Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: IjE2jF5qXIP0cJjo5T8h7zbLsLONLu534fG04BnvrXw=
Subject key identifier: 66:CF:FB:DE:23:59:22:BA:85:0E:83:62:89:C9:35:75:4B:F5:A4:6C
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 0198D4E073EF3A46DC7F1C0DC907102380AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:16 +0000
Manifest this update: Sat 23 Aug 2025 03:02:16 +0000
Manifest next update: Sun 24 Aug 2025 03:02:16 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: xovv6zZMtGng1IUjN05eV+L0CRfultAlLg3xAW0rwxI=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:73:ef:3a:46:dc:7f:1c:0d:c9:07:10:23:80:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Aug 23 03:02:16 2025 GMT
Not After : Aug 24 03:02:16 2025 GMT
Subject: CN=66cffbde235922ba850e836289c935754bf5a46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:4f:cb:47:b6:42:c8:12:a3:3c:61:31:a6:
aa:0d:d1:e1:57:72:62:9b:50:3d:da:e7:6a:b0:e5:
ce:cb:df:ca:45:22:ac:cd:13:5c:93:d6:00:46:16:
27:b9:c8:f5:8f:5f:a1:b4:7f:12:74:b3:ee:08:1d:
92:09:e5:2a:70:21:0e:48:04:77:fe:a7:b2:56:59:
dd:ad:b9:89:a2:36:bc:3b:a0:ba:a0:89:b7:ff:2f:
e9:55:f3:d3:c7:88:30:7b:37:7e:82:2a:f3:10:5f:
93:f4:b4:54:1b:e9:2f:70:a9:12:99:54:3e:ca:fb:
fc:4c:62:bd:7d:47:7c:b6:ec:5d:12:3b:42:e6:c4:
85:7c:40:54:a8:93:d9:9b:e5:4c:c5:89:ef:c3:39:
77:e6:11:7a:1c:1e:b9:d7:6c:a3:0e:64:ee:98:32:
d1:0d:ab:b9:d0:02:f5:18:fd:0d:a2:83:40:ec:b5:
97:e1:93:c1:01:dc:fe:1d:55:90:c6:95:d5:90:68:
43:34:ed:14:a9:24:ac:b9:b2:40:7a:b3:5d:67:a4:
94:7e:e9:26:a2:ff:49:d3:bc:48:52:18:c7:25:1e:
12:22:2c:17:e8:98:f0:5a:cd:03:91:73:32:31:43:
27:3d:fd:08:6a:14:f0:45:67:8a:89:50:d5:fc:83:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CF:FB:DE:23:59:22:BA:85:0E:83:62:89:C9:35:75:4B:F5:A4:6C
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ad:47:00:e1:33:e1:62:83:e4:58:e8:b2:49:9a:85:3c:ee:
42:0b:04:aa:d5:43:d0:cc:68:02:2b:84:5f:c7:22:1c:ea:21:
a0:ea:7d:dc:4b:a4:58:f3:08:c2:82:88:de:7b:94:7a:a2:96:
87:ab:c5:60:c6:ec:83:25:a1:76:14:31:dc:db:f5:69:fb:0e:
1c:ed:05:09:7c:c1:b2:ce:09:72:9b:7c:49:50:1d:85:0d:3e:
b4:62:c9:90:15:52:43:e7:df:7d:ca:97:51:9b:4f:fa:34:86:
f2:67:7e:53:4f:f9:d3:b0:e2:db:4c:37:d0:24:c4:93:71:1b:
6d:f2:3e:78:2a:64:06:99:68:19:90:7f:66:2c:49:a4:4f:42:
17:72:d4:a8:a7:11:4c:43:c3:82:35:e2:52:15:b9:5d:97:59:
17:58:92:c4:13:d6:c9:8f:ea:79:8e:d8:01:92:e4:c3:5a:af:
a1:f1:51:87:f7:f9:c6:45:fd:8f:80:39:3c:7b:06:b3:ee:df:
b9:52:3f:e5:d6:c8:b7:36:80:6a:f4:41:36:af:2d:60:1a:2a:
ea:46:8b:3a:e8:4a:87:70:b8:d2:66:ef:eb:e4:ca:f8:e0:a7:
60:72:29:2e:eb:fe:0c:c8:f6:26:d7:e2:67:2c:93:00:2e:31:
91:ed:99:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:14 2025 by rpki-client