Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: u6V2eLABRCs044fVqYKQq7lX6nDgFpQxELHirmx2ahA=
Subject key identifier: 65:26:7D:DB:31:98:84:77:85:71:F4:CC:B4:0B:DE:9B:41:E1:24:6E
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 01977978EC48056D242B02B7EDDE1F7AB85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 1598
Signing time: Mon 16 Jun 2025 16:00:57 +0000
Manifest this update: Mon 16 Jun 2025 16:00:57 +0000
Manifest next update: Tue 17 Jun 2025 16:00:57 +0000
Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=)
2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: Y9cmAn8QDaxCuRnA3a+QKnizSaQf83dZyaFgiCZHyO4=)
3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:ec:48:05:6d:24:2b:02:b7:ed:de:1f:7a:b8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Jun 16 16:00:57 2025 GMT
Not After : Jun 17 16:00:57 2025 GMT
Subject: CN=65267ddb319884778571f4ccb40bde9b41e1246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:bd:8c:20:63:17:4f:5a:04:bf:58:35:cc:
1d:a3:41:c8:bc:d2:9c:d2:03:4d:4c:19:b0:9e:a1:
ba:2c:89:55:6b:a6:4e:9f:25:f0:4b:ac:d4:14:40:
5b:28:d0:3d:de:87:d4:0b:bd:64:7d:4b:97:d1:d2:
e3:e3:f5:10:8d:43:57:f8:ac:4b:08:71:39:0b:50:
d9:21:8d:e1:f4:ac:b4:ba:bb:55:cc:d7:cc:35:f9:
63:7e:1d:fb:c1:2d:e0:b6:95:56:89:ab:13:30:3a:
f1:ee:82:96:da:b5:15:28:6f:0c:4b:6b:ca:9a:21:
c5:5f:c8:66:04:c1:97:66:4d:83:52:7b:60:2f:c1:
0e:c5:69:75:9c:b5:7a:94:5e:d0:bf:b4:08:50:cb:
8d:b9:27:84:af:e2:df:5f:97:9d:0b:fc:8e:9c:39:
03:b6:5e:e6:7c:1d:6f:d8:3a:67:21:f2:63:f5:cf:
64:df:1b:04:19:bc:68:9a:10:a2:6c:ca:51:9b:0c:
af:44:08:78:03:e2:96:06:8b:e8:4c:a3:58:5f:22:
56:fd:36:53:5b:b1:d8:0f:cd:87:8d:c9:f8:a5:0e:
a8:03:84:3e:39:2c:69:48:28:38:b8:a2:e2:28:db:
2e:8d:9d:73:a5:88:ad:2f:28:a8:4d:53:bc:32:ac:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:26:7D:DB:31:98:84:77:85:71:F4:CC:B4:0B:DE:9B:41:E1:24:6E
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:65:13:2c:4a:85:69:2d:92:a2:4c:10:f9:03:26:3b:ca:7d:
ae:02:e6:5b:28:f7:23:bf:e0:07:6e:30:cd:53:e1:61:ac:9b:
ed:eb:50:2f:48:8e:96:80:61:43:09:a2:78:b0:fa:22:80:b3:
02:89:29:9b:9c:40:fe:8c:0b:16:8e:40:3f:fe:df:cc:00:7a:
68:2c:74:0e:46:2e:f4:a9:e5:0d:c2:21:70:ec:25:00:b8:ad:
4f:28:59:d7:86:e9:f9:f8:b4:53:04:1f:74:bc:a1:6f:1b:e1:
8c:0a:6e:9a:64:8a:29:32:7f:52:54:fc:28:91:a6:0c:25:6c:
5a:5b:7d:a6:ad:a1:99:75:68:bf:bd:ed:40:93:11:ec:55:a7:
e2:b9:78:23:60:38:7d:06:60:f1:01:44:ee:08:a9:28:1e:24:
94:f1:f1:67:b9:99:9f:0d:f0:2c:a1:96:ec:6c:4d:47:60:e2:
f6:67:3f:4a:42:6c:c0:ca:47:fc:8f:a2:86:b9:d7:6a:af:03:
1d:11:6e:2c:f3:df:0d:f2:09:e1:5f:67:b9:e2:d2:a6:d9:fe:
63:21:bd:5e:21:96:f0:99:cc:54:0e:b2:6f:86:be:c7:db:57:
50:73:aa:26:d3:95:14:8e:6b:58:e9:70:54:ef:6c:47:b6:2f:
cb:7d:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:50:05 2025 by rpki-client