Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File: _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier: ZBt+OueChH/BvJ2dfAB4JwcaoCf5yeDFpAdweJAHlO0=
Subject key identifier: 36:DB:F5:EF:CA:A9:99:55:D1:C6:CF:D4:B2:69:86:77:9C:D6:11:65
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 0198560E94E5CC53D1CD7133937CE5769269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number: 1331
Signing time: Tue 29 Jul 2025 12:00:52 +0000
Manifest this update: Tue 29 Jul 2025 12:00:52 +0000
Manifest next update: Wed 30 Jul 2025 12:00:52 +0000
Files and hashes: 1: IYbiKXlQmjVmc2EBeJ1ZyhaFvEg.roa (hash: 4Xy4cTbgeWofaNajn2cgHkph6DzzB6nqlaBQdJk6xLo=)
2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: wDIm4t9OasPoqkJ+ug3TKkB0zrcvN39978DWdL1q2Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:94:e5:cc:53:d1:cd:71:33:93:7c:e5:76:92:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Jul 29 12:00:52 2025 GMT
Not After : Jul 30 12:00:52 2025 GMT
Subject: CN=36dbf5efcaa99955d1c6cfd4b26986779cd61165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:5d:10:21:32:be:82:2d:44:82:f4:43:54:
ed:ad:93:e5:f6:5f:1c:1d:3f:41:d2:e8:2a:ac:1c:
95:b3:43:c4:35:76:26:e7:27:61:c7:a2:78:1c:2f:
11:f9:65:2e:0c:b2:62:10:76:7b:d5:0a:fd:4b:ea:
fe:a9:5c:15:34:34:c1:44:fd:06:8a:38:66:f0:f4:
52:dd:4f:21:62:f4:aa:30:d7:27:57:b7:1a:bc:21:
75:63:e2:9b:30:9c:02:e7:41:26:39:ac:f3:35:fa:
0c:9d:87:5d:da:72:19:b7:d4:e9:44:d5:70:84:96:
60:fa:42:d2:35:98:77:25:a9:42:b3:98:82:2c:79:
9c:a7:ee:bc:14:d5:7c:df:95:32:b2:8e:55:64:a6:
67:2a:37:5f:73:f3:d8:92:fb:fc:8d:4a:17:80:b2:
1b:b6:15:23:da:55:4e:49:3f:21:62:b0:02:d3:98:
fb:eb:ea:27:21:1a:79:ff:5b:e3:86:52:95:95:5b:
11:64:75:e0:4a:20:c8:b4:93:18:3b:62:e3:2c:36:
81:d2:e3:90:73:73:18:00:69:85:22:d7:90:3c:6f:
af:55:28:58:b3:53:77:18:1e:71:c9:c1:8d:87:76:
f5:d6:e7:bc:7b:48:57:3e:95:ef:d7:b2:60:65:98:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:F5:EF:CA:A9:99:55:D1:C6:CF:D4:B2:69:86:77:9C:D6:11:65
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5b:00:b2:37:fe:1b:fd:f0:d5:f8:68:0a:16:a6:c8:09:cd:
63:ff:70:9c:72:92:30:4f:f8:12:a8:05:8d:5e:25:43:50:fa:
96:ee:bd:0a:3e:0e:fd:18:cc:86:ec:37:ee:94:c9:ee:c7:71:
56:e9:3f:cd:ce:0b:71:02:02:30:a2:20:5c:ac:c6:8e:6e:99:
99:18:3a:77:26:65:53:05:88:da:de:2b:4b:08:05:8a:70:de:
cc:4d:cf:ea:c7:b9:62:68:83:01:a6:11:ec:67:77:0b:d3:fc:
3a:b0:bc:d3:13:e5:ee:e0:3b:ad:c7:cf:d3:37:5c:92:e6:fc:
4c:e6:48:46:72:95:e5:cd:23:45:c5:af:49:86:34:e4:31:5d:
9d:07:87:1a:cd:1b:5a:3a:d8:da:ff:89:1a:72:5d:31:ef:d5:
ca:28:69:40:4a:83:42:9f:32:7b:aa:bf:4b:5d:3d:5f:be:83:
91:97:66:d9:43:45:34:b1:ee:bb:d4:05:67:87:f3:e2:7f:75:
f4:38:f7:2c:41:22:be:61:d9:2a:9c:8f:d4:2d:1d:c4:47:86:
b1:78:9e:93:55:c2:af:16:98:f7:29:20:2e:75:9e:d5:b1:5e:
40:b8:7f:9e:a7:07:c2:0a:4f:4d:fa:a5:4c:53:b8:3f:44:8c:
c9:fb:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:42:28 2025 by rpki-client