
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: okxFc2ptSdTuMNTKXuQ9L99QRqQa3OnzUQilkxQNzdI=
Subject key identifier: 2B:C5:CD:FD:1E:6A:FD:3F:37:B8:32:99:0F:96:33:7E:A7:CE:DB:5E
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 019835A80AC1BAFE3F64984DFE816666A734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 040B
Signing time: Wed 23 Jul 2025 05:01:01 +0000
Manifest this update: Wed 23 Jul 2025 05:01:01 +0000
Manifest next update: Thu 24 Jul 2025 05:01:01 +0000
Files and hashes: 1: ZpEam4JrA75W3vKeb-kb3n0W0y0.roa (hash: kYGb95Bh9aZOERP/x6nIdXNnyuRNyDQM9q/MQE4pooE=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: AK1Ul4a//cGwDcVrSqMmknLJbAU7vPMxbhvbb0DpQlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a8:0a:c1:ba:fe:3f:64:98:4d:fe:81:66:66:a7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: Jul 23 05:01:01 2025 GMT
Not After : Jul 24 05:01:01 2025 GMT
Subject: CN=2bc5cdfd1e6afd3f37b832990f96337ea7cedb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:c2:4d:5a:cc:58:fa:66:50:3c:96:d6:9a:
0f:1a:41:52:02:da:8a:c4:8a:d8:6a:b8:b7:4e:9f:
36:b8:9f:dc:d2:86:5a:7f:1e:7e:36:cc:a5:82:52:
73:6d:11:20:f4:6d:65:dd:a9:84:a0:c5:c4:5b:a9:
62:1c:1e:99:e1:f3:cf:a9:c9:f2:5c:1c:9d:a8:2b:
d8:a3:1c:27:5f:2a:47:61:38:e1:b8:aa:af:11:1b:
8c:1e:b8:f6:41:6f:29:fc:50:e5:bc:6b:c4:4c:4c:
12:b4:c3:8d:7a:7a:46:45:4e:8a:d6:43:74:a2:89:
58:1d:73:15:3b:f7:d0:e7:8e:0a:90:64:45:ac:f8:
b1:69:e3:82:1e:bd:86:fc:e3:28:c4:e4:c3:5b:36:
0e:68:23:7a:ce:77:cc:20:55:47:f6:89:1c:c5:fe:
76:98:96:d2:f0:58:86:ef:3b:91:52:de:21:72:1b:
d5:58:29:0f:4b:84:cf:68:b0:be:5c:0b:df:82:75:
3e:06:f0:1d:53:1f:54:df:5b:0d:3d:41:2b:6d:ae:
fe:71:74:67:98:a7:ac:c8:35:62:cd:b5:cb:56:35:
0b:53:65:e4:fc:a6:54:ce:ba:50:38:9c:a5:71:3b:
b7:4f:87:4a:ab:59:e1:a3:61:3c:51:1f:bc:f4:a6:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C5:CD:FD:1E:6A:FD:3F:37:B8:32:99:0F:96:33:7E:A7:CE:DB:5E
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:37:71:e2:9c:bb:2d:bb:98:b4:b2:fd:e0:78:8e:af:17:c3:
83:8d:16:50:eb:9e:a2:ba:a6:da:07:da:2e:85:25:0b:63:93:
28:f7:53:01:8b:82:d8:90:47:8b:bd:72:0b:0d:3f:d3:3d:02:
f0:71:dc:23:2f:3c:52:f4:09:55:f5:92:f5:2c:6a:6b:0b:3f:
d5:f9:62:e7:49:36:e2:4d:fb:0a:ad:8d:86:30:c0:7d:87:96:
67:35:69:7d:88:84:2f:0f:0a:1a:7c:1f:8d:60:fb:69:80:37:
55:b9:fc:a8:79:98:80:6b:cc:db:d1:be:d3:bf:a0:f1:d9:b5:
c0:a7:e8:5f:40:ff:d8:49:f1:1d:4a:8e:68:a6:6b:62:09:a3:
ec:0c:e6:fe:52:a5:2a:a0:59:66:2b:51:81:0c:b0:42:9a:7d:
7d:f9:67:23:6b:1d:a7:b9:76:46:9b:df:a2:a7:ad:76:91:e0:
ba:ad:01:da:ee:18:9a:39:6d:22:55:79:3b:9a:99:bd:7c:a9:
81:ff:00:a1:4c:bc:38:db:87:8a:b7:73:c8:3e:cc:95:52:21:
9e:ed:ed:46:8c:7c:1d:e3:b0:83:5b:dc:23:be:a1:ba:92:8a:
8a:48:11:4e:ef:d1:fb:ee:ef:3b:48:40:7b:f9:92:b0:3f:42:
17:91:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:47:25 2025 by rpki-client