Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier: +EXYsJLiuVdTCjxQ19Zzh3u7uZBKeEW4FW3PhrDKBL8=
Subject key identifier: 86:4A:04:09:A2:93:D7:9F:26:FA:EA:E5:B3:D1:35:53:45:8D:AD:BF
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 019923310961BF370A3526C2DBF49355C552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:40 +0000
Manifest this update: Sun 07 Sep 2025 08:00:40 +0000
Manifest next update: Mon 08 Sep 2025 08:00:40 +0000
Files and hashes: 1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: 5i3Z75baTEaX2KJCHgva5q9oluRmzBPEbSQAM9mPs6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:09:61:bf:37:0a:35:26:c2:db:f4:93:55:c5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Sep 7 08:00:40 2025 GMT
Not After : Sep 8 08:00:40 2025 GMT
Subject: CN=864a0409a293d79f26faeae5b3d13553458dadbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:16:dd:b7:5a:c6:a1:93:85:d5:34:0b:69:
a0:00:f2:48:15:a2:62:58:a7:9a:2b:0b:4e:45:b1:
bc:ae:68:8e:c0:d4:9b:24:c8:86:05:5e:bd:50:fc:
25:f6:ec:68:51:4b:f8:2a:51:b0:69:23:6f:65:bc:
2e:a2:0f:b1:78:21:d8:34:c0:fe:37:34:1c:e5:52:
bd:22:bb:14:44:26:ff:78:3b:fd:8f:af:35:13:1a:
2d:a2:46:da:ad:93:a2:4c:6e:90:56:e7:3c:77:3e:
5d:b8:cd:8d:ab:f9:4c:d9:fe:c2:40:5b:31:03:4a:
bc:02:b0:1d:aa:8f:ee:34:d9:4d:78:4f:65:02:07:
cd:a8:62:1f:cb:33:4e:5c:3a:5e:3f:f6:b3:50:eb:
c4:81:74:53:57:60:30:83:da:cc:8c:63:c5:e2:05:
10:73:07:1f:eb:1b:18:77:86:d7:6b:7a:94:4b:d6:
9a:22:ad:99:2c:d9:57:e9:fc:03:30:5c:42:09:60:
4a:52:9e:70:c3:63:fe:1f:a6:46:bb:f3:86:d1:08:
21:b0:2e:3e:27:de:df:22:3b:46:66:09:4b:c4:b1:
96:68:ee:ac:e3:3b:bf:ad:02:6b:0d:58:a2:11:d3:
67:6f:9d:54:f3:27:cf:79:0e:29:46:23:4a:d9:95:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4A:04:09:A2:93:D7:9F:26:FA:EA:E5:B3:D1:35:53:45:8D:AD:BF
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:65:0e:5b:f0:6b:a1:66:08:4e:05:9b:3e:e3:0a:da:dd:ab:
00:77:35:61:fd:30:e4:7e:f1:24:08:f8:be:6d:2c:59:93:ec:
ec:78:d2:ef:87:02:3e:a4:fe:aa:dc:cc:7e:69:e6:8d:dc:fc:
67:67:c6:8f:13:a6:cc:1f:21:0f:6c:41:21:83:5b:66:43:87:
a6:1b:e8:71:a9:28:84:4a:cd:22:a7:01:a8:67:ed:5d:44:b0:
85:8b:d6:d0:bf:57:35:3b:fb:50:df:f1:72:e3:b1:cc:46:71:
6f:8b:f0:4c:54:7b:72:e0:31:5b:7c:1b:a3:5f:a9:4c:17:09:
de:e6:3b:37:91:7b:99:c3:19:c5:68:55:48:c9:85:37:d6:00:
88:a6:be:40:ba:fe:47:36:3d:98:25:53:7f:70:1b:d8:b1:61:
77:0f:b5:6c:8a:5b:2d:23:0a:7e:45:83:a4:2b:fa:92:04:96:
0d:09:3a:d4:88:ee:8f:3d:e7:49:87:e7:a0:4a:ff:87:2c:ec:
de:83:c0:5e:5f:56:1e:ec:cd:20:93:7b:6c:7a:81:99:49:09:
d0:b9:7e:9c:4e:7a:77:6b:53:6d:8b:17:e4:48:ee:15:a6:ec:
b2:77:0d:2f:52:15:15:50:b0:ec:17:ad:a3:23:b1:2b:91:5d:
92:9f:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:23 2025 by rpki-client