Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: 6cNz3FJLIiH4uVGBbcDNLKCTjiDjR39yQh6wzdchXs8=
Subject key identifier: 25:C0:90:7D:6D:86:63:BC:B9:18:FD:7F:C7:57:E9:E9:2F:0F:8D:0A
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 01987A1AE8C477AE08ABFB598DA1ADE28294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0A79
Signing time: Tue 05 Aug 2025 12:00:40 +0000
Manifest this update: Tue 05 Aug 2025 12:00:40 +0000
Manifest next update: Wed 06 Aug 2025 12:00:40 +0000
Files and hashes: 1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=)
2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: h1aiORNRqzjWoVl290aQ+NY34gLH7WXec0Zfw3RXezY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1a:e8:c4:77:ae:08:ab:fb:59:8d:a1:ad:e2:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Aug 5 12:00:40 2025 GMT
Not After : Aug 6 12:00:40 2025 GMT
Subject: CN=25c0907d6d8663bcb918fd7fc757e9e92f0f8d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:08:cd:69:2d:5e:1d:5d:c2:75:ff:82:09:
69:64:2b:68:2a:52:e2:74:70:1b:35:a0:80:23:07:
39:bb:16:7d:8e:3e:a4:5d:88:c8:3b:75:36:5a:c2:
97:20:be:30:9e:c1:6f:b5:05:f8:63:a5:87:2e:6d:
f5:d2:27:2d:ca:67:2b:12:91:9a:78:bd:5f:84:bc:
48:72:66:d0:bb:3c:2f:d1:ca:38:92:59:c5:34:cb:
95:e0:d2:e8:51:7e:d5:e4:af:30:3c:f3:a0:ed:71:
26:e9:70:64:98:99:07:68:aa:5a:81:a5:fb:56:26:
9d:bc:51:36:46:d7:dd:c3:1e:53:0d:e3:9a:fc:27:
5d:13:ab:48:5d:f2:8b:6f:48:93:bb:c5:8a:64:8a:
f9:37:f1:dc:3e:bf:3d:58:e6:5c:c9:3f:8b:37:a4:
85:4f:23:5d:a7:43:ba:8c:cb:52:54:f9:83:13:1b:
ac:99:96:1c:fc:2b:8d:6a:6d:31:cc:df:76:5c:ff:
2a:10:39:70:45:eb:ce:af:fa:92:79:f1:a0:7f:82:
2d:d5:37:f9:5b:48:64:36:11:03:b1:6d:9e:94:9c:
54:ca:0b:22:4a:5c:39:43:6c:8c:b3:4d:07:bf:39:
6f:1f:57:ae:06:b7:1b:1b:d1:eb:dd:97:27:6a:9a:
96:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:90:7D:6D:86:63:BC:B9:18:FD:7F:C7:57:E9:E9:2F:0F:8D:0A
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9a:17:d8:4f:5f:12:2f:88:98:c1:3b:91:04:18:11:87:81:
47:ce:25:6c:e3:2e:12:d7:2a:e0:3f:00:cf:22:34:71:4d:29:
23:e4:87:18:2c:b6:ed:87:a0:40:d8:9c:c6:20:a5:3f:36:eb:
ec:1f:1a:28:cc:ee:e3:e4:b0:39:91:23:cf:ac:d6:c7:09:71:
28:ba:18:72:09:d6:ad:6d:1a:e5:87:60:46:4c:58:9d:58:0b:
8f:65:8f:b0:ea:09:3c:5d:09:71:83:bf:70:75:0d:22:4e:32:
fe:f3:63:a3:5d:bb:d8:6a:51:c6:0a:bf:10:eb:ee:e4:d3:b1:
e3:5c:c4:15:a6:f8:f2:73:24:04:65:64:fa:08:5f:cb:ce:da:
1d:c9:57:21:63:47:68:28:da:f0:ee:c8:12:a6:3c:a5:69:af:
76:07:78:b9:94:7a:c1:f6:5e:46:c0:67:4a:f2:ec:ef:46:2a:
6b:81:7e:84:6e:b3:63:03:60:12:64:0f:ec:79:ac:ab:82:4d:
fd:c7:74:1d:8b:9e:17:eb:82:a2:af:ae:3e:dd:06:41:a4:98:
59:7e:8e:bb:e1:c9:8e:ac:e4:da:e6:f9:e8:6e:dc:1b:f8:10:
34:ec:ca:ab:a8:82:8b:b8:35:4e:b5:2f:d7:f1:c3:63:2e:81:
7f:7f:be:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:53 2025 by rpki-client