Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier: 2EK+yvWQHgTf8EMfnnONTaUrhCzu0tmkuMaOSfysub4=
Subject key identifier: 68:7F:8F:46:D0:4D:37:13:B1:BC:F7:EE:38:74:4E:96:3B:CD:7F:3C
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 01987D8A18F0C327F6DFC7FE46F74D1DFAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 04:00:58 +0000
Manifest this update: Wed 06 Aug 2025 04:00:58 +0000
Manifest next update: Thu 07 Aug 2025 04:00:58 +0000
Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: F6IzzqpVpnvE0lR34jdVL/1U1ar46CMOmSX/35bTkIY=)
3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:18:f0:c3:27:f6:df:c7:fe:46:f7:4d:1d:fa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Aug 6 04:00:58 2025 GMT
Not After : Aug 7 04:00:58 2025 GMT
Subject: CN=687f8f46d04d3713b1bcf7ee38744e963bcd7f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:16:a0:5a:be:f1:de:88:f7:d9:93:65:db:
6b:a1:5b:88:9a:d7:75:c3:94:36:a9:d0:80:47:e6:
3f:a2:17:47:b8:33:28:fd:bb:8f:56:88:a1:16:f3:
98:94:94:7b:2b:04:0e:36:cc:18:b3:9a:08:29:49:
6c:ed:eb:c6:d2:66:92:d7:c1:ef:e8:31:c2:76:09:
d5:98:ae:48:15:d8:93:03:83:d9:02:b9:5c:f7:ce:
76:19:9b:7d:77:b9:e9:e8:3b:49:79:56:53:05:21:
0c:24:c3:01:87:d2:7f:72:d1:f3:9a:19:7b:d6:4a:
ad:66:72:ac:90:e4:3a:a6:9c:d8:12:46:36:da:2e:
d4:fb:00:02:11:46:c4:96:14:55:9f:2d:f5:3a:f3:
67:bb:77:f4:ba:95:9d:b2:02:b9:89:92:5e:56:49:
fc:be:48:8d:65:e2:61:11:02:10:de:56:c3:c0:55:
6c:7b:08:f4:cc:d2:88:50:0c:4e:ca:07:b7:84:9c:
4b:9f:d5:3a:b1:0e:77:c2:0b:9b:14:06:8c:57:76:
23:92:03:de:4a:5b:ba:30:49:da:0f:ed:e5:04:3a:
ae:9e:61:fc:8b:ae:14:1d:72:68:14:a3:03:ae:7b:
99:47:d9:31:9c:a0:20:cb:a4:61:3e:f3:7a:c0:0f:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7F:8F:46:D0:4D:37:13:B1:BC:F7:EE:38:74:4E:96:3B:CD:7F:3C
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ff:9b:0f:6f:7f:b9:4f:1f:61:0a:de:3a:16:1e:de:94:1b:
a0:37:56:58:bc:75:3a:4f:44:6f:53:7d:28:31:db:bc:77:36:
49:84:7b:b0:ba:43:cc:8c:3f:16:7f:6e:29:bb:3d:65:2e:cd:
7f:2f:73:29:a0:43:96:e6:74:20:80:e0:56:e9:75:6b:48:1d:
29:33:c1:76:c2:03:af:9d:ee:f7:b2:e3:f5:d7:1c:af:01:7e:
25:52:3b:bf:b2:b0:52:c7:25:c8:97:f0:ae:49:c4:10:19:86:
2d:69:fc:6c:6b:7f:cd:d7:39:5f:8a:15:74:8c:31:23:c0:76:
36:db:7b:6a:48:70:15:fa:b7:85:f9:5e:db:bb:3c:c3:8b:da:
d6:6a:41:10:72:3d:ca:92:2d:0d:63:58:94:8a:49:29:9c:34:
ca:b0:b1:25:da:08:59:56:17:c6:4e:c9:d3:12:8a:82:f0:f0:
e0:f2:b2:a3:12:d8:6d:38:ce:ef:98:6d:64:f4:32:2a:1b:32:
6f:e7:7f:b9:36:f5:25:47:9c:77:9f:77:8b:60:64:96:03:6f:
af:fd:97:f9:e7:7a:9a:83:27:04:25:57:ee:21:65:e2:d8:b4:
75:76:ea:a3:7b:f7:1e:e9:bd:d5:38:cb:10:05:be:e6:d2:d5:
0a:cf:dc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:38 2025 by rpki-client