Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: D6ucwhJu4RhkKor3KuHMwYxl10tNqw8rewhJy0RvQ20=
Subject key identifier: 52:41:17:B5:D6:37:69:D5:37:95:16:CE:AC:86:5E:4E:6B:4F:5C:50
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 0198C79202BA1542A2F3E7FD9DAC0E69DE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1645
Signing time: Wed 20 Aug 2025 13:01:31 +0000
Manifest this update: Wed 20 Aug 2025 13:01:31 +0000
Manifest next update: Thu 21 Aug 2025 13:01:31 +0000
Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=)
2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: mlsV7gXIPYY6D+EIGIayytCir9K0TFBtLjI+L5dSbhE=)
3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:92:02:ba:15:42:a2:f3:e7:fd:9d:ac:0e:69:de:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Aug 20 13:01:31 2025 GMT
Not After : Aug 21 13:01:31 2025 GMT
Subject: CN=524117b5d63769d5379516ceac865e4e6b4f5c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:bf:fb:78:b7:98:89:b0:1f:0a:a4:9c:b9:
f1:a8:12:c4:0c:e4:5e:b4:a6:5c:79:b3:6f:91:12:
2e:d2:67:5a:d9:7c:ca:95:2b:c9:20:70:2b:32:1c:
e6:dc:bd:71:f8:0c:6e:78:fc:64:5e:19:dc:b3:2b:
ed:38:b4:23:95:c2:65:6b:97:88:57:d2:8a:3e:b9:
b8:2b:c8:f5:e0:26:0c:d4:b5:bb:89:0f:39:dc:2f:
99:d6:3d:93:9f:34:2f:43:2d:91:3a:0c:e3:b0:30:
94:43:39:7f:93:1e:91:6b:78:28:85:60:2d:73:16:
68:5a:48:9b:af:81:6a:b2:9c:1b:a7:e1:ba:d1:38:
5a:ed:3f:bf:5b:95:17:a2:1a:5b:8c:ed:01:c6:7e:
9b:7d:e1:27:30:f0:d9:f9:28:81:e2:b9:10:f8:19:
cb:d0:73:c8:33:ab:19:2e:ab:9b:1f:9a:86:66:dd:
4f:6c:ab:09:f6:bc:e2:de:bf:64:c4:7d:da:bd:94:
f4:1a:f8:ec:2b:a3:b6:9d:ad:0b:99:e9:84:8d:85:
0a:79:85:53:6f:27:ba:74:20:15:67:bd:f4:59:24:
67:47:37:37:80:92:96:51:9c:7c:17:86:30:3a:c1:
03:e0:e1:a0:87:69:5c:98:c8:38:5b:63:6e:08:70:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:17:B5:D6:37:69:D5:37:95:16:CE:AC:86:5E:4E:6B:4F:5C:50
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a3:04:d5:2a:c9:85:4a:d8:24:5c:c5:fb:ad:bf:76:77:1a:
e1:e9:49:08:fe:3c:b5:d4:3c:c8:f5:86:63:84:aa:2d:0f:ab:
85:b6:d9:42:c1:02:5a:c4:a6:ff:9d:e2:3f:ba:8d:b7:b5:c8:
74:b1:15:78:24:da:38:14:e3:d0:3d:31:3a:57:f3:20:2c:b3:
1a:3d:c8:87:45:39:a4:e8:85:4b:bd:9b:c4:31:2d:a8:7a:fb:
86:d2:35:39:55:31:7d:1b:13:bc:56:60:1d:a9:d2:96:8f:ed:
22:a3:f0:91:f0:ca:0d:d9:49:fb:af:b6:50:09:90:3a:01:f6:
c5:0e:1b:7b:06:8b:03:12:e5:dd:0e:c6:af:b0:58:0f:05:f5:
da:fc:d9:f3:32:a5:72:76:a4:aa:e7:08:3d:9c:26:f0:43:cc:
25:42:c5:f3:31:a3:aa:5b:07:ba:b2:df:12:71:1e:66:c2:2b:
d7:76:79:51:5c:70:fd:8c:a5:45:44:9f:88:57:70:c6:60:83:
0c:9c:97:6c:93:57:b3:1a:b6:7d:e1:c2:f0:41:9c:79:67:fa:
e2:d6:40:c4:4b:01:00:8d:e2:70:f3:76:33:a6:64:fc:ae:6f:
a3:18:07:ab:6f:e2:02:20:0b:62:43:eb:d9:ab:12:32:7b:2b:
ee:b4:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:33 2025 by rpki-client