Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: zorua6DAmIFMh/4Svqzpi3Exlc3tiaWQ229FQ2zXRqI=
Subject key identifier: 86:E8:D4:F7:E9:FF:B9:E9:D1:19:9E:09:1B:5D:27:DE:4B:BA:EA:4D
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 019756ECFE02498D9FF10B6B56353DA00105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 23:01:01 +0000
Manifest this update: Mon 09 Jun 2025 23:01:01 +0000
Manifest next update: Tue 10 Jun 2025 23:01:01 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: S6md7ZxbTRdrJ8rSP/BQT5dv0G5TiKd8IeTuJ1XM4ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:ec:fe:02:49:8d:9f:f1:0b:6b:56:35:3d:a0:01:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jun 9 23:01:01 2025 GMT
Not After : Jun 10 23:01:01 2025 GMT
Subject: CN=86e8d4f7e9ffb9e9d1199e091b5d27de4bbaea4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:96:77:c1:62:0f:92:64:d8:6c:da:64:ac:
68:2b:d0:ac:81:b9:50:ba:a0:80:5c:4b:32:92:d4:
fb:a6:d2:d8:ae:df:1a:ae:a1:bd:cd:cc:2a:9d:94:
b2:e5:d9:9a:c3:96:ee:e5:9f:92:19:50:fb:1a:3f:
fa:41:5e:a0:33:a6:ec:4c:f7:3a:c5:7e:0e:20:04:
a7:d9:6b:29:c1:8f:ce:1a:38:3e:4a:c8:eb:ef:17:
d4:5e:7d:a9:13:41:7d:b5:1a:a2:f1:ea:f5:3a:fe:
bc:90:ea:88:51:70:ad:5c:ba:f8:eb:a1:21:cb:73:
1b:99:84:87:d1:b8:55:5f:b0:ea:1c:eb:76:5a:24:
3d:b6:52:c0:b3:d9:74:a5:f4:4e:dd:20:ac:39:41:
83:d4:94:9d:eb:64:e6:0b:ac:91:bb:57:ce:8a:2f:
88:d2:85:b1:29:fe:05:e9:e5:37:8e:1e:c3:2a:14:
33:ff:a9:b7:11:35:b2:9d:39:f0:46:2b:19:4e:bb:
2b:09:05:d4:3b:5d:4b:cf:df:31:15:c1:35:aa:60:
34:3c:19:0a:65:9e:59:85:5d:ed:30:77:0b:94:9e:
94:89:7c:5c:c7:bd:93:f7:be:cf:a1:62:77:5d:e9:
06:32:8f:a0:de:d3:8c:12:5f:44:fa:7a:9e:d6:f1:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:D4:F7:E9:FF:B9:E9:D1:19:9E:09:1B:5D:27:DE:4B:BA:EA:4D
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:08:44:89:83:53:62:ba:6f:6b:97:5f:9f:16:c2:10:ea:01:
71:72:03:fa:69:43:46:7c:3f:90:b2:bf:34:ca:28:85:73:1a:
1e:80:4f:69:89:58:ee:d1:6c:a6:07:21:13:46:6c:36:77:08:
76:c4:ce:e2:40:91:ed:d6:7f:fe:04:72:6c:f6:c6:e1:d2:df:
66:de:03:3b:1b:6f:7a:c5:72:7a:b8:02:a0:d8:61:8c:b8:93:
5c:d7:8f:c2:10:10:25:11:4d:39:05:3e:53:eb:56:bc:f1:01:
2e:b6:8b:8b:e2:7f:83:10:2e:35:8b:40:21:93:6f:b4:5c:42:
07:88:ab:48:28:72:a5:78:c8:2a:64:b7:26:bc:a9:d1:89:8d:
51:61:e1:6e:02:bd:8f:0a:19:09:8b:b9:2d:73:39:bb:ba:b3:
63:b7:c0:d3:2b:b4:36:15:eb:1c:21:d8:bf:3f:f4:42:f9:b9:
4e:92:57:6d:9a:5f:2a:49:28:0e:0e:fd:49:26:b9:ea:28:09:
ce:1e:15:fd:04:d8:37:9e:f0:56:c2:46:90:f5:e7:48:34:15:
50:c7:71:02:8d:fe:d9:2a:1d:e0:cc:f3:fb:ed:6e:97:58:a0:
df:a6:e3:26:b6:d2:0c:9b:b8:dc:cb:f4:a1:82:fa:56:d9:4b:
66:9b:4d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdW7P4CSY2f8QtrVjU9oAEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDdjN2I4OTY1NmRkMzM5Y2I5OGZiN2MyYjAzNzFjNTky
NmE2NDEwHhcNMjUwNjA5MjMwMTAxWhcNMjUwNjEwMjMwMTAxWjAzMTEwLwYDVQQD
Eyg4NmU4ZDRmN2U5ZmZiOWU5ZDExOTllMDkxYjVkMjdkZTRiYmFlYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQiWd8FiD5Jk2GzaZKxoK9CsgblQ
uqCAXEsyktT7ptLYrt8arqG9zcwqnZSy5dmaw5bu5Z+SGVD7Gj/6QV6gM6bsTPc6
xX4OIASn2WspwY/OGjg+Ssjr7xfUXn2pE0F9tRqi8er1Ov68kOqIUXCtXLr466Eh
y3MbmYSH0bhVX7DqHOt2WiQ9tlLAs9l0pfRO3SCsOUGD1JSd62TmC6yRu1fOii+I
0oWxKf4F6eU3jh7DKhQz/6m3ETWynTnwRisZTrsrCQXUO11Lz98xFcE1qmA0PBkK
ZZ5ZhV3tMHcLlJ6UiXxcx72T977PoWJ3XekGMo+g3tOMEl9E+nqe1vErQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbo1Pfp/7np0RmeCRtdJ95LuupNMB8GA1UdIwQY
MBaAFJkHx7iWVt0znLmPt8KwNxxZJqZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMt
OTNkZWM3MzVmNzE3LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMtOTNkZWM3MzVmNzE3
LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAhEiYNT
Yrpva5dfnxbCEOoBcXID+mlDRnw/kLK/NMoohXMaHoBPaYlY7tFspgchE0ZsNncI
dsTO4kCR7dZ//gRybPbG4dLfZt4DOxtvesVyergCoNhhjLiTXNePwhAQJRFNOQU+
U+tWvPEBLraLi+J/gxAuNYtAIZNvtFxCB4irSChypXjIKmS3Jryp0YmNUWHhbgK9
jwoZCYu5LXM5u7qzY7fA0yu0NhXrHCHYvz/0Qvm5TpJXbZpfKkkoDg79SSa56igJ
zh4V/QTYN57wVsJGkPXnSDQVUMdxAo3+2Sod4Mzz++1ul1ig36bjJrbSDJu43Mv0
oYL6VtlLZptNOA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 07:38:28 2025 by rpki-client