Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier: Qm+wygw/mtXBSf0mq0CQJbdGNyRn37METo9ReY85yP0=
Subject key identifier: 36:50:BD:33:B2:60:0B:E7:3E:F2:B3:06:F8:F2:D2:63:AF:FA:09:3B
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 01988C8ECCB6BDB9B8E344BAE96AB7417ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 02:00:25 +0000
Manifest this update: Sat 09 Aug 2025 02:00:25 +0000
Manifest next update: Sun 10 Aug 2025 02:00:25 +0000
Files and hashes: 1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: Vcb9BdBH5zOLfDdt7dy7acBcdP0ad6A5BIurXkKap6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8e:cc:b6:bd:b9:b8:e3:44:ba:e9:6a:b7:41:7e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Aug 9 02:00:25 2025 GMT
Not After : Aug 10 02:00:25 2025 GMT
Subject: CN=3650bd33b2600be73ef2b306f8f2d263affa093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:83:38:93:a8:d8:8a:40:b8:b4:9d:1a:84:
31:a1:2c:ca:27:b3:d5:aa:af:50:04:ba:88:96:64:
9b:6c:e9:12:25:6e:f4:dc:aa:e6:09:61:85:05:8c:
e1:7f:1c:2e:60:90:52:eb:b4:07:3f:47:fc:78:f6:
87:a6:39:a3:a5:c3:54:4c:92:d6:a1:63:3d:d7:40:
d7:1e:dd:cf:55:33:3d:fc:3c:57:60:64:79:f1:5e:
29:29:23:5d:68:2e:7b:a7:94:c9:b0:44:2b:f1:17:
f6:c3:9d:d1:be:9e:29:51:97:69:e5:df:59:a2:97:
96:7a:fa:45:45:22:08:48:31:c8:f9:c9:bb:3e:8c:
e2:46:72:bb:c6:dd:f8:0d:27:42:11:5b:99:2a:46:
26:df:26:2b:e3:51:3f:e9:4c:64:60:bf:bf:58:f9:
92:70:97:8b:65:f2:98:29:48:bc:a6:63:e5:5f:01:
a2:01:b3:97:ba:3e:4c:32:0d:4b:ad:fc:39:22:2c:
dd:0d:5e:94:b3:c9:63:25:4d:0b:e4:be:00:5e:22:
96:50:c9:ab:63:64:66:19:d1:1d:00:f8:2a:1c:1e:
06:54:ca:42:5a:bc:99:7f:45:8f:21:7a:5c:57:9d:
9c:b4:46:44:03:c6:41:ba:a4:a4:8a:83:df:08:2e:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:50:BD:33:B2:60:0B:E7:3E:F2:B3:06:F8:F2:D2:63:AF:FA:09:3B
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d7:f8:9d:db:41:bb:a0:90:a9:b4:db:0c:e4:c1:8b:29:34:
27:c7:ec:59:14:b3:e5:a3:2e:ce:cf:37:af:20:78:d4:a5:e5:
7d:28:43:b8:36:7d:f8:2d:15:b2:f4:57:f9:35:7e:2e:08:77:
c2:d8:7e:a0:f7:27:9d:a2:96:a8:74:48:84:a4:88:b2:49:66:
a0:bb:fb:00:60:b7:ac:3b:1e:59:0a:28:63:1f:df:8f:ef:3f:
19:70:1c:cb:ea:7e:2b:b6:a6:5a:44:ce:b1:ba:fd:fd:aa:b9:
8d:4f:2a:fa:5b:d6:6a:a9:d5:dc:3d:7d:e3:60:7f:bd:b7:bc:
4d:84:ec:d7:04:35:73:19:fd:d8:24:ce:48:5a:34:ce:d1:7d:
19:f4:6e:f3:85:6c:26:45:06:8f:4f:ed:24:d4:c4:de:4b:8a:
a2:32:a7:5f:48:9a:f3:ef:27:3d:cf:a0:9e:8a:d4:ce:dd:90:
96:83:f0:2e:23:87:03:8e:d2:d7:f2:a6:8a:13:2e:46:96:15:
ba:c7:db:e3:21:f6:c2:6b:4b:88:d5:74:bd:d1:a1:08:00:5e:
0a:62:4d:48:ef:50:7b:fb:a3:d7:cc:66:49:8f:7b:3e:31:74:
e8:83:a5:1d:10:59:25:56:29:51:00:ec:be:12:72:b4:e6:36:
ef:07:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:12 2025 by rpki-client