Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
File: mNtTOItvp7HlovTGhjq3Hxz7VRI.mft (raw, json)
Hash identifier: PdzDGmtPdLjOjlBQUBtppXz9GLLgJcqWF4cNC0qVlmo=
Subject key identifier: F3:2F:A1:4B:07:E3:FB:6D:2C:E6:4C:C7:AF:81:A0:00:95:03:56:90
Authority key identifier: 98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
Certificate issuer: /CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Certificate serial: 019849667FB3BD22B088A52579C9CBC30B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
Manifest number: 0307
Signing time: Sun 27 Jul 2025 01:01:50 +0000
Manifest this update: Sun 27 Jul 2025 01:01:50 +0000
Manifest next update: Mon 28 Jul 2025 01:01:50 +0000
Files and hashes: 1: mNtTOItvp7HlovTGhjq3Hxz7VRI.crl (hash: wxF0MWy8J8N42T/uSNvOb47KXMfi4EEihZwyOfmLlwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:7f:b3:bd:22:b0:88:a5:25:79:c9:cb:c3:0b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Validity
Not Before: Jul 27 01:01:50 2025 GMT
Not After : Jul 28 01:01:50 2025 GMT
Subject: CN=f32fa14b07e3fb6d2ce64cc7af81a00095035690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:55:bc:0a:c7:4c:82:88:01:b6:bf:ce:63:
0c:44:6c:b0:b8:f7:7a:43:7f:ba:b9:09:00:df:19:
46:bd:b3:30:10:04:60:fb:c2:39:60:f1:a1:4a:d7:
62:e1:cb:42:2b:9a:c7:31:26:06:b4:26:89:53:b4:
43:9c:40:6a:f3:ea:25:6f:21:f7:b1:93:2f:98:9a:
21:c2:98:74:ed:8b:9d:c1:b3:4e:bf:5b:90:01:68:
75:18:4d:8a:97:62:85:b4:11:7d:b2:75:87:e1:8f:
19:fe:b7:90:48:83:3e:61:ad:e0:6b:37:45:ad:e4:
30:6a:f7:99:fc:ef:2c:2f:84:c6:00:5b:74:d9:e0:
bb:be:86:d7:ea:6c:b1:9d:0d:c7:56:16:33:ff:9d:
72:3f:41:39:4e:6e:42:ea:79:8e:61:07:07:f1:8e:
d6:e9:d1:7a:e2:72:0c:08:6b:e0:33:43:4e:e1:fe:
31:14:bd:ac:29:c3:5a:ce:65:fc:1c:8f:8c:bc:2f:
d6:c5:cf:35:cd:d8:a3:bd:98:45:5e:3f:16:3e:0c:
80:81:a6:8e:b1:79:f0:7c:a0:e4:c9:22:13:56:47:
2b:4b:ff:f9:8c:85:fd:d8:0b:49:44:26:21:04:26:
43:17:59:cd:fb:5b:c4:2d:f4:59:6c:49:9e:81:e8:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:A1:4B:07:E3:FB:6D:2C:E6:4C:C7:AF:81:A0:00:95:03:56:90
X509v3 Authority Key Identifier:
keyid:98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:86:80:be:10:4a:b8:46:84:bd:e4:3e:8e:b4:5e:ab:43:5d:
b1:f5:2b:16:01:e1:d1:59:81:e6:ba:99:f6:dc:db:22:64:41:
4f:70:47:7c:55:67:10:f6:30:ac:35:c1:cf:e3:cc:6e:df:b4:
ea:3e:af:7e:34:18:9e:d3:5d:21:5a:e6:f8:78:39:d4:e6:35:
2f:ca:9d:9f:34:14:76:58:58:6a:4f:4c:be:70:91:a2:93:90:
e3:5b:ad:60:aa:d5:d7:b9:db:fd:55:64:c8:18:27:a9:7f:00:
a9:cd:35:4e:0a:bc:fd:20:d6:d8:37:24:e1:d7:4c:7c:4f:b3:
b5:22:d2:59:0a:a2:ee:7a:d3:6b:3f:22:51:6f:07:35:a7:17:
82:fc:fa:3a:ce:2b:db:db:09:9e:d0:a1:a1:97:cb:b8:fe:09:
12:91:34:a5:11:ad:a5:88:25:3a:76:4e:f1:06:22:19:e6:b0:
3b:89:ef:8b:0f:43:05:7f:75:09:1c:a7:4b:7a:8c:c7:c9:cc:
cb:5a:f4:6c:78:bb:13:ed:82:85:3e:df:ac:ce:83:64:74:90:
73:ce:a1:d4:9c:27:f1:db:e9:bf:95:3c:b6:b0:95:77:75:63:
8e:e4:d2:42:59:5a:43:7b:1e:da:5b:0c:d0:70:30:2d:11:d6:
82:37:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:08:13 2025 by rpki-client