Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
File: MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft (raw, json)
Hash identifier: 3WQ711WGlmRSWZlSNKr8Hlg6NaxfpBI+JF8vAwC0Faw=
Subject key identifier: 03:7E:E8:0B:55:BD:20:BF:2B:F6:CF:B7:76:5D:37:2F:51:47:D3:E8
Authority key identifier: 31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
Certificate issuer: /CN=3109a8d70fa4478935b05c0621f6889552405daf
Certificate serial: 01978545EA2DA7D7E5DEA70AC9B5D0EAEBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
Manifest number: 10
Signing time: Wed 18 Jun 2025 23:00:41 +0000
Manifest this update: Wed 18 Jun 2025 23:00:41 +0000
Manifest next update: Thu 19 Jun 2025 23:00:41 +0000
Files and hashes: 1: MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl (hash: F3Rlm4oyfMH55hSeaPJa2DGJhDns9ZVwAdCJ7Y7hQL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:45:ea:2d:a7:d7:e5:de:a7:0a:c9:b5:d0:ea:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3109a8d70fa4478935b05c0621f6889552405daf
Validity
Not Before: Jun 18 23:00:41 2025 GMT
Not After : Jun 19 23:00:41 2025 GMT
Subject: CN=037ee80b55bd20bf2bf6cfb7765d372f5147d3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5c:fa:c0:3c:4a:d2:5d:20:3c:4f:5e:03:6d:
22:f2:88:c0:46:fa:fa:5e:c7:dd:85:2d:0c:8e:13:
10:de:04:90:d2:47:fa:4c:46:4f:b5:c2:a2:f2:e1:
00:da:29:0b:f8:bb:73:f6:82:e0:c5:08:8d:44:b9:
15:c8:3d:0b:0d:74:6c:d3:f1:a6:82:ef:5c:cd:f3:
15:16:b6:f2:88:ba:18:07:2b:be:b3:6a:89:90:ec:
5d:b5:9a:36:b6:e6:9e:73:17:79:68:76:ef:20:f0:
22:84:34:f5:05:23:e8:4f:8f:98:eb:75:2b:c2:9d:
2c:04:96:0b:1d:e5:3a:13:ed:1c:c1:02:7e:59:b7:
57:73:d1:6f:9e:22:74:43:8d:fd:cb:73:c0:96:e4:
ba:e9:03:61:09:22:ea:96:5d:25:34:b6:f4:fb:36:
1e:24:97:e2:65:40:6d:58:a5:a4:7e:8d:81:1c:eb:
2e:16:dd:3a:fe:cb:42:99:12:86:44:5a:75:e3:3f:
f2:51:ab:46:e3:e0:61:8f:34:42:e8:13:e8:06:ac:
9e:aa:4b:71:d1:27:e1:dc:26:42:bd:e3:c2:ee:9c:
9f:de:19:ef:7c:f5:82:51:46:9e:89:da:ff:ab:56:
41:f1:6b:e0:03:73:07:f8:e9:97:cd:74:23:af:26:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:E8:0B:55:BD:20:BF:2B:F6:CF:B7:76:5D:37:2F:51:47:D3:E8
X509v3 Authority Key Identifier:
keyid:31:09:A8:D7:0F:A4:47:89:35:B0:5C:06:21:F6:88:95:52:40:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQmo1w-kR4k1sFwGIfaIlVJAXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/106b3f-55a3-4558-8013-4bee3274c698/1/MQmo1w-kR4k1sFwGIfaIlVJAXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6b:ff:0a:6a:10:67:fb:2a:bc:ba:62:be:36:d5:83:65:8d:
1f:c8:f9:85:ac:71:a3:9b:54:1e:76:23:5c:55:53:7b:41:fe:
d6:ec:76:7c:5a:91:89:86:3f:c1:64:d6:46:11:bf:bc:f6:f1:
c6:b7:f1:92:1a:d3:50:ea:88:f6:17:18:87:86:5a:a6:be:d7:
6a:36:33:b0:a3:c8:73:96:1f:34:74:30:9b:ea:e0:73:95:f3:
1f:44:70:35:5b:75:6b:e1:94:f7:ae:31:6b:24:5f:24:46:f0:
60:c5:19:18:e4:a4:36:29:8e:d5:a3:e5:d6:e1:e1:30:3e:10:
54:ed:80:e7:61:d4:3c:3f:f4:0c:49:5e:4d:cc:4e:c4:09:63:
0b:92:67:af:7d:3a:b2:3b:34:3c:8f:4f:fa:d7:2a:84:4e:f8:
3f:bd:d0:9e:eb:d8:70:ff:b7:2b:53:d9:fa:ea:9a:54:3a:29:
0b:0e:ae:80:3a:40:28:bf:c5:62:9f:7b:0c:6c:78:b3:6c:1b:
d2:59:ae:5f:5e:63:99:fd:8c:09:90:7b:b8:03:4b:1c:6b:00:
c1:c7:6f:d9:f5:03:15:b4:08:1e:5f:32:9e:b2:91:33:9c:57:
95:f6:3e:28:16:f3:33:17:c0:a6:5c:a3:bf:3d:6b:f7:39:02:
49:a0:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:44:59 2025 by rpki-client