Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: 9bZGdkAuMtqzkdEIPLL4E8iAiN3PIPWtDocgTUgkNK0=
Subject key identifier: BB:51:76:BF:3E:FF:71:F9:75:13:38:4A:98:D6:1B:A2:8F:02:B1:10
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 0197B7B2FFE732EF07D7F513C9F16C4B6DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 068B
Signing time: Sat 28 Jun 2025 18:00:50 +0000
Manifest this update: Sat 28 Jun 2025 18:00:50 +0000
Manifest next update: Sun 29 Jun 2025 18:00:50 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: N0c3HhHNUxHLV93r6l4Q9re7VmoLAe8Z691/K41fvDM=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ff:e7:32:ef:07:d7:f5:13:c9:f1:6c:4b:6d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Jun 28 18:00:50 2025 GMT
Not After : Jun 29 18:00:50 2025 GMT
Subject: CN=bb5176bf3eff71f97513384a98d61ba28f02b110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:57:d1:e5:c4:2c:a0:11:04:cb:90:11:ff:
84:21:9f:61:a1:08:e3:0b:53:65:61:6b:ff:dc:42:
be:c0:a3:8a:97:6e:9d:5f:57:dc:52:ca:80:eb:59:
a8:b9:97:96:ad:a1:74:00:33:f3:73:53:2a:58:62:
45:fa:d4:17:c4:ea:93:8d:5f:34:92:3f:07:50:c4:
f5:ca:46:83:24:4b:2d:a7:04:69:c1:16:19:85:6e:
ee:98:11:0f:0a:2e:b4:4c:2b:c6:1a:e3:b5:d2:9d:
68:93:fd:63:c5:82:07:fa:6e:6f:a0:f0:f1:49:af:
07:4e:5a:44:bf:14:ce:ad:bd:cb:c6:48:c2:61:d2:
de:f6:8f:87:0d:7c:f7:b5:d8:a4:7b:c7:1a:46:cc:
d0:3b:26:58:96:9d:9e:80:33:85:58:f0:0c:24:d2:
a5:39:99:d8:18:35:8e:65:62:91:c1:7f:6c:9a:94:
fe:ec:d0:f2:63:03:20:f8:b7:65:ca:67:14:26:7a:
70:ee:8f:ab:4b:96:da:df:7e:d8:91:b5:17:85:e0:
35:40:e6:dd:5c:b1:ba:13:23:a6:32:e1:84:2c:07:
e4:6a:9f:34:87:a4:e1:33:95:aa:32:5d:07:11:65:
e7:59:7a:f8:6c:fb:b2:f7:2c:45:38:29:b6:fb:73:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:51:76:BF:3E:FF:71:F9:75:13:38:4A:98:D6:1B:A2:8F:02:B1:10
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:26:d5:c6:59:32:b0:25:22:32:fa:4e:9d:ac:b2:37:9d:3f:
ff:05:d7:7f:d3:6e:87:e1:37:52:9b:bc:a7:bb:c1:70:be:a4:
3c:73:06:e9:9e:80:0d:93:8c:31:67:c1:a5:c1:e6:06:22:ed:
8f:e1:44:62:49:68:75:c1:7d:9b:16:31:ae:e9:49:e0:57:9c:
11:4e:ec:d4:82:e9:e7:ff:0b:4d:ce:ed:e8:5a:bb:61:79:a3:
7c:c0:d2:75:e8:77:c8:04:77:b9:91:24:ea:29:bd:60:eb:4d:
89:cc:af:f2:ad:4c:28:16:77:31:5d:6c:29:ab:14:72:d2:8e:
dd:1a:18:61:f3:51:5c:c9:80:e5:79:c8:16:ce:56:c7:4f:33:
af:28:58:e9:95:5c:62:0c:0f:be:18:f5:7b:0d:48:08:9e:70:
41:85:88:19:fd:76:42:e2:2e:35:fc:71:ed:1e:35:0b:95:83:
41:50:33:91:13:d6:bf:b7:9e:54:75:65:44:0d:b2:00:f5:2d:
82:df:0b:56:fa:2f:c0:49:31:f8:ea:2c:b5:c4:cf:a8:81:74:
3c:cf:62:e0:10:8e:bc:86:38:59:72:3d:57:b6:70:c8:4d:66:
12:bc:52:0a:1e:75:ed:d3:d7:f4:01:37:c8:7c:f4:10:26:36:
6d:3a:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:34 2025 by rpki-client