Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
File: mRyTTgj1egPvTro2taTaeYolIgc.mft (raw, json)
Hash identifier: lfZEr72RykK1YsYiUmcjEK5rGwC70RfKIy3Hh3s4BoY=
Subject key identifier: A4:9F:37:AB:13:CF:3D:1F:0D:22:5D:B5:E3:43:95:BD:D8:AE:DE:EE
Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Certificate issuer: /CN=991c934e08f57a03ef4eba36b5a4da798a252207
Certificate serial: 019849D3A238A84A2984D06DA1664DE8B256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 03:01:02 +0000
Manifest this update: Sun 27 Jul 2025 03:01:02 +0000
Manifest next update: Mon 28 Jul 2025 03:01:02 +0000
Files and hashes: 1: db9OeH46tzqgA4Lx9Y7WIwYTuDM.roa (hash: FuLyiACFaT6BITOZPeoXwp9XiYIYBsR3kP7HfHr2tYI=)
2: mRyTTgj1egPvTro2taTaeYolIgc.crl (hash: qtpil4tR96PEh7cuqV4h16wD9wYNSA8uu0Be25pOfNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:a2:38:a8:4a:29:84:d0:6d:a1:66:4d:e8:b2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207
Validity
Not Before: Jul 27 03:01:02 2025 GMT
Not After : Jul 28 03:01:02 2025 GMT
Subject: CN=a49f37ab13cf3d1f0d225db5e34395bdd8aedeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:0e:96:5c:d0:65:f6:4a:58:86:5a:e5:f9:
31:2f:bf:b7:e1:b1:5e:2f:28:cd:c3:b9:8a:68:0a:
45:a4:19:4b:ab:4b:e9:9f:18:f5:90:7d:d4:12:9b:
30:71:3f:50:bf:1e:53:38:b7:61:36:89:b4:82:67:
c1:c0:9f:af:38:bc:92:76:50:d8:61:77:5e:af:ff:
ec:82:4f:8d:35:17:ce:19:47:d6:d7:21:44:f2:07:
7e:68:af:e2:5e:9e:61:14:08:4e:4b:20:ff:c9:61:
62:7d:a1:fb:a6:f6:ba:97:32:7d:de:4f:38:17:c8:
3d:6f:1e:3d:c4:d8:64:43:b5:9f:55:c7:1d:ea:04:
e4:94:a8:fa:4f:fb:b8:65:5d:97:e9:d3:c0:76:0e:
1c:bc:8f:67:55:8c:b6:db:44:64:08:19:1a:95:41:
be:5e:c0:72:f3:e7:1a:36:4f:45:b6:47:33:83:80:
d7:ad:22:26:fd:5c:2b:7b:76:76:10:3b:65:76:76:
d0:0d:b5:b1:e0:a3:a0:d6:05:5e:37:f8:ce:57:a0:
01:56:83:54:7a:73:e3:cc:3c:81:83:47:27:d9:08:
9e:3b:30:07:91:7d:1c:31:6a:ac:29:f4:d6:52:61:
1a:98:ce:39:c3:69:c1:61:4a:16:b6:df:fe:c8:23:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9F:37:AB:13:CF:3D:1F:0D:22:5D:B5:E3:43:95:BD:D8:AE:DE:EE
X509v3 Authority Key Identifier:
keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:97:57:d3:0c:83:59:a3:ed:9e:77:63:f0:18:4c:c3:8e:e7:
69:ab:17:7c:8f:77:f4:ca:e1:bb:e0:a8:e2:8e:3f:c9:d4:30:
55:de:f9:28:b3:ec:1f:c5:b0:dc:ed:46:fb:3e:62:0e:a7:32:
67:99:0e:e8:d8:2f:1c:c0:7c:9b:fb:23:4e:dc:f6:96:99:60:
6c:9f:70:ae:9d:4b:77:05:02:89:b1:d3:b9:a6:a7:1c:73:b8:
b5:16:30:9e:7d:63:e4:7f:74:b9:b2:ce:ee:55:8a:81:91:24:
05:d5:31:5d:7f:a4:ea:94:31:83:b6:93:fb:37:22:1e:76:c6:
a9:d7:d0:25:c0:91:0b:84:64:41:f8:9c:24:ce:1d:1f:67:48:
b3:b6:1a:aa:42:e0:20:a0:4c:52:10:42:cd:3f:cc:3d:eb:84:
68:37:9a:03:45:49:cd:df:e0:78:df:d0:b8:4d:2d:2e:38:f0:
c2:5e:7c:49:2e:89:df:35:81:46:6b:ae:21:cf:61:a9:42:a8:
19:59:0f:63:f7:02:de:71:2b:d1:cb:32:21:93:be:10:30:ea:
12:5a:84:e4:ad:70:86:cf:cc:5e:7a:58:cb:8f:1a:0d:28:e5:
3f:67:67:e9:68:49:d6:98:fb:25:d9:b3:d2:40:e5:43:29:a9:
f5:14:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:41:50 2025 by rpki-client