0a:ee:54:cd:e4:b3:29:57:
95:0a:ec:94:71:02:ac:ea:ec:41:f2:6b:1a:5b:0f:
62:80:9a:18:e7:11:19:03:c9:dc:1c:ba:6e:0b:58:
c9:5e:5a:c6:07:ce:74:13:a0:06:bc:14:53:9a:86:
e8:c1:1e:db:d8:52:c4:cc:81:dc:27:1b:e9:e6:ab:
6d:5a:54:ea:0d:44:c3:da:d3:fd:b0:9b:2a:3c:84:
29:e9:e5:77:47:3d:f1:6f:cf:30:ff:13:07:ff:dd:
af:ca:d5:2c:ca:5f:75:9c:59:ce:da:25:33:00:88:
d7:4c:c2:4e:30:3c:bf:46:1c:20:91:cf:4a:ea:83:
66:db:a7:c9:a3:d0:84:41:73:bf:54:55:93:45:ef:
7c:1e:d4:ab:7b:96:3e:49:72:d5:4f:a6:96:89:0a:
9b:0e:b5:93:99:fc:d8:fb:a7:85:17:a6:fb:86:61:
a1:1d:6e:57:10:72:d3:72:29:e4:28:35:f4:85:fe:
40:44:8f:78:2a:59:8a:f3:a0:da:34:3d:71:82:e0:
1d:cc:a5:d6:1e:6a:40:cf:8a:0f:cf:0d:91:34:79:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:58:8D:AB:C8:DC:1A:84:D9:F6:02:D1:29:45:97:BC:92:9A:BB:F9
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:50:80:eb:9e:9e:1b:b2:be:d4:d6:86:2e:6d:9b:d9:3d:69:
67:7b:48:1b:f0:3f:8b:bc:a9:8b:ff:16:74:f9:45:14:7c:0c:
f7:66:3a:ef:7f:9a:f8:30:61:02:59:bc:38:5b:cf:3a:0c:d6:
e1:26:a8:34:85:81:b6:8a:86:80:89:d6:30:7c:7b:ba:52:2e:
18:21:f7:f6:6a:c7:67:25:dd:7c:27:34:31:2a:d1:42:e8:22:
dd:38:3d:d7:2c:be:b1:db:12:ef:74:6d:35:15:3f:73:8f:56:
f6:bd:c7:8c:6c:87:ad:31:10:74:26:ca:d7:49:f3:fd:c9:01:
c0:43:66:16:d4:82:2e:7b:62:54:0f:e1:58:d2:74:88:a4:f4:
bb:a0:96:1e:1d:79:9b:2b:27:07:40:a3:b6:63:7e:d1:84:33:
d6:3b:e7:5d:6e:0e:24:7c:db:4f:c9:b8:e3:6b:eb:f9:69:d2:
7e:9d:e7:08:f8:cc:da:d6:05:67:00:e2:b3:d0:9b:a6:3a:6f:
c1:da:5e:6e:fa:b4:a4:6a:0e:0c:fa:2f:c8:40:ca:73:f7:14:
af:ec:8d:a8:bd:a2:47:af:2d:ac:ae:88:2b:a9:23:6c:cc:f5:
29:7c:9c:4c:26:47:3c:3b:ea:e3:0f:25:87:4d:c0:c1:ad:50:
9e:df:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:56 2025 by rpki-client