
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: fjDZmAsn1D+wsFqTx6foPCmZSrzU6r8AYJ71I9FR97M=
Subject key identifier: 74:34:37:55:85:DC:A7:1A:AC:80:A7:C1:73:6A:BB:E6:C8:35:D7:66
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 019873E2FF44934B3C3A7A77715631609932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:01:52 +0000
Manifest this update: Mon 04 Aug 2025 07:01:52 +0000
Manifest next update: Tue 05 Aug 2025 07:01:52 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: PcI/PrjLPKAU+HE8XSRTPn8iyOas6C9bfuicleB6Yhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ff:44:93:4b:3c:3a:7a:77:71:56:31:60:99:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Aug 4 07:01:52 2025 GMT
Not After : Aug 5 07:01:52 2025 GMT
Subject: CN=7434375585dca71aac80a7c1736abbe6c835d766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:69:d0:4b:dd:8f:1d:2b:c0:27:2c:77:a4:
fd:d7:84:f7:fe:b8:61:f6:c7:de:75:dd:de:da:5c:
e2:77:74:8a:2d:d1:5a:b7:93:0b:ee:c3:c4:24:2b:
99:d2:55:7b:1b:25:af:2f:d7:a9:2c:33:52:d9:cd:
85:fd:ba:2c:fc:bc:dd:b0:4f:9c:e5:6a:3b:5c:98:
22:b8:f6:5a:eb:d8:4f:8d:ea:6f:29:94:cb:86:01:
7c:2c:95:fa:f5:a0:f0:e6:a3:be:7c:b6:e0:97:b5:
e6:2b:8f:8f:79:80:cf:66:58:39:f1:52:c3:c4:46:
fe:b1:00:cd:0b:bf:78:06:d5:9d:c8:51:0e:7e:4f:
42:1b:92:28:7c:e8:ab:a9:82:b5:f1:1b:b4:84:24:
01:92:6b:37:bd:a9:df:d5:49:61:42:75:b0:48:45:
3b:94:e2:85:3b:ac:80:3c:08:b5:aa:d4:b5:9e:07:
bb:d0:ad:62:d1:53:42:17:42:2a:c3:82:97:cb:40:
41:b7:74:c9:09:23:b0:9b:cd:7a:c5:e3:dc:ec:e7:
26:b2:62:7a:c3:88:b1:65:f4:d5:1d:dc:35:12:39:
1f:67:ab:e7:fb:95:46:db:d3:47:0d:69:6d:e6:2a:
43:1a:b6:eb:e8:47:c7:78:95:71:ab:09:8e:f8:91:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:34:37:55:85:DC:A7:1A:AC:80:A7:C1:73:6A:BB:E6:C8:35:D7:66
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:45:ec:21:57:eb:3f:4f:f0:44:f0:c6:3f:35:91:33:a8:58:
c3:a4:ec:45:b3:e8:b1:64:25:df:c6:3e:f5:53:19:03:81:e9:
8f:88:0a:a1:a6:29:52:6d:fa:0b:5a:35:2c:05:86:49:88:b5:
c3:48:dd:8f:f5:30:b7:37:29:72:84:54:45:5a:da:de:08:48:
7c:e7:7d:a7:31:40:94:ea:ad:3d:85:a6:64:87:25:d4:d8:0d:
48:79:84:00:81:e8:5e:de:86:c8:a7:27:ba:81:5b:3b:63:71:
bf:fe:d4:b9:08:14:58:cc:98:10:91:d4:be:39:c5:3f:f1:80:
6b:0a:29:9c:93:29:cd:5f:e7:a2:bf:36:95:13:0a:8a:80:93:
10:9d:10:00:6f:8f:68:2c:3d:97:a9:b3:6e:35:e3:c6:82:1a:
46:ce:25:fa:1f:1a:24:6c:9b:ad:88:8d:03:f3:0d:57:4b:ab:
ec:cd:2a:dd:62:69:9d:1c:fc:ca:4c:e9:d9:8d:d8:36:ec:08:
82:55:98:39:91:7b:71:2d:85:2d:01:9a:31:97:70:50:b6:fa:
fe:90:2f:22:b3:f5:08:96:39:0c:8c:7b:20:ba:ab:30:d4:87:
dc:97:17:66:16:12:d0:7d:fc:f7:d8:4d:af:13:8f:8f:89:91:
6c:92:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:23 2025 by rpki-client