Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: HU4yq1WAlQPYFWZeFxkOhRzmYUP/rIqnMsMfMtJH9E8=
Subject key identifier: 6C:98:7F:33:38:ED:4D:63:20:76:35:A5:91:1B:2E:23:9B:CF:35:05
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 0197C04A3787C712BF145E8DB916A27EBF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 0F85
Signing time: Mon 30 Jun 2025 10:02:58 +0000
Manifest this update: Mon 30 Jun 2025 10:02:58 +0000
Manifest next update: Tue 01 Jul 2025 10:02:58 +0000
Files and hashes: 1: STbkSsaZ4h0iV7Ywpice3xeLm7Q.roa (hash: OYYfvGM7goZ9gxelNf2ly9w5B8haX1abcCwOvQfYiPk=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: XtLe8AvNwCjtJJJ1EIL7bfh0JmzD2M+cC++EXKyoDdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:4a:37:87:c7:12:bf:14:5e:8d:b9:16:a2:7e:bf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: Jun 30 10:02:58 2025 GMT
Not After : Jul 1 10:02:58 2025 GMT
Subject: CN=6c987f3338ed4d63207635a5911b2e239bcf3505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:05:b6:3c:6f:50:75:be:4b:ba:94:af:d5:
7a:e9:4c:b7:47:0d:69:2c:3b:4c:41:83:32:ea:87:
39:06:0a:f3:b3:4f:b6:8b:49:cb:bd:ff:86:d9:c1:
23:16:71:e8:b4:3a:c3:7d:cf:7a:5d:b1:ac:40:1f:
f1:7e:9f:ea:fd:89:d9:1e:13:d9:78:6b:30:a0:6f:
05:20:05:9f:cd:60:0e:1a:7b:d7:1e:20:e0:2a:70:
43:18:4e:48:9a:a6:6f:41:03:05:41:dc:8c:55:8b:
2f:09:5e:fc:67:c4:80:81:55:fa:cf:11:5a:68:37:
92:e4:f2:4b:9a:ac:32:77:90:cb:02:d6:39:75:4f:
07:2c:00:9b:1a:d2:69:14:55:77:1f:56:9e:c0:c5:
8d:97:be:25:d4:ed:f6:26:e6:56:ae:e4:14:1b:20:
3f:12:be:9f:03:6c:a6:2a:5d:2d:1c:2e:fe:1b:fc:
09:c2:60:9e:23:03:46:d4:ef:f0:cd:95:fc:4b:0a:
3d:c2:31:78:b5:f6:44:4b:e8:0e:ba:85:7a:fa:e7:
31:1c:f8:a5:00:b7:3d:bb:8e:9d:51:9a:b9:9d:15:
55:90:0f:91:49:84:8d:8e:34:4c:98:eb:35:8c:17:
26:9a:fd:3e:6c:f7:0a:67:ef:f2:45:7d:49:47:36:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:98:7F:33:38:ED:4D:63:20:76:35:A5:91:1B:2E:23:9B:CF:35:05
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:37:8a:39:7d:a8:77:1d:17:5e:ff:03:bf:3b:17:c4:3e:0a:
bf:bc:76:c5:28:1d:7f:59:f9:2d:df:fb:ef:02:04:7b:b3:c5:
f8:be:6b:83:15:f9:00:73:35:3d:8a:a8:af:e0:37:b3:2d:95:
19:54:b7:9d:1d:2f:27:42:3c:a3:4b:3f:86:6a:80:69:58:25:
8d:cb:86:64:bf:fa:e5:df:cc:55:b6:c2:75:5d:fe:f8:22:f9:
31:ac:19:4a:63:2a:c8:04:19:41:8b:01:90:18:24:aa:2a:b1:
32:2c:6c:b0:f2:a8:d3:54:c3:a4:b1:e7:f4:e2:51:ed:ab:06:
c3:81:f2:16:37:f4:b6:95:b0:c6:bc:0c:fe:85:2b:52:73:4f:
fa:54:91:4c:00:0c:58:d4:56:fa:3b:08:13:ac:9d:69:ee:f7:
87:59:dc:24:9d:3e:e6:69:e0:c2:8e:e4:a5:1b:da:f5:01:d5:
90:34:d6:b5:40:a7:d5:d7:39:48:58:50:5f:3f:2b:f0:8c:74:
89:2e:d6:e9:d9:9f:7f:a0:79:38:3a:e3:03:e5:b6:0f:5c:7e:
ea:cc:54:49:56:1d:87:12:6c:fa:cb:8c:60:87:90:42:9d:3e:
ea:08:44:b1:5b:9a:b2:30:93:2e:3f:b7:7f:5b:98:d1:ac:80:
61:7a:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:28:04 2025 by rpki-client