Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier: L+9KQSwUG7xpwNyF4ZyPsPRDmbjfcmsgppqv1ODxXsM=
Subject key identifier: 02:4D:1F:36:52:1E:D3:C8:32:63:2D:62:F6:D8:E5:70:A4:11:57:C2
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 0198D660C9792D3CF0972E756798E01BF980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: V8C6Va11N8EvjZyuanpoqiYL1Wf57V+t+58/ijdOie4=)
3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c9:79:2d:3c:f0:97:2e:75:67:98:e0:1b:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=024d1f36521ed3c832632d62f6d8e570a41157c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:c2:fc:4d:34:2e:94:fd:2a:b1:bf:4e:72:
80:32:c5:b9:65:92:14:78:5b:c6:75:55:58:17:84:
c4:d4:25:21:c8:5e:9c:76:78:d8:68:b2:6a:bf:7f:
1e:00:4e:44:96:21:ac:93:25:0a:a8:dd:bd:3b:5c:
78:62:96:a2:e0:f1:d4:f0:78:ff:fe:8a:21:e4:4b:
06:06:a6:bd:3a:2b:7a:eb:aa:76:4a:6b:d2:e1:23:
65:3f:24:74:f8:a9:8a:49:d1:4a:02:d5:ac:7e:3a:
d6:5f:84:f3:1e:66:2c:bb:a9:4c:88:d1:88:ef:c9:
9e:3f:a4:eb:07:e7:d7:76:63:e1:ae:c2:2e:6c:05:
64:bf:e8:df:3b:63:25:b7:1d:14:cf:cb:3d:40:ee:
58:79:27:be:55:01:77:ef:08:d7:b3:e0:92:63:11:
9b:cf:72:25:85:fe:73:53:03:b6:c8:20:fa:ac:46:
ad:8f:23:60:27:71:7f:cf:9a:44:17:97:dc:1e:73:
5c:14:21:c7:26:ef:c9:8f:0b:d4:5f:25:88:57:21:
4a:54:55:70:2f:c3:2a:5b:9a:65:a2:bc:6c:26:6f:
6f:39:dd:b9:aa:e1:fb:de:65:c9:7b:a5:39:7f:1f:
48:c5:e4:89:8a:3f:30:20:75:2e:eb:d2:f0:bd:3e:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:1F:36:52:1E:D3:C8:32:63:2D:62:F6:D8:E5:70:A4:11:57:C2
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d6:32:08:8b:e7:9f:e3:dd:2d:dc:d6:4f:34:1f:e6:e8:90:
66:ed:f4:1d:22:0b:11:1a:c8:ca:f4:84:28:f2:f9:f2:2d:64:
64:a9:29:af:63:b9:c8:85:b3:e0:ff:53:6d:c1:23:5b:51:42:
d7:1a:fb:14:40:b7:45:2d:b7:ab:62:8a:34:0b:e5:d2:9f:eb:
3c:a6:ba:c9:37:b3:4f:5e:5f:1d:46:c9:99:cd:11:8d:7f:77:
77:88:b7:f8:07:af:51:06:60:d6:cc:38:74:02:7b:b3:c3:06:
d5:c8:c5:3e:c4:c5:b1:56:c9:32:cc:ad:75:a5:e4:2e:e0:3d:
77:dc:75:a5:ff:b2:0e:98:00:f4:8b:fd:e6:a9:9f:f2:39:e2:
f2:25:4d:a4:ce:2b:0d:d2:e7:45:c2:83:6a:19:a8:be:43:78:
64:1e:f5:af:27:69:ea:30:c2:c9:e3:52:f0:a5:fe:9c:8c:6c:
30:5c:66:89:b7:9f:d1:54:22:69:a3:b8:5a:64:ec:e3:e9:b0:
fa:d6:9a:71:55:7e:9e:36:0e:c2:8e:f4:4d:a2:20:9b:e7:78:
c0:9d:b7:c1:b0:d1:8a:0d:11:fb:18:d5:2e:b9:49:ad:5e:2a:
3f:21:f5:92:71:99:b3:58:ec:7f:58:ba:fa:25:b4:9f:7a:71:
be:4a:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:49:00 2025 by rpki-client