Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
File: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft (raw, json)
Hash identifier: rlpVlH4ZkM+CYD1eVdcta/KsZ0zimHgOfIDyHqwc4zk=
Subject key identifier: 28:97:B5:2D:10:D4:A2:AE:73:F1:8A:69:1F:F2:E4:AB:F7:55:5B:6B
Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Certificate issuer: /CN=31533690ab184f433f1760f3feaa184c443e70f9
Certificate serial: 01987A51F43876C0991ACFF973E231A82DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
Manifest number: 05C8
Signing time: Tue 05 Aug 2025 13:00:47 +0000
Manifest this update: Tue 05 Aug 2025 13:00:47 +0000
Manifest next update: Wed 06 Aug 2025 13:00:47 +0000
Files and hashes: 1: 4H5f4KMuGUdiq20v6X15FIvWPCg.roa (hash: 1oOS4e7SC894+hZZBmJUAEBGgPQQh1AJU8M/EeMAfmg=)
2: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl (hash: HZq6+i77xjrGszLuTnLE9T3np3+E3GZMsYRy8iz2orU=)
3: oWYw73o0XVlV6OpLKF4dF1YQeis.roa (hash: 5U7LFltASNwuXUP6x/MbRpxou9KC14KfkL67az3+D4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:f4:38:76:c0:99:1a:cf:f9:73:e2:31:a8:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9
Validity
Not Before: Aug 5 13:00:47 2025 GMT
Not After : Aug 6 13:00:47 2025 GMT
Subject: CN=2897b52d10d4a2ae73f18a691ff2e4abf7555b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:9c:c6:b7:c4:05:ff:e3:29:3d:f9:28:07:
26:7d:7e:8a:76:a3:81:d4:e7:bc:73:05:24:69:25:
47:23:37:53:e0:da:9d:00:0a:5e:b5:fa:6d:7e:1c:
c3:4b:11:88:86:46:23:87:ed:41:b2:8f:d3:b5:e2:
60:91:ce:1d:6f:b1:0d:36:ff:6c:24:1a:67:f4:4c:
d0:fc:23:d5:4c:33:fb:e2:64:7c:7e:fb:f5:fa:be:
f3:3e:5a:9f:47:3f:af:59:b7:a5:f8:a1:67:e2:4c:
5b:90:b2:e1:be:30:b7:ac:96:98:36:9d:25:97:62:
9e:1c:27:a5:08:39:9f:e7:7a:ab:c5:0a:e0:cb:2f:
3a:46:f1:ec:b8:87:23:25:da:c7:f0:23:5d:19:3d:
4b:a9:9b:81:90:99:9b:c9:07:e7:d9:0d:c9:27:51:
a3:40:3c:46:5b:31:2a:0b:cc:47:3e:62:d5:ea:e1:
73:e7:5a:3e:07:3b:a4:4f:25:36:73:2e:a7:14:35:
20:eb:bf:9a:1c:1f:10:b0:6f:98:bd:2f:71:96:a6:
37:6a:d0:36:dc:c3:00:c4:30:35:39:42:5b:c8:24:
53:7a:d0:db:3f:a5:62:c0:ac:cb:b9:b0:bf:dc:31:
6c:59:21:b8:fa:7a:61:d2:e9:e4:99:48:cc:da:e0:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:B5:2D:10:D4:A2:AE:73:F1:8A:69:1F:F2:E4:AB:F7:55:5B:6B
X509v3 Authority Key Identifier:
keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:44:60:2f:68:6a:7c:28:cf:05:01:a8:eb:11:11:d8:2b:d5:
73:1b:15:bb:30:54:d4:5b:a6:f4:31:2c:1e:d2:7c:25:1b:e5:
a2:ce:fe:4b:32:37:d1:47:45:ce:b5:c3:0d:2a:eb:3c:27:32:
a0:97:50:5c:bb:47:62:9f:90:15:2d:1d:79:5c:2d:d6:fd:46:
0f:46:aa:9a:b3:c3:b9:b2:82:6e:cf:53:d2:32:49:c2:c5:0f:
94:2f:78:35:d4:62:1c:65:c3:4d:35:d9:97:37:31:e5:7c:27:
c0:79:92:24:f3:fd:c8:fa:87:3d:81:88:d1:c9:40:99:c0:2f:
3d:54:54:bb:bb:33:3b:04:ef:ea:f5:a0:60:6b:d4:f7:5d:e2:
ea:2c:73:84:4d:04:63:07:42:23:9d:4a:be:2d:20:e8:a7:d9:
18:ca:5a:07:f8:51:57:38:75:bd:97:6c:5e:bb:2e:42:30:f8:
55:aa:b7:ab:44:2d:80:67:9e:f0:50:c3:81:f6:56:60:3f:2f:
98:fb:86:a6:34:dd:22:c3:26:46:b4:8e:41:58:2f:c3:0f:09:
b2:0e:2e:5c:4b:70:87:b1:87:1b:97:d5:50:07:82:0d:6a:37:
08:4c:ec:3e:39:94:02:c3:5c:7e:31:f2:40:24:ea:e8:f6:11:
f4:32:95:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:15:04 2025 by rpki-client