Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
File: MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft (raw, json)
Hash identifier: DxJ8cX9nOOCiFqoQg6oFOZTqb9uGPMyUaQdg04lbqHU=
Subject key identifier: 64:4C:D9:C6:F9:5E:06:6C:70:11:6A:C1:6B:F0:42:96:0B:28:A8:F7
Authority key identifier: 31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
Certificate issuer: /CN=3109a8d70fa4478935b05c0621f6889552405daf
Certificate serial: 0197C2371D1860B7E15E2F3877769D2F8EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
Manifest number: 31
Signing time: Mon 30 Jun 2025 19:01:21 +0000
Manifest this update: Mon 30 Jun 2025 19:01:21 +0000
Manifest next update: Tue 01 Jul 2025 19:01:21 +0000
Files and hashes: 1: MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl (hash: bJwbhhBjY0tFeNVljedyjmsOc1KLFc7zudsFlpVBZyc=)
2: yIyDsEh1dvcmsUPH7E2Ou8dLDUQ.roa (hash: wtZTOXp1JfHeuiQ37lVv2g4xea2Kfo548MrcJ05G7l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:1d:18:60:b7:e1:5e:2f:38:77:76:9d:2f:8e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3109a8d70fa4478935b05c0621f6889552405daf
Validity
Not Before: Jun 30 19:01:21 2025 GMT
Not After : Jul 1 19:01:21 2025 GMT
Subject: CN=644cd9c6f95e066c70116ac16bf042960b28a8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:dd:78:a4:8d:48:77:a0:9c:53:58:4c:08:
5a:e0:dc:c9:95:ab:ba:a0:74:54:55:85:4f:bf:34:
58:be:88:6f:e5:9f:7c:56:f7:a7:d8:19:84:d0:a6:
24:e6:df:d7:1b:5c:26:6c:76:39:fc:2a:5f:f4:0b:
9f:19:41:1f:16:5f:38:8b:a4:c1:db:62:38:3d:39:
c1:a7:46:9d:8a:85:ec:3e:b7:93:87:35:b2:20:95:
9a:01:69:32:8d:ba:3e:f0:dc:5d:02:68:75:d5:a8:
2f:76:88:fa:b9:ee:5a:cd:78:8c:46:64:78:15:45:
11:4f:fd:35:98:3a:53:e5:9e:29:c5:a2:e8:5d:b1:
dc:0e:a3:20:a9:c1:4d:fb:dd:07:1d:66:45:79:f8:
2a:87:fc:cd:dc:b4:8b:42:66:d4:ff:a7:e7:fb:d8:
de:79:95:65:aa:82:8f:0a:dc:88:bc:9c:b5:13:e0:
82:13:fb:df:c9:24:8f:80:ae:37:25:db:21:42:bc:
d2:55:ed:93:f5:46:07:44:d4:5f:51:f7:64:8a:a5:
56:3d:a8:af:50:ca:68:47:69:64:2a:40:38:ef:8a:
2d:b8:6d:a6:99:b2:59:95:76:d2:be:33:f5:78:1a:
1b:a4:b7:bd:19:1c:53:f5:2d:2f:09:74:3c:84:ff:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:D9:C6:F9:5E:06:6C:70:11:6A:C1:6B:F0:42:96:0B:28:A8:F7
X509v3 Authority Key Identifier:
keyid:31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2c:b8:99:c6:3b:46:0a:e7:ea:55:ca:a5:37:e7:7c:0a:c4:
0f:48:61:ce:c3:ad:0c:cc:8a:a3:31:b5:82:7b:68:77:eb:12:
77:13:07:e6:6d:3c:b3:36:91:87:01:49:01:b7:d5:da:ad:5c:
80:95:b3:ac:72:64:f4:3e:56:ad:a9:3b:56:a9:c1:10:5e:25:
0f:2e:e9:f2:4a:6c:5d:6c:23:ee:0f:40:77:6a:ba:24:3e:be:
f4:e6:5f:d9:e5:4f:a9:d0:a5:07:48:af:ac:64:52:5c:63:b1:
00:c8:86:c8:50:d1:b2:d0:ec:dd:64:8f:5c:c1:3e:ab:4c:07:
04:bc:2e:ee:1c:f4:d3:5f:96:24:3e:15:16:30:88:3c:ea:d3:
d6:cd:62:60:52:05:3b:28:dd:de:e4:a0:d2:43:75:db:06:f3:
c5:a6:b8:ea:8e:f9:cf:da:b6:0d:3e:dc:90:72:f6:d7:28:27:
e9:c3:6d:57:7e:4f:79:84:11:f1:4b:59:df:9a:36:c9:dc:d3:
58:c0:67:29:f3:a8:aa:8f:45:7c:41:12:50:c1:92:48:12:2e:
91:18:14:2e:33:3f:78:7f:56:a5:1f:0b:88:53:92:52:56:4b:
87:48:64:c6:f7:d8:a7:60:27:45:42:0e:1f:8a:8a:59:8c:67:
e6:a8:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:36:47 2025 by rpki-client