Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: 7zxH9ZwWpjNUpm74bpWAVyr7Vd3q3D0lvzT/aJWRWK8=
Subject key identifier: F2:3E:CB:76:F2:43:7C:B9:AC:00:BF:59:2A:77:A6:B4:4C:2C:9B:CF
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 01977F0D017304B8BFEA9F3CBB0BBA12C111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 09F7
Signing time: Tue 17 Jun 2025 18:00:48 +0000
Manifest this update: Tue 17 Jun 2025 18:00:48 +0000
Manifest next update: Wed 18 Jun 2025 18:00:48 +0000
Files and hashes: 1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=)
2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: PGm/i0HHB9Nz256rc9kYoAWG92aGTPmtHqiFn1Q54YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:01:73:04:b8:bf:ea:9f:3c:bb:0b:ba:12:c1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Jun 17 18:00:48 2025 GMT
Not After : Jun 18 18:00:48 2025 GMT
Subject: CN=f23ecb76f2437cb9ac00bf592a77a6b44c2c9bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a9:be:6d:42:f9:ba:c7:44:e7:94:bd:75:94:
06:f9:b4:b2:fd:85:9a:b0:b6:69:f3:46:cf:ae:59:
17:bb:a5:3d:03:2a:70:26:df:c4:f6:a1:5e:09:30:
6c:2c:d7:6a:38:86:28:58:85:63:6e:c9:cb:ff:17:
54:0b:bb:53:e7:03:39:67:02:dc:12:61:18:c5:5e:
a6:58:39:d5:35:51:9b:b3:51:d9:85:17:6f:57:b0:
a0:5e:d6:35:b0:00:9c:db:d8:89:47:0f:29:4a:31:
91:9d:86:ec:d7:d1:3d:f5:75:3e:11:13:84:ad:a2:
29:c8:aa:95:48:dd:96:26:69:71:5c:29:63:46:8d:
42:17:c3:d7:43:e1:89:66:ae:fa:02:06:9e:ca:6f:
88:fb:92:00:86:4d:1a:a8:5f:8f:fb:5e:4c:d6:a7:
91:c4:64:19:7e:13:c3:6a:36:14:15:20:9f:e0:86:
d7:c8:7d:db:80:40:bb:ad:f1:b9:06:23:4b:c7:41:
b8:76:28:51:65:a1:64:13:92:ee:4e:05:7f:00:20:
57:4e:c4:b2:bf:79:d8:89:dd:16:8a:bf:f2:41:2b:
89:8e:c3:82:39:fb:c9:1f:8f:17:95:e5:40:15:5a:
91:d1:e6:ac:a4:dc:a3:1c:75:dd:a2:fb:59:5c:1b:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:CB:76:F2:43:7C:B9:AC:00:BF:59:2A:77:A6:B4:4C:2C:9B:CF
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:da:b9:7d:7a:3c:9e:d4:53:62:35:20:a4:0f:c1:cf:3b:cc:
c1:4f:7d:ce:53:e4:c5:11:ac:71:3d:18:6f:c8:ff:1b:46:c3:
4f:38:85:9e:4d:ad:59:88:c5:c1:d6:6a:e1:88:05:13:37:cf:
c5:ce:71:29:19:a7:79:f8:20:6a:6c:d8:51:92:aa:6b:40:09:
2d:30:ba:ce:f0:36:19:94:7b:db:d2:19:0b:4a:d5:8b:b4:54:
f0:9d:8f:0d:5b:22:ae:1e:c9:c5:ee:87:84:52:18:a8:ce:fe:
47:92:5d:6e:4b:4b:78:9d:d6:ac:ca:35:a6:4d:ee:a5:07:c6:
1d:98:7f:97:29:f8:ad:7d:7d:c7:ec:28:c2:38:0a:07:a7:51:
26:2e:5d:6a:67:36:c4:eb:84:e1:a8:2d:b7:c6:2b:23:3a:55:
d3:b6:84:33:df:50:7d:e5:16:84:1f:de:52:cf:d0:6c:90:07:
96:81:5d:2b:31:ee:bd:ce:5b:ad:32:66:ff:ad:4b:a4:fb:5e:
60:e6:4e:97:6f:93:aa:ef:19:5e:6c:2b:f2:a5:ff:64:83:e2:
d4:3a:86:de:24:40:c5:bd:28:20:8c:7b:51:de:eb:b6:4f:0d:
42:73:22:73:cf:3d:ed:1c:14:33:d8:0d:10:65:f4:37:97:18:
b2:c6:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:23:48 2025 by rpki-client