Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: aEIgX9YGu2UKHLuqnkUGhMUJrwU2hio0CVySDCEsCuk=
Subject key identifier: 9E:AD:F3:2D:FE:3C:A7:52:96:6E:EB:15:41:D7:38:E3:D2:1E:DD:C7
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 0198744FE69588751EFB8ABECFC7CDA40471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:00:50 +0000
Manifest this update: Mon 04 Aug 2025 09:00:50 +0000
Manifest next update: Tue 05 Aug 2025 09:00:50 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: suu/XVr5L7OxekG78aKIzHD6Nji5FXHyRPaMe8bgWew=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e6:95:88:75:1e:fb:8a:be:cf:c7:cd:a4:04:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Aug 4 09:00:50 2025 GMT
Not After : Aug 5 09:00:50 2025 GMT
Subject: CN=9eadf32dfe3ca752966eeb1541d738e3d21eddc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:5c:67:e8:44:b5:69:07:c5:f2:14:d9:24:
1d:3e:86:48:3b:8d:ee:d6:9e:e0:f4:58:af:6d:24:
b2:59:60:e1:7c:3a:1e:82:d9:7c:91:fe:31:5a:12:
14:43:1f:50:62:e1:64:91:9b:49:5e:2a:2c:0a:58:
88:62:c3:44:56:7f:9f:0e:db:7c:41:e8:ee:f4:b1:
5c:ec:3f:d8:02:c6:40:7e:a5:56:7b:6a:08:67:81:
8d:41:5f:34:43:31:9e:b2:e0:bb:7d:4f:10:cd:36:
e3:b2:18:44:ea:b9:1d:90:2f:b9:b6:d9:17:10:37:
72:d6:bb:15:68:a5:f7:7d:bb:4e:a6:37:ef:ee:ec:
af:a9:54:d2:35:55:5c:0e:2e:c6:ec:a8:7d:87:69:
d9:f9:e2:33:ac:72:4c:42:60:04:ef:6b:b7:11:cd:
1d:59:73:7e:3c:22:e4:27:16:86:9d:c2:1d:fc:fd:
40:7f:1e:e6:7d:d6:3f:77:5e:cc:33:8a:91:4f:34:
94:d4:6e:68:09:44:22:01:06:09:23:de:18:d7:16:
97:42:00:3d:fb:d9:7b:04:97:98:e5:de:18:43:a0:
af:7e:71:cf:bb:9d:b8:01:19:ff:5d:ba:79:57:37:
4e:17:e4:42:86:b0:ce:6a:9e:a5:25:aa:bf:70:77:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AD:F3:2D:FE:3C:A7:52:96:6E:EB:15:41:D7:38:E3:D2:1E:DD:C7
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a5:bb:16:58:98:72:71:a2:9a:88:2b:3c:50:ba:2e:04:70:
d0:14:d0:45:ed:bf:2a:c9:89:b2:34:a5:2b:a7:ec:45:59:77:
71:bf:02:ad:75:54:da:0a:d3:e2:69:b0:b8:49:03:3f:fa:56:
af:01:26:3d:07:f7:d4:a9:00:b7:5b:57:e4:08:eb:0f:95:f5:
79:a4:67:81:02:4c:eb:87:ad:77:3c:af:cb:83:d5:28:9f:c0:
cf:04:bc:b8:9a:09:49:a6:1b:7f:04:21:66:5e:09:7d:a3:18:
eb:32:cf:24:3f:6f:16:80:bf:49:8c:39:64:24:80:30:07:80:
c2:e2:e7:b9:b5:7f:70:09:05:69:52:6b:2e:0b:cc:82:82:aa:
e5:a2:2e:d8:c3:90:a2:2a:5d:36:24:af:73:ff:cc:9c:cb:aa:
cc:69:b3:2a:a9:29:c2:f8:2a:0c:c4:cb:1b:21:b7:99:78:77:
6e:5c:a7:d9:54:ae:0e:99:c4:fc:7d:1a:5a:08:2c:7a:08:ea:
3d:9c:e7:05:fa:21:75:c6:86:19:43:9f:f8:92:e0:b1:72:e5:
52:8b:76:6a:96:15:80:a9:c7:5b:2c:6d:3b:78:2d:dc:80:bd:
3a:0c:7e:1d:32:47:79:af:ae:4d:95:e2:14:78:b6:c4:67:1c:
68:61:e4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:19 2025 by rpki-client