Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json)
Hash identifier: 89wnfNURTBrY53NyelphJUUsSRMvl5hyEWUzxwr71vE=
Subject key identifier: 3A:FF:70:0A:2D:FD:F5:52:11:D8:C2:B6:D2:CE:62:0F:17:2E:30:35
Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Certificate serial: 01988DD8EA7137167F843AB2942E1426809B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 08:00:59 +0000
Manifest this update: Sat 09 Aug 2025 08:00:59 +0000
Manifest next update: Sun 10 Aug 2025 08:00:59 +0000
Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: CC2kk3K88KQ0CzSJSeERy/ZdO8w5UA1D9Rh+8RBFViM=)
2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:ea:71:37:16:7f:84:3a:b2:94:2e:14:26:80:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Validity
Not Before: Aug 9 08:00:59 2025 GMT
Not After : Aug 10 08:00:59 2025 GMT
Subject: CN=3aff700a2dfdf55211d8c2b6d2ce620f172e3035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:17:dc:5b:28:32:44:14:09:27:13:09:b7:
9d:35:ec:97:32:e5:6b:72:2e:de:21:f4:52:96:f3:
c0:03:b2:fc:3e:8e:e0:dc:23:be:c3:8c:6a:f2:80:
d4:0b:2f:a1:6f:f0:fa:fa:95:25:d0:16:ea:21:e9:
82:72:36:2c:37:2f:85:c1:39:9d:fb:91:e2:14:4e:
06:20:65:b4:1b:05:22:d1:ab:17:f0:98:21:64:e2:
f4:16:a8:37:4c:0e:c9:bc:c7:72:46:b6:e3:74:1a:
84:a2:a0:fc:b9:ba:ff:73:bb:6f:6f:db:87:5c:4f:
2a:be:d4:09:6e:68:57:50:fc:7a:9b:2a:6c:f9:5f:
7c:9c:d5:e2:9a:9f:72:76:fd:f6:bc:6d:92:7d:36:
97:d8:85:0a:83:57:29:c8:42:63:bf:90:a8:18:ef:
69:95:1f:67:62:13:9e:0b:06:c1:f8:8a:43:da:c7:
ca:73:5c:92:4c:7c:50:76:a6:6f:79:12:ec:4b:1d:
6f:e2:6a:0a:bb:3e:ab:f6:e2:ee:e6:43:73:29:dd:
6f:82:69:be:a7:70:ff:95:62:45:4a:f7:46:cf:7d:
73:9c:06:b1:2d:45:c5:6c:a2:f8:7a:85:64:1b:69:
de:ab:42:90:b1:e2:50:40:bf:e7:4c:62:f0:03:52:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:70:0A:2D:FD:F5:52:11:D8:C2:B6:D2:CE:62:0F:17:2E:30:35
X509v3 Authority Key Identifier:
keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1d:5a:bf:39:5f:e0:49:2b:71:49:f9:74:88:cd:c0:ab:5c:
3a:f8:04:76:e9:7b:a8:58:4b:6d:ce:ad:41:f1:96:28:69:80:
c1:6e:80:08:b8:f1:f0:ef:63:6e:e0:9b:d9:d4:78:5a:d0:88:
d5:64:49:7d:60:5c:17:38:48:7a:a6:b4:9b:97:fc:ee:64:fd:
fe:55:e1:04:c3:62:bb:89:65:ab:d4:e3:29:10:fa:6f:b5:b7:
cb:fc:a1:78:5e:c7:d5:44:67:6b:db:18:c5:17:09:ea:f8:b1:
7c:9c:39:c1:6d:19:88:fb:e3:ae:3b:85:73:b9:57:71:42:e5:
06:46:3f:7e:b4:60:d8:ec:b2:9c:8e:ef:5e:bc:e0:33:ad:cd:
fa:8b:67:0a:9c:b9:5a:81:fb:20:6d:85:95:85:70:8d:9d:38:
0b:00:cc:6a:a7:0e:a0:44:6d:ff:f8:b1:2a:fe:da:3c:20:f5:
0b:d2:89:ee:b8:ba:7b:36:a5:fe:54:74:2d:56:c7:4c:d2:a7:
78:78:90:5b:e8:42:cb:d7:98:a4:13:09:43:1c:4c:d7:37:98:
a2:af:78:6f:f8:22:fc:2c:60:6b:2c:b6:6c:cb:31:2f:27:16:
04:c1:cf:6d:ee:d1:1e:69:6d:8f:68:0b:4a:d7:0e:70:52:f3:
24:3c:95:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:29 2025 by rpki-client