Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: MpzQhvwe7jkYH3uQoIViNj3tVX2VFfEpTY/qZcBye+0=
Subject key identifier: FE:91:48:63:66:2C:4C:EF:AE:9B:87:C3:69:BA:37:D8:EF:29:DE:46
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 0198726197D6A7CCDB32CA1EB1EC1F2ADF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 0224
Signing time: Mon 04 Aug 2025 00:00:55 +0000
Manifest this update: Mon 04 Aug 2025 00:00:55 +0000
Manifest next update: Tue 05 Aug 2025 00:00:55 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: 3c2gKUGCrea6ZGXz97HmIwKOo1nVoaTQGTLY4JefAyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:97:d6:a7:cc:db:32:ca:1e:b1:ec:1f:2a:df:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Aug 4 00:00:55 2025 GMT
Not After : Aug 5 00:00:55 2025 GMT
Subject: CN=fe914863662c4cefae9b87c369ba37d8ef29de46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:f8:31:00:37:e1:61:61:63:5b:14:30:05:
c6:36:6c:85:02:2b:57:7a:f5:41:f6:10:07:a1:32:
3d:36:f5:ee:a7:a6:d4:2f:a7:2d:f6:d7:9b:b5:d1:
bd:ad:fc:9b:6a:21:7b:b6:a9:56:b6:05:b5:db:21:
d0:02:a0:60:e9:25:b4:b8:2b:f4:1d:05:6c:a2:c0:
db:9f:79:82:f5:17:87:58:a4:56:0a:15:ec:32:0e:
0b:be:89:98:17:c1:e5:04:1b:89:64:3e:bf:04:68:
75:16:14:10:47:30:31:9a:ef:7d:e4:3f:0b:13:d9:
62:59:71:72:9f:cd:d6:1f:12:1b:4d:a4:04:1a:d3:
48:04:8c:d5:34:b3:71:3b:36:a6:5d:38:0f:51:30:
0d:89:a8:23:c3:da:48:39:9b:89:2b:04:62:35:6c:
8a:5b:d9:23:aa:24:83:5f:0c:d1:90:69:fd:8c:33:
f9:0d:28:b2:f5:a1:3c:ad:5a:c1:bc:ea:f2:af:ff:
fb:37:ca:29:31:70:8c:16:24:e0:83:47:6f:97:6e:
6c:64:af:05:18:04:c8:76:bd:d7:7c:fb:73:b3:6c:
2f:9b:bd:9b:f9:1c:7a:33:2b:54:7f:81:4f:8f:5b:
04:da:31:dc:41:4a:d0:85:6a:25:35:8a:ba:e6:7b:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:48:63:66:2C:4C:EF:AE:9B:87:C3:69:BA:37:D8:EF:29:DE:46
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6f:e6:68:08:3b:66:62:64:5e:e5:23:8a:ef:79:86:3c:6e:
ce:2a:c4:f1:29:23:21:6b:40:70:b4:2e:a3:8f:15:97:c1:99:
f3:29:63:b0:56:c9:88:4c:81:38:78:d5:74:22:53:73:1c:9c:
f1:e2:37:07:fe:19:49:7f:ae:e1:e9:b6:83:fa:90:a2:61:dd:
31:fc:e0:fa:61:5c:23:56:a1:7c:93:2f:72:b4:91:02:ef:9c:
1b:6f:32:92:11:fc:98:db:b8:e8:ff:9c:95:87:92:76:0d:5a:
79:41:99:f3:4e:b9:10:ea:fc:db:3c:19:ba:0a:0a:75:75:fc:
ec:dd:0a:cb:48:25:dc:9c:0d:aa:9c:a2:67:5b:56:20:8a:c1:
0a:d4:17:bd:3b:54:f4:ce:2e:fe:29:48:92:29:62:c8:83:c0:
98:4e:ba:13:e8:34:76:41:75:23:29:aa:7d:c0:1c:49:2b:60:
54:29:a2:5a:77:09:31:a7:93:8c:e7:f8:5a:0a:33:96:0b:1a:
33:ee:f9:e6:78:be:a9:44:95:2b:ed:ef:e3:76:da:ea:fa:c2:
78:56:b8:66:f0:cf:2b:ff:ed:55:00:28:e5:e6:e9:66:b6:17:
cf:ef:21:49:9a:8d:be:00:3f:eb:1f:23:9d:6b:66:6b:63:27:
e1:34:63:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:59 2025 by rpki-client