Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: Sz+zizm4nL/CR8HeShmD6tEmQiEqE4hGSNshGRIf2Iw=
Subject key identifier: 5B:5E:FB:27:4B:BD:06:BA:E5:C2:21:7B:18:70:B7:36:29:F7:00:DB
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 0198D65FBD78193D787BDABBC46453971183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 11E8
Signing time: Sat 23 Aug 2025 10:00:55 +0000
Manifest this update: Sat 23 Aug 2025 10:00:55 +0000
Manifest next update: Sun 24 Aug 2025 10:00:55 +0000
Files and hashes: 1: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (hash: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=)
2: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: fgCttp2jhHrxgAeLJtXyl4alft3nAA2BjN5DUd4Y6LM=)
3: OhFs8ELf0BkBqUqSta-UtJTxxOY.roa (hash: eORqJrZ4eHwt+ZtqWQMblZ7ybIDSjazTPoe3DTl1tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:bd:78:19:3d:78:7b:da:bb:c4:64:53:97:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Aug 23 10:00:55 2025 GMT
Not After : Aug 24 10:00:55 2025 GMT
Subject: CN=5b5efb274bbd06bae5c2217b1870b73629f700db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:f7:59:41:19:04:e2:29:ea:bf:86:16:69:
d7:86:18:83:46:83:b7:bc:7c:9c:76:85:d1:37:50:
a2:f2:83:db:a4:c6:f7:3b:28:c9:db:a0:e6:49:b6:
b2:34:05:c2:4d:1c:1f:11:25:2d:98:cb:fa:d7:d9:
1f:cb:bf:e2:ec:31:e6:3c:b9:75:7e:01:d8:b9:f4:
91:50:67:c8:b0:f0:3b:0f:a0:c7:57:96:e6:98:f9:
95:60:3c:3d:86:59:5f:03:9d:6b:58:eb:2f:ec:66:
04:bc:e9:fb:53:48:1b:1e:38:4c:4e:d2:22:25:b0:
e0:95:1b:4c:e3:08:66:f9:36:03:c8:81:09:49:87:
a9:90:6c:aa:e7:e5:44:c2:6a:7b:77:dd:34:20:8c:
87:47:d3:a9:5c:b3:7d:c8:05:dc:ad:c5:59:17:92:
10:5f:9a:b4:96:1e:7c:32:8d:2e:c7:12:31:44:3c:
cd:84:f3:83:be:e0:35:ea:0b:00:a2:fe:06:e1:94:
2b:85:e9:3d:26:ba:a8:77:b8:67:8a:3f:21:ab:bf:
b0:78:46:09:33:80:3e:cb:ae:d6:06:4f:22:6f:6d:
36:37:ae:81:67:8b:f5:cc:57:48:57:94:1b:4e:73:
bd:1a:93:79:de:8a:4f:dc:ff:79:38:c9:ed:17:3b:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5E:FB:27:4B:BD:06:BA:E5:C2:21:7B:18:70:B7:36:29:F7:00:DB
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:30:79:43:a0:7c:68:21:b5:a2:e9:11:c0:76:d3:51:b4:18:
21:cc:e8:6c:9e:af:28:ed:83:39:56:a9:62:12:87:0a:8e:70:
06:af:87:be:ac:15:c4:19:b6:26:a1:7e:a5:08:78:f4:39:7d:
4c:9d:e0:92:e5:85:aa:4e:16:8e:f0:ce:7b:1f:2c:f4:7f:35:
d8:83:7e:44:02:f7:8b:83:9a:91:7d:ef:f6:66:f9:6e:58:92:
4f:89:af:b1:db:8f:48:d7:de:d3:8c:56:45:64:06:c8:0f:9b:
00:02:6a:44:e2:af:f8:8d:d1:ce:e8:45:ba:77:ac:c6:9e:cd:
bd:f0:96:66:e0:51:a0:03:49:95:b5:73:13:b4:66:49:55:3c:
88:d8:b5:d8:0f:48:1a:22:ff:e9:0b:ac:27:f2:69:75:98:e1:
aa:33:bf:d8:59:fd:3d:5b:e8:f7:04:a3:af:d2:16:e6:b3:69:
5c:d7:a4:07:84:60:8f:29:7d:51:a8:8e:8f:10:9c:48:57:53:
50:33:bf:15:7f:68:ad:2f:d1:cd:c9:25:39:2f:97:1a:d9:fa:
4f:40:cf:38:80:db:0d:05:0e:e6:f8:70:2d:b6:67:b6:43:cc:
b8:88:6c:8f:7d:30:ad:be:05:3e:12:df:04:82:cf:90:bc:5d:
b2:1d:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:57 2025 by rpki-client