Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: +99S1e+2e/1ocljtc8cXO7p336OMnhuJgOo6lmYmYbo=
Subject key identifier: CF:7F:34:B8:B0:96:1F:C2:B3:10:AA:0C:45:F9:E6:6B:E5:09:76:C2
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 0198868D4A71BE4951F89EBC611B374DF6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0A8C
Signing time: Thu 07 Aug 2025 22:01:03 +0000
Manifest this update: Thu 07 Aug 2025 22:01:03 +0000
Manifest next update: Fri 08 Aug 2025 22:01:03 +0000
Files and hashes: 1: 67T4HBu1pG9u9uC3z_qV_yWI8m8.roa (hash: EFwv6mLYMzp3bgNxL88piWuR3/pmV9TsB1QPsdp3Sjg=)
2: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: xSRHynYqMC2VbKfzm+KIcgwKVqjJjrZjccpUYryCMMg=)
3: TFll5ENpjCR3fFAI_0E-ikt6_GM.roa (hash: cdCSDqZSpIOGUxCTSX+KjodpOB497W7vlYLMjlGxydw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:4a:71:be:49:51:f8:9e:bc:61:1b:37:4d:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Aug 7 22:01:03 2025 GMT
Not After : Aug 8 22:01:03 2025 GMT
Subject: CN=cf7f34b8b0961fc2b310aa0c45f9e66be50976c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:a2:ea:ab:3e:b5:67:5f:2e:b7:31:d0:5d:
1a:2b:b5:3a:7a:c1:19:44:25:82:71:08:c8:77:dd:
57:9f:94:1f:59:b8:0b:48:a7:b4:49:a0:b2:78:57:
64:a9:fa:68:64:5d:b9:79:27:8d:d4:3d:84:0b:af:
d1:cc:5d:1e:b3:53:ba:1e:43:23:43:22:96:00:61:
8f:32:73:bb:48:6c:ab:76:fd:3d:b5:23:b6:9c:97:
4a:1e:1e:7e:90:9c:e9:88:87:14:7f:82:ff:cf:24:
a5:38:50:81:66:6f:c4:32:94:b4:6e:ea:29:8b:84:
94:09:08:fe:57:d2:b3:83:c7:e5:05:8d:38:8c:63:
45:8a:54:9e:c0:dd:61:1d:98:97:c3:d3:57:71:7a:
49:29:91:76:6d:c9:44:35:81:a1:6b:d6:24:a8:91:
d1:40:cc:f9:b2:28:69:b6:bb:ca:52:ff:38:2c:35:
0f:00:60:d7:a6:06:e8:ab:f6:b7:66:7e:e6:2c:c6:
5e:cf:f4:19:0e:bd:4b:28:3f:2c:16:e1:0b:6f:a9:
8c:63:0c:01:b5:bf:b0:df:d0:4d:31:7c:d8:83:cc:
37:48:0c:e3:0b:35:04:b4:1a:b4:7b:eb:f6:67:1e:
0f:94:e8:94:ab:63:36:bd:5c:41:7d:86:0d:8e:b9:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7F:34:B8:B0:96:1F:C2:B3:10:AA:0C:45:F9:E6:6B:E5:09:76:C2
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e5:d6:6c:30:c8:68:4d:de:e9:5a:74:7a:01:00:5f:a9:52:
b5:76:71:68:c7:5c:f3:1e:4e:ef:d9:f1:3c:5a:19:b2:d9:57:
dd:f7:67:d5:0c:29:5c:ac:9f:bf:3e:8c:25:4e:a0:8c:4e:d6:
05:f4:84:75:1c:15:59:42:ce:d1:6f:60:82:51:b9:ec:ea:62:
6f:a8:54:a0:ae:07:e0:64:02:0b:b6:87:8b:1e:68:5c:3a:93:
77:13:ed:42:d2:d6:78:61:3f:a7:1e:b7:b7:1c:45:ff:aa:44:
0f:e2:57:f9:86:ce:0c:d1:48:81:bf:28:c5:47:6d:4f:59:d5:
8f:45:59:54:81:32:35:6b:43:7c:fc:25:c0:cd:7e:4c:aa:36:
05:0c:7b:0e:5b:b1:c7:61:3f:68:c9:47:5c:92:fa:b3:a2:cf:
9b:d6:a4:e2:ba:09:50:f2:c1:ba:0c:da:72:91:f9:bb:49:be:
3d:ef:14:8f:40:5f:a0:45:01:a9:2a:1f:98:9f:fe:68:9c:c4:
01:9d:59:03:80:27:cb:6c:52:c0:2d:cd:40:60:ab:d6:fd:62:
8c:87:d6:9c:49:85:cb:62:f9:8c:5d:87:e8:66:5e:1d:f2:ea:
7f:61:f3:b7:b9:1e:e0:2d:8c:e4:20:72:1c:90:76:8d:40:13:
7e:15:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:14:57 2025 by rpki-client