Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: CZK1dAuMT2b2CCpJjT8wKZ9tPLEYB9Rz5IBKWEjV1a8=
Subject key identifier: 57:62:1C:9E:C3:42:75:00:26:8F:F7:92:EF:5E:36:C8:27:FB:E9:17
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 0197B745B1FB20F9852BACE023EAB1AC2F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:01:27 +0000
Manifest this update: Sat 28 Jun 2025 16:01:27 +0000
Manifest next update: Sun 29 Jun 2025 16:01:27 +0000
Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=)
2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: XvApHifpUmjjQ87RChPjcSkaQYnesg5p+2BIoeVP1aw=)
3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b1:fb:20:f9:85:2b:ac:e0:23:ea:b1:ac:2f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Jun 28 16:01:27 2025 GMT
Not After : Jun 29 16:01:27 2025 GMT
Subject: CN=57621c9ec3427500268ff792ef5e36c827fbe917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:77:59:1a:7f:a4:ef:0e:ad:ca:03:35:c6:
ec:fb:75:ce:6b:9a:9f:5b:1d:a7:89:72:7f:c5:c1:
4f:13:92:34:e2:23:f2:77:40:b4:cd:00:7e:5d:77:
a9:b3:e3:da:23:c6:a8:6e:0a:5d:4a:af:eb:4d:04:
fb:a8:70:10:77:3d:a1:c0:cb:4e:0d:72:36:45:1c:
65:72:34:33:9e:29:22:f6:8a:cf:bd:ee:f3:04:99:
f6:d2:b4:d5:cb:ee:7c:cf:b4:4d:e0:54:cf:9b:5d:
92:51:85:8f:98:3d:7b:83:fd:47:35:16:fa:fb:62:
a1:de:3f:15:48:30:7c:42:41:1e:65:b9:88:75:26:
39:8c:37:4a:e6:fb:1c:dd:2b:dd:8b:a3:39:fe:c3:
5b:c4:66:e4:72:2c:66:be:4b:24:42:7c:76:a2:87:
67:8f:cd:9b:e0:a2:8d:cc:db:9a:5c:d3:91:55:c2:
fc:a7:6a:4f:3b:55:6a:3d:78:d2:fe:31:a4:e9:8b:
16:93:76:d2:a6:67:0e:6b:63:6a:40:97:67:88:e3:
3f:3d:85:7a:aa:eb:d6:17:c4:2d:da:23:94:c1:e1:
0b:a5:6a:9f:e6:4a:98:57:98:e7:e4:61:e5:10:fa:
46:df:f6:ab:4c:bc:c1:6a:63:c1:9d:e4:55:4d:07:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:62:1C:9E:C3:42:75:00:26:8F:F7:92:EF:5E:36:C8:27:FB:E9:17
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:14:82:bd:5f:be:89:ba:a8:88:f6:15:4e:b2:7f:b5:1b:62:
a4:8f:ee:cf:f1:e9:b2:14:38:cb:4e:c7:85:a3:32:de:23:df:
9a:a3:b9:09:44:ca:f9:98:0e:13:d5:bd:7a:11:1a:11:e2:79:
27:72:09:90:06:83:d5:a4:0e:97:ed:39:9c:22:1a:4f:75:35:
d8:9b:16:92:44:fc:fc:e5:88:b3:7c:e2:6c:25:24:ec:70:a6:
93:55:a2:60:9c:63:57:ae:5d:3c:4f:81:1b:4f:b7:77:c4:78:
04:80:f7:40:c5:68:43:4f:e3:1b:bb:00:d9:9a:70:ea:93:56:
cf:89:6f:e8:61:c6:11:c8:bc:e3:6a:57:17:5b:73:11:f3:56:
78:48:36:56:25:d3:ee:cb:e7:ce:d1:a7:f7:2f:a6:48:1f:70:
33:c3:5a:30:61:fc:e0:a7:33:12:0b:16:b8:de:31:aa:63:b9:
3b:3d:96:df:1c:23:49:4f:c1:02:d9:1b:2f:c3:8b:e2:c9:68:
de:aa:05:9e:78:c7:a0:b6:55:d8:b4:72:81:f1:61:b5:b1:3f:
f1:b4:ac:21:75:b9:88:ad:1e:95:91:50:57:08:fa:84:7b:f2:
17:24:e4:c5:43:a5:64:ee:05:fb:8c:07:e2:e0:14:77:e2:46:
da:b8:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:50 2025 by rpki-client