Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
File: mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json)
Hash identifier: 6zDnKuBrull9bf48nzwy6HG6paUd3HI2jrP2Un9a7bY=
Subject key identifier: 5A:C9:22:57:92:44:42:11:A1:D1:6E:4B:EF:2F:AF:C2:1F:FA:C0:C9
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 0197B7459ABF4D2691A0BAC045DC877F7DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
Manifest number: 03C7
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=)
2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=)
3: CF82jVUVZeKpuyFYv8cM6TsLQC0.roa (hash: JBQmTeNOrtVCdfq+3VNtxXtIRDR/14iOJ6hQdOlG2Jg=)
4: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=)
5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: h4m0UpNdH4CiADAht3gMTmBkcrxeITbV0ZnzRyfF3ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9a:bf:4d:26:91:a0:ba:c0:45:dc:87:7f:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=5ac9225792444211a1d16e4bef2fafc21ffac0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f5:b1:e9:d3:1e:1b:03:1b:2b:cc:5f:75:58:
1d:f1:5d:d6:5b:0b:a9:5e:ec:fc:6f:76:ab:ef:fa:
3c:66:06:8f:81:1e:da:06:7c:87:96:0a:8c:37:9e:
13:5a:15:0c:b7:3d:d5:67:ac:2e:45:a4:0b:54:8b:
56:a7:c2:4a:e0:bb:7f:bd:0b:48:95:58:81:ce:8a:
df:a8:a4:53:70:19:0a:a9:e0:9f:67:20:8b:25:9b:
8c:3b:d9:6b:4d:e9:8e:64:3e:7b:3d:53:8e:eb:2b:
69:88:db:b7:94:13:d4:2d:a3:ec:91:11:41:1b:8a:
73:57:29:ac:97:d6:81:07:fd:41:bd:d5:f1:25:7c:
79:b3:58:40:38:98:67:d0:39:91:0e:82:2b:c1:50:
10:8f:11:2d:96:c6:00:83:a9:38:b6:1e:14:20:2b:
e7:78:02:ee:38:3f:e7:30:db:a7:78:5f:c8:9a:bd:
f7:2a:36:e8:5c:b0:5b:3a:27:91:fa:fb:b5:c5:14:
10:a3:9e:ac:08:b0:76:af:e9:8e:a6:22:d2:97:65:
bd:6c:78:11:b3:87:31:98:b0:e1:ff:39:e0:6f:72:
01:c5:2c:bd:ac:88:50:6c:58:06:4f:9e:68:14:1e:
e2:69:82:a2:80:ba:49:1b:02:d4:df:9f:08:54:d1:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:22:57:92:44:42:11:A1:D1:6E:4B:EF:2F:AF:C2:1F:FA:C0:C9
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2a:59:37:a7:45:a6:f7:7c:f3:69:b3:b4:20:ab:ef:ad:80:
2d:d3:ca:ce:25:59:10:3b:ef:7e:96:e3:f2:8e:7e:3c:a5:c3:
79:d2:8b:f9:f1:7a:5d:02:5a:61:d9:8c:f5:25:60:0d:06:8d:
e8:44:52:bb:57:4f:e1:d7:13:c6:b2:d0:20:15:e8:aa:ed:a9:
24:bf:aa:fe:56:c1:84:c6:c1:9d:f4:a1:eb:07:f1:64:63:17:
4b:61:73:e0:30:fa:9b:69:8d:12:4a:c3:b4:be:38:f9:08:d5:
54:e9:7a:7e:e5:ef:d0:fa:f3:35:b8:03:f9:29:3b:f4:53:8c:
92:c2:f7:05:3c:ab:90:b7:39:39:3f:4c:95:4a:ed:63:80:df:
bd:45:03:ca:96:b5:4b:c0:03:20:e7:fa:e0:2e:24:2b:b0:ad:
f2:1d:12:de:90:ad:24:e7:31:63:2e:8d:73:bd:76:b5:60:6c:
30:17:c0:d3:dc:4c:fc:b3:e1:13:78:0d:88:2d:95:ff:a2:7e:
e3:63:a7:2f:e7:1a:3b:ba:00:21:d9:52:32:07:59:f0:bd:43:
e9:5f:de:c6:d5:30:06:2a:b6:fd:61:44:75:f8:b3:78:58:90:
9a:12:66:78:1d:87:58:c3:dc:3e:0b:80:0f:e1:ed:39:af:14:
c9:16:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:31 2025 by rpki-client