Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: k02nyx5/xYNWv9RfRCzOxI6sMBaFw31cCyFGiCx0Br8=
Subject key identifier: AC:04:5F:E2:3E:B4:29:21:CC:B2:33:D9:6F:94:93:C0:01:B9:81:68
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 01976471BEB03184747EE051F47905F86C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 14:01:05 +0000
Manifest this update: Thu 12 Jun 2025 14:01:05 +0000
Manifest next update: Fri 13 Jun 2025 14:01:05 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: ze4VHHScky5EXXY9G/YT7rMi2z4IBrIT7DziqJMzf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:be:b0:31:84:74:7e:e0:51:f4:79:05:f8:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jun 12 14:01:05 2025 GMT
Not After : Jun 13 14:01:05 2025 GMT
Subject: CN=ac045fe23eb42921ccb233d96f9493c001b98168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:43:77:c1:e2:e5:c8:f8:9c:c6:85:c6:7c:
4e:0b:5b:00:ed:fe:66:0f:36:d4:ed:24:6e:de:4d:
61:8d:34:dc:94:29:40:49:a2:63:34:64:46:36:ef:
39:d8:c1:be:97:93:ef:29:80:c8:01:2a:61:9f:ea:
7d:fb:3c:a2:1f:76:66:12:e2:52:52:0d:4a:4c:a0:
0e:05:07:c1:e8:b5:c6:7f:86:9b:f3:9f:ae:6b:5c:
75:4c:dc:3c:d3:ba:df:20:47:80:15:a7:62:98:43:
fc:c7:44:54:3d:d7:05:57:95:3d:64:23:2d:52:21:
5d:66:66:78:90:aa:97:02:fe:df:84:dd:21:3e:a8:
71:41:d3:d6:92:ca:f2:c7:5f:eb:e0:25:b9:c4:9e:
7c:29:2e:fc:10:ec:d1:23:2a:20:0d:78:08:aa:10:
72:d3:c7:55:8a:e9:95:51:d7:aa:79:18:f8:21:56:
6f:ee:63:cc:1b:a8:f7:a8:83:17:13:42:db:93:5d:
a3:4d:c2:6e:c2:35:c7:1e:bc:6a:43:b4:66:0d:a3:
32:a0:59:68:a0:be:0b:8f:18:06:c6:08:90:10:d4:
5c:c1:3c:24:6c:98:b0:1c:9a:7f:fa:fb:e2:07:cb:
9a:cb:40:a8:ae:56:c7:93:1f:f8:e3:5e:15:63:b7:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:04:5F:E2:3E:B4:29:21:CC:B2:33:D9:6F:94:93:C0:01:B9:81:68
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:3e:89:12:56:c3:04:92:41:76:f4:ce:c0:9a:83:6f:72:
32:66:bd:68:42:e7:81:9b:56:82:9b:21:fc:4f:73:b4:75:df:
da:2b:b4:1a:26:dc:fa:4f:ac:51:04:92:a8:cc:c7:33:63:1b:
36:0f:b6:6f:5d:f3:91:27:54:fc:fa:34:ee:0a:bc:c3:53:dd:
97:8f:d9:d1:b1:19:a0:fe:d7:19:7d:4b:b6:99:6e:1e:54:5f:
76:c2:3b:6a:e9:47:19:b4:1f:28:12:89:7d:21:4e:6e:3b:24:
51:1c:b5:36:3c:49:45:5c:ce:4c:e8:03:ed:5d:f3:a7:95:6d:
68:74:fc:d8:da:ed:7a:d9:dc:43:d7:d9:a5:b3:e0:54:59:df:
b6:29:dc:dc:96:24:de:2f:22:38:e5:d9:7e:42:3a:65:03:f9:
36:00:21:d9:e8:c4:27:42:34:23:b2:51:25:72:6c:0d:4a:b7:
52:92:3c:d0:ac:0e:aa:39:ff:da:b3:10:cf:8e:4e:d1:2e:64:
58:98:4d:57:a6:01:dc:db:6b:00:56:ef:ec:5f:17:56:d0:55:
84:1e:42:4a:6e:8a:0f:ea:3f:ac:61:6b:96:cb:4f:f0:cb:d3:
88:b5:d9:20:be:35:1e:90:4b:c9:98:b2:87:74:b7:bb:01:09:
09:81:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:08:18 2025 by rpki-client