
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier: e97i9Ht21L3wJgJEuSqzBqqCKSMHQ5XEmzSOSioYqFk=
Subject key identifier: 68:F7:F0:00:97:9B:45:03:37:79:6B:C3:0A:94:0E:CB:26:58:1C:C6
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 01974A0CA74AD3CE9FA3940EE1EA23F63DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:32 +0000
Manifest this update: Sat 07 Jun 2025 11:00:32 +0000
Manifest next update: Sun 08 Jun 2025 11:00:32 +0000
Files and hashes: 1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: MnvmIIQynKFTLMlkKgbrDeifzOdmSvgLzyl1SZ4UVcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a7:4a:d3:ce:9f:a3:94:0e:e1:ea:23:f6:3d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Jun 7 11:00:32 2025 GMT
Not After : Jun 8 11:00:32 2025 GMT
Subject: CN=68f7f000979b450337796bc30a940ecb26581cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:3a:88:4f:53:ac:38:b6:08:d9:76:5a:94:
b6:71:c4:df:39:49:7a:e0:15:9b:61:19:a5:92:46:
e7:1c:63:50:22:c8:8d:06:8b:21:ed:4a:c3:8f:e4:
ca:be:62:b0:c4:ba:ad:91:75:99:12:70:4a:dd:59:
bb:ed:e9:5d:0c:55:62:60:48:9d:52:0c:63:16:0e:
4a:26:bf:47:75:33:b6:29:df:db:e1:eb:a2:fe:8e:
50:6f:ea:a9:d2:da:3c:08:ee:0d:98:5c:2e:fd:7c:
b0:b7:48:59:ec:01:29:5f:d5:e9:6b:df:29:49:e8:
ec:21:78:8f:cd:e8:32:be:2b:22:75:c2:9f:7f:70:
47:b8:19:7f:34:dd:0e:fb:6c:78:16:92:4a:77:7d:
fd:91:95:70:46:7d:3c:a8:33:5b:71:91:57:00:9b:
ce:d2:a2:cc:38:21:7e:d0:04:a2:b6:11:13:6f:5f:
26:7b:aa:6e:7a:c8:d2:b1:0c:ec:77:2e:1a:22:ac:
c2:60:2d:e5:45:15:36:fe:aa:65:03:13:12:76:83:
91:d3:86:5f:dc:76:50:b6:f9:68:cf:d8:72:d9:12:
0e:c4:25:fe:ac:27:86:b9:1a:bf:71:9d:9a:65:33:
e3:fc:ab:30:09:ad:2b:98:66:ae:d8:10:4f:4c:f0:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F7:F0:00:97:9B:45:03:37:79:6B:C3:0A:94:0E:CB:26:58:1C:C6
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:13:cb:6a:cb:bf:0b:b1:72:f0:38:56:b2:d9:8e:40:d0:5f:
16:fd:d7:6a:5e:8a:84:0a:5f:b4:26:08:bc:3e:98:e4:a4:a2:
4d:0b:50:72:33:0d:b5:c5:37:dd:fe:68:6b:c0:6d:ff:00:ac:
4d:75:7a:fb:62:53:12:8f:02:81:fc:53:3f:e0:96:5e:13:1c:
f5:6e:e1:60:b9:a3:a3:e1:36:d0:8e:7d:9a:c9:32:2b:24:2c:
95:21:6e:52:e4:f1:57:42:4f:c4:e5:65:f5:3e:48:ad:56:88:
f1:c9:40:c1:f5:5b:fc:ed:46:eb:98:a4:00:f5:d6:5c:cf:85:
19:31:a7:e9:9b:41:78:d7:27:07:8b:11:b8:57:26:14:15:50:
3f:4c:f6:fe:77:0a:09:9b:34:c2:58:5e:c3:00:f6:99:92:33:
a4:47:2f:42:31:57:73:75:d1:9c:d4:42:a4:75:55:6c:81:e6:
79:af:39:f9:95:b6:63:92:3e:f7:7d:b4:52:17:92:77:1c:58:
f7:c1:49:ac:a0:d1:af:c5:0a:31:6a:40:0a:cc:d9:f9:8a:86:
fa:36:9b:54:9c:15:5f:f7:89:fa:2e:04:0a:f4:96:56:bc:db:
6e:d3:4d:26:a3:b6:19:07:e4:21:e1:40:e2:ca:cc:ba:63:99:
c4:ba:30:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:27:40 2025 by rpki-client