Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File: MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier: 0WUYP4WoHm/fh97mnfwwlLnsLjzTfHMzOF3eeaXi44U=
Subject key identifier: C1:26:88:8E:0E:63:FC:A2:0F:4E:31:8A:10:B6:4A:EC:4C:F7:C1:08
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial: 01987ABFC0705DBD2B41B587CCE36AA2B09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number: 06F0
Signing time: Tue 05 Aug 2025 15:00:43 +0000
Manifest this update: Tue 05 Aug 2025 15:00:43 +0000
Manifest next update: Wed 06 Aug 2025 15:00:43 +0000
Files and hashes: 1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: dOgGdqTYSaLoAxhIjC7IESuHysykzwmbA3134l6mxB0=)
3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:c0:70:5d:bd:2b:41:b5:87:cc:e3:6a:a2:b0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Validity
Not Before: Aug 5 15:00:43 2025 GMT
Not After : Aug 6 15:00:43 2025 GMT
Subject: CN=c126888e0e63fca20f4e318a10b64aec4cf7c108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:f8:52:1c:4b:36:4d:e6:dc:c1:db:95:e0:
dc:a2:d2:90:34:ec:95:c0:5a:c2:9d:6a:92:12:75:
20:25:26:5c:ca:d5:d7:9e:fd:99:88:83:c4:16:e9:
7a:31:a2:79:3a:38:ee:11:31:bc:e8:28:20:4e:54:
39:4b:c3:2b:4c:06:9c:71:11:d7:4a:4e:20:09:25:
5e:c7:5c:5d:9e:90:4b:72:03:36:4f:ce:43:c3:6d:
55:ff:10:5a:e0:3a:61:d0:df:0d:96:1a:d1:96:cc:
c4:50:06:ac:c6:5f:8a:8a:bd:7a:2e:e3:39:13:49:
ee:b3:a2:d2:ef:a1:c4:61:b1:c4:88:97:11:50:d7:
d4:dc:94:82:0f:50:98:cf:90:08:9e:51:56:47:be:
5f:2a:45:2e:18:a9:ec:60:fe:92:1d:6a:81:ea:65:
ec:03:57:97:5e:1c:6a:4c:b8:4f:8d:3a:a9:76:91:
5b:31:0d:14:d8:6d:71:7a:25:37:7b:2f:00:be:a4:
f1:d4:35:bd:63:48:51:d2:97:d4:d4:4d:1c:a2:d7:
cf:5b:3a:4d:12:d3:c8:ce:ab:a3:81:d1:3b:c4:a4:
f3:bc:28:0a:88:fe:06:10:7a:aa:26:66:02:8d:b3:
9b:03:62:3a:4c:c4:15:78:86:d8:35:99:48:bc:03:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:26:88:8E:0E:63:FC:A2:0F:4E:31:8A:10:B6:4A:EC:4C:F7:C1:08
X509v3 Authority Key Identifier:
keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d7:f8:1d:fe:f5:90:c3:39:2a:9b:a5:ea:06:fa:65:c5:3f:
81:11:98:66:af:72:8a:a8:8a:c7:19:76:22:e8:3d:6b:26:3b:
5b:1f:6e:9b:dd:60:d2:2c:7c:d6:f3:8a:d4:c8:9c:7f:49:67:
c7:f0:49:5b:1e:a2:34:e6:73:15:4e:05:e1:12:f2:08:4f:fb:
81:f9:27:95:c7:4b:0d:bc:ce:77:21:99:df:a3:16:8f:a3:55:
ad:51:f1:f9:e1:9a:38:48:0c:41:4f:ec:61:52:e0:74:78:3f:
25:3d:e2:6a:9d:4c:9c:9b:fb:4a:97:97:00:e1:e2:1f:b8:67:
39:4c:d2:da:f4:ac:d4:50:7c:f3:53:c8:d7:0d:78:ef:6a:85:
4c:cb:49:56:e3:91:f9:74:69:9c:7d:74:39:bd:e8:34:94:41:
81:e2:38:e4:8e:44:3a:bf:e7:0f:a7:e2:bb:7b:ad:db:50:97:
ae:92:fa:dc:e3:23:65:77:f6:20:95:80:d3:0c:39:13:0a:b3:
16:a2:0a:c9:43:3a:9c:f7:6b:97:51:b3:a4:7a:9a:b7:28:54:
10:f9:fa:8e:9d:af:ab:f1:48:68:58:3b:59:6d:ff:a0:cb:68:
73:4f:f7:bc:2a:9e:ba:15:62:da:68:e9:32:47:a3:b3:5c:da:
18:43:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:08:20 2025 by rpki-client