Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: getqRVF5FBc5C7IF5Ac/TupHfFNCRORb7yCGBXNN6Bo=
Subject key identifier: 43:D1:2B:99:36:F3:95:D1:17:90:11:4A:99:A6:BC:FE:82:9E:BB:A0
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 0198D4DFDDFFDDD852D70A9CC676EFDE1CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 01EE
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: 2ui43oGve1XDuPN0jluaOoUme8fBsxgPBJXCI1L2Q38=)
2: n-uGHXU9mK8VqWn_-PLqMRGS8Ts.roa (hash: ygEEJ097SaCUzOmNUISceDFVrT5Qf+Tcg4RtFktgRHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:dd:ff:dd:d8:52:d7:0a:9c:c6:76:ef:de:1c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=43d12b9936f395d11790114a99a6bcfe829ebba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:20:b5:fa:97:d3:7c:61:f6:46:3a:24:6a:
4f:f1:bf:d8:cc:fa:c4:59:4c:84:fc:d1:8f:58:8b:
28:74:2a:fc:e3:c9:db:7e:a5:b9:77:89:35:45:8c:
48:c9:5e:99:a9:a5:c0:16:e7:7e:38:ae:9f:4f:c1:
ad:92:8f:48:52:cf:fc:77:27:ed:e9:20:db:11:73:
51:7e:b1:ce:63:e8:f9:4a:0a:e1:ed:e0:b6:17:06:
4d:34:3f:35:11:c4:78:98:16:04:23:84:12:b1:f2:
d2:1f:db:dc:93:db:5b:8e:30:6f:c6:64:64:47:fd:
45:b7:15:f3:9a:b8:67:9d:d2:3d:7f:06:ff:74:11:
70:2f:09:b6:40:15:a6:f5:1a:db:3f:41:c7:b4:0b:
26:fd:b4:44:f4:00:20:46:60:b0:49:b3:04:54:3a:
03:35:16:e4:e3:34:29:16:70:3e:74:29:1f:b1:b6:
82:c5:3e:b4:05:a9:59:f4:0d:16:2e:82:98:90:7f:
6f:fa:6d:fe:6d:94:0c:9c:0b:9f:cc:be:20:6c:9c:
37:d1:c9:8a:52:f8:cd:2f:cb:13:ca:00:f7:0c:d9:
4b:0d:76:0a:10:c4:4d:4c:26:6a:48:d2:5b:15:0f:
27:5f:12:a0:70:56:78:b3:29:24:35:6d:13:25:bc:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D1:2B:99:36:F3:95:D1:17:90:11:4A:99:A6:BC:FE:82:9E:BB:A0
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ac:bb:4d:b8:b7:03:47:9a:cb:79:6a:94:a0:3f:64:7c:70:
e0:35:13:6d:4f:37:80:2f:62:b0:8a:7f:23:7d:a8:e3:e5:72:
58:6e:49:b3:e1:37:41:a4:56:0d:32:da:11:5d:59:e9:c0:53:
c9:12:e3:ef:b7:6e:49:27:50:44:39:11:2f:d2:90:1b:e6:5e:
c1:67:c6:39:cd:67:86:77:67:23:87:85:7e:b6:4d:db:37:41:
3f:b6:19:b3:89:a5:d8:00:be:65:fd:04:0c:17:bf:0e:c3:9b:
f6:ab:94:fc:47:40:01:7b:6e:e3:27:73:27:67:35:f4:48:27:
d4:02:51:4d:c1:f6:53:0c:a9:22:a9:b0:c5:cb:17:4b:da:e5:
af:2c:55:15:ab:01:f4:cb:b0:9f:59:ae:77:2d:0b:61:f7:3d:
63:57:72:ae:50:1b:4d:df:76:aa:a6:a5:65:a5:fb:db:1f:a4:
5e:91:f5:4a:15:55:d6:eb:40:47:3d:a6:43:af:2a:3c:57:19:
d1:b2:66:28:bf:4f:8f:8e:dc:74:4e:cf:6a:89:a1:3c:22:31:
8a:e9:8d:53:79:d9:ea:23:a7:22:5d:86:15:09:6a:02:10:16:
1c:4a:0a:16:62:d8:ff:54:39:8b:87:db:d8:39:4c:04:fa:63:
74:8c:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:38 2025 by rpki-client