Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: 2Om61mfRzx+e3n1ra9J3WWPZp73P4J+eQ7nK1a89FXY=
Subject key identifier: 14:56:E9:84:15:5D:19:17:C4:36:DA:BC:37:E4:98:46:86:BF:AB:AE
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 01988B7CD9BAF13DBBA2122CCA7E04C24C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 0FA8
Signing time: Fri 08 Aug 2025 21:01:11 +0000
Manifest this update: Fri 08 Aug 2025 21:01:11 +0000
Manifest next update: Sat 09 Aug 2025 21:01:11 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: 2mrKQIKY3zG3WWGoS3ZXWrdRQZkfR7VwYg+lGU4hO9M=)
2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=)
3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=)
4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:d9:ba:f1:3d:bb:a2:12:2c:ca:7e:04:c2:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Aug 8 21:01:11 2025 GMT
Not After : Aug 9 21:01:11 2025 GMT
Subject: CN=1456e984155d1917c436dabc37e4984686bfabae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:f0:fe:46:bd:53:51:6d:1a:81:14:73:49:
41:7e:57:1c:73:e8:16:40:73:3f:2e:90:d7:26:ad:
56:27:1f:ef:98:e5:dc:01:07:9d:57:7f:f9:0f:48:
fb:9a:61:18:c8:62:3b:60:08:3a:37:34:e7:64:c0:
e7:0c:51:30:ee:97:a8:f1:17:ca:87:d2:3e:c7:7a:
54:17:c2:d4:a0:ed:e5:55:d5:15:ab:a2:0f:0c:32:
0f:48:82:fb:fc:9a:43:ad:5f:2d:ee:90:e2:43:10:
38:60:14:ab:8d:56:c0:55:be:89:0f:4e:09:90:0d:
ca:0c:e1:cf:2a:f0:7b:97:cf:25:6f:ca:6d:61:b4:
c8:f4:be:6d:3a:d2:2b:ec:67:f7:e0:63:56:3a:35:
98:45:3e:fd:fb:cf:fd:52:5f:c6:98:8f:2f:d3:f4:
51:47:33:22:a8:5a:72:e3:fb:2d:39:e5:b8:99:a8:
c9:64:51:1e:e2:21:e1:10:a3:80:e0:83:d0:ff:d6:
ea:01:38:cb:7c:58:f2:2a:19:37:dc:81:b4:27:13:
a5:fc:b8:c4:62:d9:54:bc:25:f3:a3:e5:c2:83:b4:
e5:c9:98:ed:4a:ca:2f:a1:24:fb:3a:3d:09:8b:96:
42:3a:2b:15:2d:42:a5:a0:61:51:d8:e4:ce:02:3f:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:E9:84:15:5D:19:17:C4:36:DA:BC:37:E4:98:46:86:BF:AB:AE
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5e:2a:47:86:36:bd:5c:72:6e:be:dc:20:46:51:d6:2e:e7:
bf:a8:bb:11:42:3f:f9:91:94:8b:18:c0:b1:7e:de:bd:09:bd:
e7:45:d9:86:0e:88:21:bd:37:84:37:21:e5:7f:10:0e:69:3e:
f7:ec:a7:1f:7f:f9:31:b8:f7:50:d8:03:01:f6:9f:65:fd:b5:
b9:8e:72:3f:33:ce:82:f6:95:b5:6d:ed:1b:bf:43:22:ee:4e:
d1:0f:09:66:bf:8f:59:8a:38:65:2b:c6:fa:61:1e:39:d8:54:
91:34:c0:b9:6e:67:4a:78:e6:2f:fb:01:ef:19:c9:d5:ec:bb:
c0:74:05:83:e1:20:b6:ca:f9:bf:3c:e2:ac:c6:5a:eb:2e:b2:
73:14:bb:01:5e:4a:0f:b7:b9:1f:08:9a:31:26:d5:41:f1:1c:
16:10:c7:20:21:a8:37:ab:ac:32:9b:98:9c:31:29:07:39:0f:
79:d5:3e:70:9e:19:a8:42:6d:40:97:01:1b:3e:54:ea:14:23:
4e:8f:1b:e9:71:87:34:21:7e:d5:51:10:7f:9c:c6:a0:d3:76:
df:aa:44:0e:85:9c:ba:68:87:64:30:e9:6c:2d:c2:c3:e2:ee:
c4:8e:cc:86:f0:d0:71:01:12:fe:f3:99:32:20:f6:0b:77:a3:
98:7e:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:39 2025 by rpki-client