Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File: MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier: Q670Q2E6sXVUI3X6jtYoazNOR9xDVrQX7Dxi23NfH2Q=
Subject key identifier: 40:89:91:C5:E3:08:1B:77:10:DD:F0:FD:F0:CF:92:D6:ED:E9:42:D1
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial: 01988430DE061B75A10D6B32ECF314C2936E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number: 0CC3
Signing time: Thu 07 Aug 2025 11:00:51 +0000
Manifest this update: Thu 07 Aug 2025 11:00:51 +0000
Manifest next update: Fri 08 Aug 2025 11:00:51 +0000
Files and hashes: 1: 8epfI_mMakP3Lc2UTESKvosKkSQ.roa (hash: TdgdgIhwNAm+SCbAnoUIw15ZVzHOK/dqP386QKWeMpw=)
2: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: aMgjB3hHo6pth2AFVe/m4ZNeEBmoxkiNEqXnGa/le2g=)
3: QGmT3Sq2OPr697a4jgYrgI5vyvo.roa (hash: cuVDNdIzZEyCh+DXAd1wDhu2rpRcNesepLeBXruUFrc=)
4: wrK5q_yhp6CSYsOOeb2tBzjXlME.roa (hash: GpJJNVkvPjxKFXFwN00ofjrbHt5+9rV8i+MDqv4Rs8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:30:de:06:1b:75:a1:0d:6b:32:ec:f3:14:c2:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Validity
Not Before: Aug 7 11:00:51 2025 GMT
Not After : Aug 8 11:00:51 2025 GMT
Subject: CN=408991c5e3081b7710ddf0fdf0cf92d6ede942d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:a6:55:ca:65:97:c3:bb:78:07:24:e7:01:
18:61:71:a9:9f:90:e1:ae:8c:22:eb:b8:93:5f:e8:
9f:45:55:96:de:3d:f7:0a:38:63:ad:f7:38:79:a8:
00:01:69:7b:6d:be:2f:11:17:98:95:c0:15:88:ec:
dc:e7:3e:ac:d3:7a:79:6f:03:10:36:2e:39:61:16:
c0:7e:d0:0f:66:e0:93:d0:ba:0c:44:1a:2b:3f:cf:
a2:45:1c:a4:5e:4b:37:3d:80:dc:7e:10:78:8c:5a:
24:98:0b:4b:65:3a:ee:dc:4a:ef:3d:83:d5:b3:fc:
d4:b7:ce:3f:f7:4c:a7:0f:88:9e:1d:5d:3f:38:f6:
32:25:f2:99:5f:58:be:03:93:31:c6:04:49:44:53:
11:6e:43:b0:43:aa:dc:b5:5f:8a:02:9e:cc:cb:73:
6f:a4:31:57:8d:ce:70:75:d4:fc:a6:51:78:95:cc:
c5:7e:76:a2:2e:5a:66:19:5d:ca:cd:62:4f:a0:31:
e1:d8:1a:9c:48:b9:a9:35:4c:04:fd:95:24:54:f0:
db:36:77:2b:63:80:cf:f7:02:fa:82:57:c1:55:81:
4d:b3:c6:3d:16:8b:45:12:f4:5a:43:ec:47:84:ef:
3a:0f:74:bb:3d:62:ea:6e:42:ec:41:d5:c6:00:f3:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:91:C5:E3:08:1B:77:10:DD:F0:FD:F0:CF:92:D6:ED:E9:42:D1
X509v3 Authority Key Identifier:
keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5c:2b:f4:8a:2d:3b:46:3f:7e:a4:79:35:2e:3b:2f:f1:cf:
b3:dd:57:7e:5e:db:10:ec:0e:12:2d:3c:76:c9:b0:60:9e:15:
b3:f9:74:bf:79:4d:76:0d:1b:bb:22:c9:ec:78:6b:1d:75:4d:
9f:ee:92:76:b3:82:80:94:f4:fe:5e:1b:14:a7:bf:8e:b2:67:
ab:c8:15:21:b6:9b:f7:0a:7e:e3:d3:c2:fc:c4:6e:7c:40:c2:
fb:4a:51:c2:87:fa:44:9f:46:b4:3a:ec:0d:82:c3:12:22:08:
3c:8e:d7:f6:a0:9a:74:84:62:c0:73:02:61:a9:10:82:79:a7:
65:5e:88:13:9d:7e:91:f6:ae:89:3a:6f:2f:09:76:8d:01:39:
e2:e1:c4:ae:ea:f4:8b:f7:c6:35:d5:f6:41:8a:98:aa:8a:28:
9b:1b:52:61:d7:4f:e0:60:97:ee:14:f3:65:c3:87:53:23:d0:
4b:80:b0:be:31:19:fd:b2:5c:17:3c:1a:26:83:0c:7e:df:09:
06:61:70:a9:fd:45:18:ff:41:84:f5:ed:05:fb:0c:5e:69:39:
13:4b:fd:0d:97:bb:1a:57:0c:99:ed:7d:6f:17:5b:0d:ca:32:
34:be:5e:47:99:de:24:05:32:3f:6d:f6:c5:ca:85:1f:5f:d8:
10:95:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:30:11 2025 by rpki-client