Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
File: MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft (raw, json)
Hash identifier: q8QZuqWPXczq6jEzTaUb8bDgbk5Zv4sMPCrtt5Rjr40=
Subject key identifier: 3F:C3:82:8A:F6:AC:4E:57:92:A2:DC:3B:3E:85:66:65:E2:1F:DD:6F
Authority key identifier: 31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
Certificate issuer: /CN=3109a8d70fa4478935b05c0621f6889552405daf
Certificate serial: 01987D8B5FA27F22E721E1B276C4ADB92F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
Manifest number: 92
Signing time: Wed 06 Aug 2025 04:02:22 +0000
Manifest this update: Wed 06 Aug 2025 04:02:22 +0000
Manifest next update: Thu 07 Aug 2025 04:02:22 +0000
Files and hashes: 1: MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl (hash: XLFI2fopS+biQXYc7uGwLNSwyadPDn+9jh37eUBbKs0=)
2: yIyDsEh1dvcmsUPH7E2Ou8dLDUQ.roa (hash: wtZTOXp1JfHeuiQ37lVv2g4xea2Kfo548MrcJ05G7l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:5f:a2:7f:22:e7:21:e1:b2:76:c4:ad:b9:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3109a8d70fa4478935b05c0621f6889552405daf
Validity
Not Before: Aug 6 04:02:22 2025 GMT
Not After : Aug 7 04:02:22 2025 GMT
Subject: CN=3fc3828af6ac4e5792a2dc3b3e856665e21fdd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:77:be:46:e9:d3:8a:13:ee:ca:fb:ee:7f:
99:e5:ac:21:5f:73:2a:bb:0b:2b:95:48:1a:91:73:
99:30:32:4e:70:fc:b0:9d:ba:e8:3e:21:22:6e:f3:
fe:cf:41:91:fb:17:f9:4c:01:a2:f1:81:21:1f:94:
4e:96:90:86:cf:e9:4d:a3:95:51:cc:58:3b:75:14:
46:57:fc:24:1a:e3:d7:48:dc:35:5a:2c:32:6f:5c:
74:b2:90:af:0b:a1:d4:8c:bc:78:ae:71:f4:e2:62:
26:69:99:5a:17:16:b0:d5:26:3f:a6:66:60:c1:aa:
38:58:08:5c:69:07:4b:81:28:24:7c:ce:28:d5:68:
1c:6c:40:cc:c8:f9:e4:2f:09:1b:72:44:18:8b:45:
85:0a:bd:eb:b0:17:82:8c:85:ca:bb:09:b2:99:4e:
87:7f:9c:57:94:63:2b:85:92:50:a4:e1:71:7d:8b:
3e:6e:98:71:9a:c9:54:0e:a6:fd:be:91:92:7b:c0:
47:07:46:e3:31:ac:61:32:24:4c:82:f2:07:d7:90:
40:8f:d9:d3:15:54:fd:2d:45:91:a7:0f:b7:e3:5e:
f1:4b:6c:9f:7e:d1:24:cb:16:f2:b1:59:2b:aa:8c:
1e:1b:4e:ea:7f:53:72:7d:15:bc:c4:f4:8c:5c:16:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C3:82:8A:F6:AC:4E:57:92:A2:DC:3B:3E:85:66:65:E2:1F:DD:6F
X509v3 Authority Key Identifier:
keyid:31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ae:2c:f8:51:e3:17:0d:12:11:bc:55:c6:30:ca:88:7d:78:
d9:bf:bf:d7:48:91:66:d7:e5:52:ca:15:61:73:e3:c8:9a:2d:
3f:ef:a1:c2:fa:21:b6:a3:4c:6a:66:40:32:44:f5:02:db:8f:
eb:d8:a4:30:a2:ab:d6:d0:20:73:66:cd:19:a3:ae:15:3d:b7:
6e:1b:f7:a5:bd:7d:e8:ae:63:0e:c9:be:f3:e3:01:0e:e2:c0:
b0:5a:84:bf:6f:7e:c5:e6:85:65:27:f6:f4:4f:46:cc:9b:89:
cf:2a:38:84:03:a3:4f:2f:6c:4a:dc:3e:52:59:91:18:b8:83:
c7:32:ce:9f:0d:44:74:a6:64:8c:bc:79:fa:10:d5:d6:4c:bc:
2c:20:d4:5f:d6:27:e6:73:f2:a2:87:39:cc:f9:e7:8b:ec:e4:
66:c0:9b:2d:56:91:aa:cd:1d:bd:d1:b4:3d:e6:c0:26:ff:15:
2d:f3:9a:5d:eb:a7:c0:2b:7b:1c:9f:dd:c5:c4:3b:aa:f3:27:
06:5a:0e:ae:a3:f7:e2:8f:ea:7a:3b:4b:94:f5:e3:0f:5c:aa:
c5:c9:5e:63:82:d0:91:27:ea:68:dd:46:92:c7:da:ad:c1:71:
23:34:c2:d8:cc:61:65:39:03:72:9a:bc:9a:ef:9a:30:ca:a5:
a4:0c:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:19:17 2025 by rpki-client