Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier: jidC8+4JzLSoLPsrGB5LX/H1M6fLkv0y2U7iRP3CaB8=
Subject key identifier: 57:00:CC:D6:0D:B5:37:9F:1C:5C:C8:E4:AE:A9:9F:48:34:17:65:3B
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 0198D404579CCA7BE27E6CBB37D4D47B483B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:01:50 +0000
Manifest this update: Fri 22 Aug 2025 23:01:50 +0000
Manifest next update: Sat 23 Aug 2025 23:01:50 +0000
Files and hashes: 1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: UY0dXewVGQp3pFnVEqCZXKIW070hMBdMsjK6aHVZ0jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:57:9c:ca:7b:e2:7e:6c:bb:37:d4:d4:7b:48:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Aug 22 23:01:50 2025 GMT
Not After : Aug 23 23:01:50 2025 GMT
Subject: CN=5700ccd60db5379f1c5cc8e4aea99f483417653b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:db:aa:cb:5a:6b:54:a8:47:67:3a:4a:1c:
ab:a5:69:c8:b4:e8:eb:ba:3e:16:6b:af:66:11:4e:
4c:a5:eb:72:48:f8:a5:4c:84:8c:aa:c2:67:bc:be:
7a:c5:8b:48:d8:02:26:32:e8:a7:f9:17:c7:2c:3a:
27:58:30:12:98:f6:a9:4c:4e:17:38:63:e8:53:c6:
31:d8:b9:c9:d8:45:4a:06:a4:b8:a9:65:1e:d0:d2:
c5:c9:9b:ad:18:86:1a:e4:d9:57:f4:d7:ee:62:57:
55:91:9e:64:31:4b:24:f1:31:99:de:fc:93:3c:29:
62:ab:d8:af:3e:a9:28:9e:a7:7b:a1:fc:a8:f9:20:
47:ee:84:0b:da:2a:f7:23:74:83:88:4e:60:5a:18:
92:dd:91:9c:02:c7:b3:ec:c4:e0:68:85:e2:9d:1a:
cf:7b:f4:f7:b1:e2:0a:d9:83:d6:f2:36:b3:4a:d9:
38:44:2f:89:3d:55:32:e8:c0:2f:88:50:3e:e8:b3:
03:83:6f:63:df:06:e7:4a:27:0f:93:58:70:ee:44:
64:de:39:31:55:16:c9:1d:5b:11:ac:12:55:79:22:
ae:01:f4:ee:80:d1:2a:d7:8a:4c:52:c2:f1:dc:2c:
2d:93:76:05:75:0c:26:d5:ca:61:39:de:c9:ba:4a:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:00:CC:D6:0D:B5:37:9F:1C:5C:C8:E4:AE:A9:9F:48:34:17:65:3B
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a1:ad:f1:f4:6f:09:fc:1a:e8:a5:f5:2a:a9:2b:01:31:22:
58:eb:a5:52:a2:6e:50:b3:21:4f:1f:cc:55:5e:58:2d:32:00:
81:a9:24:be:74:3d:72:70:1f:74:ab:4f:28:37:52:55:f2:48:
35:55:dd:d6:8e:ab:64:37:4a:4d:1c:31:f9:f9:91:2a:41:88:
e4:c3:1d:de:44:89:f9:39:fb:6e:22:69:53:02:93:db:98:e9:
b3:42:f3:eb:27:3e:45:39:73:bb:ff:86:7f:13:bb:ed:08:3c:
2f:9e:d0:ec:53:7a:fe:bc:03:eb:44:4a:52:29:be:c9:a8:dd:
7d:d3:cd:1b:01:6d:70:18:95:aa:c9:e4:9d:4e:4e:20:ec:0b:
d9:15:3d:50:49:e4:f6:89:a0:52:f5:41:34:8f:25:3e:72:11:
ab:cc:57:18:ee:cb:9c:14:13:7d:24:0d:97:af:d0:e6:22:06:
56:37:0d:e6:21:de:e3:18:27:90:45:b5:d9:80:4b:58:63:18:
a1:fd:52:7b:1d:e2:8e:0e:c1:6a:d3:06:1a:0c:27:58:63:69:
8f:f1:6c:4f:3f:9e:d6:6f:e2:18:cc:8a:04:c9:ff:0e:b0:ff:
68:d1:1f:3b:d7:b9:86:41:4f:ab:9c:69:29:fb:24:1c:85:43:
6d:9a:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:06:39 2025 by rpki-client