Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: jb6nXl7LNyOAzwQhnDSUlwWgnQXcj94JvI4FH8WAfmc=
Subject key identifier: FB:2A:95:92:23:42:9E:57:EA:58:C0:2C:E2:19:B9:C0:CF:A9:69:B0
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 01984889B5464254518F58D2D48908ABF969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 0773
Signing time: Sat 26 Jul 2025 21:00:41 +0000
Manifest this update: Sat 26 Jul 2025 21:00:41 +0000
Manifest next update: Sun 27 Jul 2025 21:00:41 +0000
Files and hashes: 1: mANtdvjrwJb7CPzwvDq9bTI0qtY.roa (hash: bxccQm8ZlD2A8QhBkFeAoasQeWmGc7036H8m3hd3seo=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: gRtF0ZULwcmCMI6ckvAxcmDJAU22h85zMhznNA+XVsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:b5:46:42:54:51:8f:58:d2:d4:89:08:ab:f9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Jul 26 21:00:41 2025 GMT
Not After : Jul 27 21:00:41 2025 GMT
Subject: CN=fb2a959223429e57ea58c02ce219b9c0cfa969b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:60:c9:a8:9c:95:01:33:e5:06:cc:b1:b1:
c6:1b:3a:78:ec:00:7a:d5:36:c6:7b:63:95:f2:1f:
5e:25:76:a2:04:0e:31:61:c3:66:8a:dc:ee:1b:3e:
00:93:ec:14:ed:e9:d5:cb:60:b3:aa:77:d5:6c:0b:
7f:4d:6f:42:23:69:1e:dd:15:91:ee:8f:f2:71:5c:
94:48:1b:ac:78:26:52:5f:39:0e:1a:9c:c7:f6:25:
4f:8c:82:34:2f:dd:11:25:a5:d9:95:e5:6b:93:81:
9f:13:95:39:d4:8d:15:6b:37:a2:1f:82:ad:a2:24:
7e:d3:7c:fe:3b:4a:d9:23:a6:28:96:01:10:d8:b2:
14:cb:f7:1a:ac:ea:1d:1b:c7:f7:86:49:cf:a0:3e:
a5:89:d0:58:ba:e0:54:e5:0d:63:77:8c:65:5a:3a:
6d:63:d8:f6:d1:3b:d0:3e:15:55:6b:b9:ec:b1:c1:
b3:f1:62:7b:7d:c8:29:39:8b:79:76:f0:9a:24:08:
5c:34:ba:fa:6e:d3:44:36:ea:91:af:f4:92:8d:50:
53:8e:3e:ff:b0:eb:cd:45:c4:14:87:7b:63:83:a3:
b5:8b:44:e7:dc:51:2b:b0:3e:9d:00:81:96:5f:e5:
48:97:44:27:89:15:af:46:99:c4:ba:f0:e1:99:fe:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:95:92:23:42:9E:57:EA:58:C0:2C:E2:19:B9:C0:CF:A9:69:B0
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a2:18:7f:e0:e3:e1:79:f7:a9:ea:5d:19:81:dc:a8:8a:28:
80:0a:e5:11:fc:e2:7f:8d:e1:5d:3b:92:57:b5:90:6f:0f:d7:
76:52:f2:3c:bc:b4:b7:57:e2:30:02:01:59:d7:47:81:6e:de:
9e:e4:9d:0e:c1:c4:3c:d7:f7:ee:b2:cb:10:cc:7b:c4:9e:ee:
d8:09:6f:72:8e:c9:0f:8e:a6:1f:c1:3c:fe:3e:49:0e:4e:61:
e3:b5:ee:90:96:6b:0f:f1:e1:f3:62:97:d7:59:58:e8:c6:b0:
60:0f:16:1a:7d:f2:cc:61:d7:56:25:ec:47:ba:41:ab:63:81:
98:9e:30:c6:69:71:2c:c4:70:a8:72:b7:64:99:aa:a5:7c:40:
18:dd:f1:4e:1f:a5:b0:e4:a1:e7:99:0a:74:b6:e8:f8:83:44:
9f:32:1c:a0:68:fc:47:f8:bc:e5:48:8e:c1:1f:07:34:25:2d:
75:1d:ab:92:6a:2e:83:5c:d2:37:e3:1a:84:83:fd:2c:70:76:
cd:69:48:da:ff:49:26:ca:6b:b3:eb:fa:7e:17:bf:34:97:70:
d7:cd:07:d8:5f:17:3b:e5:74:07:5a:bf:17:a2:b0:9c:72:ae:
e3:1e:7f:c0:10:94:69:fb:43:cc:58:4a:d9:05:d6:1c:c4:28:
24:da:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:45 2025 by rpki-client