Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: j4llpFguySbe4Sdko0eslj4RUjAR4WChYnEH05dY2b0=
Subject key identifier: 65:46:35:3D:8A:A2:D8:1E:F0:E7:81:3B:8B:FA:34:F7:0C:FC:D2:04
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 01978545B5AF83924DCFE894969BF4667B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 159C
Signing time: Wed 18 Jun 2025 23:00:27 +0000
Manifest this update: Wed 18 Jun 2025 23:00:27 +0000
Manifest next update: Thu 19 Jun 2025 23:00:27 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: KEycOQzNu3h2B+e9z5MamlfGnIf8hoytHu+PToCoh88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:45:b5:af:83:92:4d:cf:e8:94:96:9b:f4:66:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jun 18 23:00:27 2025 GMT
Not After : Jun 19 23:00:27 2025 GMT
Subject: CN=6546353d8aa2d81ef0e7813b8bfa34f70cfcd204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:c8:32:e8:c9:3f:b2:6e:32:9e:d1:6f:02:
33:38:1b:5c:f5:05:02:2e:10:18:36:78:77:71:8e:
4d:0b:54:80:d9:a1:e0:de:37:16:f4:7b:c5:ff:7e:
51:14:0e:11:41:9e:ed:8d:b4:c4:8c:b5:4c:38:19:
c5:32:51:2c:32:21:fc:4e:24:a3:4b:9f:6d:85:fc:
79:d8:d6:9e:c2:7e:03:29:61:e8:b7:0e:92:f2:2c:
70:41:a8:01:b0:33:1d:dc:e8:a4:62:16:73:a0:81:
a5:87:a6:fa:46:c4:2f:70:d6:92:fe:c3:65:b9:78:
c2:7a:65:12:58:0f:26:9c:98:99:01:88:94:1a:86:
de:dc:d9:bd:47:fe:bf:84:e2:58:b4:64:92:03:24:
88:86:ea:5c:60:c3:f4:3e:8b:26:69:19:c0:41:fb:
0b:97:34:04:8d:78:86:63:0f:c9:af:03:a0:db:5d:
8c:7a:b8:2f:df:bc:01:3e:9a:7b:72:37:e6:2c:68:
c2:84:30:16:4b:a4:42:07:d4:65:17:c1:f0:2f:8a:
b4:84:52:9b:61:f4:5f:dd:5b:cf:dc:57:3c:1c:8a:
8a:68:02:33:10:ee:de:36:34:99:c7:8e:2d:10:99:
b1:04:6b:9d:c5:4c:b4:0a:da:4c:b9:71:b7:3f:98:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:46:35:3D:8A:A2:D8:1E:F0:E7:81:3B:8B:FA:34:F7:0C:FC:D2:04
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:52:85:63:98:52:53:56:50:77:87:d3:dd:78:84:73:f2:
ef:71:ac:58:e2:9d:cd:df:85:0a:74:9f:66:61:45:41:d9:77:
f9:6e:90:a4:9c:80:d5:3b:f9:22:85:1d:72:d8:09:e4:74:d6:
18:6f:7c:b3:94:0c:30:f9:66:5f:ec:82:11:43:9f:9f:65:cc:
28:e7:76:0d:41:61:ba:9a:62:cf:39:40:dd:60:69:37:33:65:
dd:cf:39:6f:1e:dc:be:8b:3e:df:aa:3f:e2:93:a4:79:c5:b3:
a8:00:d7:29:75:37:13:6a:3e:12:8f:ae:73:01:c7:92:b8:95:
6a:2e:40:32:18:08:b1:f4:0d:15:c9:22:11:b0:d2:34:83:12:
04:bc:61:89:cf:a9:31:72:9a:17:76:44:b0:d4:a2:ad:e6:a0:
cc:34:b3:bf:0c:37:0f:51:00:0e:83:96:9e:71:59:8f:d6:7a:
14:28:c4:66:74:d9:84:23:a8:1f:bf:1e:7d:96:04:ae:8a:17:
d8:7f:e6:26:52:ed:15:7b:fc:01:5d:23:80:71:47:b9:8a:ae:
34:c1:a7:e1:36:d0:4c:15:8e:8b:f3:2e:f9:c8:05:ab:d9:f6:
a1:37:6c:21:24:59:af:e2:87:3d:3f:5c:a2:84:03:3f:ed:09:
94:c6:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:38:56 2025 by rpki-client