Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/332c23-d793-4553-84ea-afa99b3fffe3/1/MQitUnxyDreXB7P7excsiLczsTM.mft
File: MQitUnxyDreXB7P7excsiLczsTM.mft (raw, json)
Hash identifier: v8WGDiLzoLrG8bxFGMaUDQJpd2ssYgVgOZZ7rFe+RoA=
Subject key identifier: 61:FB:33:90:C4:FC:27:C3:35:CD:52:09:7A:73:BF:58:59:5B:4D:06
Authority key identifier: 31:08:AD:52:7C:72:0E:B7:97:07:B3:FB:7B:17:2C:88:B7:33:B1:33
Certificate issuer: /CN=3108ad527c720eb79707b3fb7b172c88b733b133
Certificate serial: 01987BD2E750379A561D5D1C288FA103F476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQitUnxyDreXB7P7excsiLczsTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/332c23-d793-4553-84ea-afa99b3fffe3/1/MQitUnxyDreXB7P7excsiLczsTM.mft
Manifest number: 0EA0
Signing time: Tue 05 Aug 2025 20:01:16 +0000
Manifest this update: Tue 05 Aug 2025 20:01:16 +0000
Manifest next update: Wed 06 Aug 2025 20:01:16 +0000
Files and hashes: 1: MQitUnxyDreXB7P7excsiLczsTM.crl (hash: zBf1AUki921FshSM43LZWXUm1b78XW1b41OxnzJMxQI=)
2: OGw2yB1lmfdeIQ__eoRb9wYC8RQ.roa (hash: JOUk6p+/wA2qQIBr9IDvKPlXjqY5EY6hF28kxv/1jpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/332c23-d793-4553-84ea-afa99b3fffe3/1/MQitUnxyDreXB7P7excsiLczsTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/332c23-d793-4553-84ea-afa99b3fffe3/1/MQitUnxyDreXB7P7excsiLczsTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQitUnxyDreXB7P7excsiLczsTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:e7:50:37:9a:56:1d:5d:1c:28:8f:a1:03:f4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3108ad527c720eb79707b3fb7b172c88b733b133
Validity
Not Before: Aug 5 20:01:16 2025 GMT
Not After : Aug 6 20:01:16 2025 GMT
Subject: CN=61fb3390c4fc27c335cd52097a73bf58595b4d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:53:e2:9d:d6:8f:30:07:bf:e6:fc:c6:b9:
ff:4d:6c:5e:72:04:e2:14:33:73:65:31:80:19:d0:
51:b4:a1:19:30:72:85:d6:73:c2:47:4e:44:b2:03:
12:46:a7:58:aa:ef:db:8e:00:d7:1e:85:9f:9d:5f:
e4:57:86:26:40:65:16:a0:8a:54:87:1a:77:5a:54:
2a:6d:46:a7:b5:05:0f:3c:a2:03:c5:e4:62:6a:75:
08:e6:39:6d:1c:4a:f4:70:80:f3:5d:eb:34:66:b9:
06:0b:d9:b7:e6:f2:01:fd:f8:a0:7f:94:1a:e4:5b:
31:95:08:92:0e:84:15:27:cd:67:69:ca:90:67:31:
4e:e2:67:62:2e:83:f8:2e:73:df:f1:5f:fa:07:a4:
de:3b:f6:2f:81:bc:3b:87:33:20:dd:75:b9:4f:79:
6d:09:fd:4f:be:c4:5f:44:0a:25:eb:fd:a0:ff:85:
b6:4f:56:f5:7c:6b:f0:61:c6:8d:f9:ef:0f:2c:b2:
08:05:a2:af:6f:ec:91:c4:40:ae:11:62:e4:b5:d0:
a6:cf:c3:0b:14:3d:b0:04:c9:a5:b5:67:5e:4e:6d:
3a:76:54:e2:c7:b0:cb:c6:a1:0b:c5:92:92:ca:9b:
1f:1e:6f:aa:c4:81:80:b9:79:9c:d2:20:90:34:89:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FB:33:90:C4:FC:27:C3:35:CD:52:09:7A:73:BF:58:59:5B:4D:06
X509v3 Authority Key Identifier:
keyid:31:08:AD:52:7C:72:0E:B7:97:07:B3:FB:7B:17:2C:88:B7:33:B1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQitUnxyDreXB7P7excsiLczsTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/332c23-d793-4553-84ea-afa99b3fffe3/1/MQitUnxyDreXB7P7excsiLczsTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/332c23-d793-4553-84ea-afa99b3fffe3/1/MQitUnxyDreXB7P7excsiLczsTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:23:22:3b:95:be:c2:68:df:6d:00:bd:ed:fb:85:a9:15:17:
b3:83:96:55:2a:2f:30:be:3d:a1:04:ac:12:9f:80:7b:4a:bf:
14:f5:36:aa:48:bc:2e:a1:a6:b7:c9:1f:a1:1b:ae:b0:26:80:
22:56:a3:7c:e4:f4:0e:cc:22:c3:9f:b2:cb:c8:dd:0d:50:ca:
4c:34:3b:0b:fc:63:da:98:55:97:00:cc:69:18:ca:1e:19:bf:
d6:2f:df:7c:7d:91:81:0c:0d:c6:c3:ee:4c:d0:cb:65:d3:d9:
f8:57:04:8e:b8:e8:82:56:a8:9b:83:6b:89:32:9d:8c:47:0d:
94:d6:4e:5a:35:fb:74:3c:96:95:0d:d9:7a:b3:b3:b6:67:61:
45:bc:0d:b4:38:b1:e0:6b:b6:fd:f4:60:7b:c4:4d:6d:2c:9b:
2d:2e:50:7f:7a:00:c1:59:bd:10:1f:d1:ef:75:c6:b8:c8:d0:
31:70:04:5d:04:33:98:ca:9d:9a:eb:43:4b:e1:df:af:31:49:
62:90:59:45:43:c0:24:f2:1e:08:b7:a2:38:48:5b:36:4c:01:
4c:1a:4f:5a:c6:94:80:0a:f6:ca:2e:b3:f2:06:7e:0d:d2:c3:
04:f4:02:66:f3:f0:7b:35:2c:46:f8:5d:3f:11:f4:7d:a3:40:
c8:77:fd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:09 2025 by rpki-client