Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: e63aCVrXFn3dSzo95vV+rhhRnA6YINiCYrIgTjcUnrs=
Subject key identifier: 18:62:8C:EF:1A:4C:ED:66:74:65:1F:8C:AD:22:43:D9:05:90:83:6C
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 0198439B5A9C79496C9C23EA784344F9341A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 15FF
Signing time: Fri 25 Jul 2025 22:01:51 +0000
Manifest this update: Fri 25 Jul 2025 22:01:51 +0000
Manifest next update: Sat 26 Jul 2025 22:01:51 +0000
Files and hashes: 1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: UUo+c68zIuRim1gm/ZYev8ApfmCYZz8nmEo/IAjLfec=)
3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:5a:9c:79:49:6c:9c:23:ea:78:43:44:f9:34:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Jul 25 22:01:51 2025 GMT
Not After : Jul 26 22:01:51 2025 GMT
Subject: CN=18628cef1a4ced6674651f8cad2243d90590836c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:ea:81:00:0d:69:98:6f:59:18:12:37:aa:
93:d5:e3:44:39:b3:da:b8:01:51:99:5f:95:73:36:
98:5a:99:d4:21:2b:c5:ff:81:0c:52:18:3c:ca:49:
88:56:42:36:b6:e5:55:b2:06:14:a7:bd:bf:9e:ca:
07:65:15:3b:88:64:4d:52:b2:5f:2c:9b:16:ba:0c:
e4:a6:24:f3:cd:5c:83:67:d6:4e:c6:11:ab:13:b4:
4d:bd:8c:b2:61:a8:fb:38:0a:58:02:96:54:5a:62:
fd:ec:8a:39:ec:f9:3c:43:5d:e8:4a:1a:5e:5f:9d:
b5:42:7f:91:8d:53:bd:e9:ce:6b:c0:a5:06:12:82:
41:20:60:ef:ce:6e:ba:18:c2:a3:83:6a:df:0f:e2:
02:ed:34:71:09:00:06:56:93:04:71:9e:39:d8:20:
df:57:2e:ca:48:07:09:83:3b:96:57:91:30:0a:43:
d7:34:de:94:de:c5:dc:5c:14:07:97:ca:1d:71:61:
be:27:50:46:e0:7c:a3:a1:dd:59:02:3b:fa:bd:c4:
b3:af:f8:61:36:3b:f6:02:fe:76:91:7e:da:61:49:
7d:51:45:1a:05:d1:83:33:5e:94:73:d9:38:63:d3:
8c:61:dd:01:0a:87:0b:5b:98:58:89:c8:32:f8:4a:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:62:8C:EF:1A:4C:ED:66:74:65:1F:8C:AD:22:43:D9:05:90:83:6C
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1e:97:aa:3a:3b:1d:7a:21:52:0c:67:d3:fd:46:78:13:04:
14:79:22:75:b3:f8:a2:eb:a7:69:66:bd:54:92:de:ca:4b:47:
8e:01:5c:d9:e4:2e:9d:12:fd:cc:d5:42:59:1b:0a:aa:5b:fb:
ac:fe:05:54:18:92:34:bd:41:12:97:d1:a3:7d:2a:43:35:54:
2e:94:95:23:74:0e:2d:aa:4a:e9:2c:aa:58:b8:c7:fb:75:5a:
e4:10:c8:40:9c:33:c1:a2:0f:5b:65:44:a8:89:9b:6a:43:10:
f1:4e:b6:71:de:e7:14:0e:8a:af:73:0d:18:f3:2a:1a:6b:72:
4f:27:4b:8f:79:6d:7d:ce:43:b0:bb:3e:dd:8c:d1:bd:f5:f8:
cb:1d:69:cd:f4:c3:53:fe:6a:a7:db:ed:f6:49:b9:2b:f2:46:
1a:d5:6f:ad:76:df:92:ba:64:83:6a:b8:ed:25:ac:e4:f2:70:
2f:e4:e5:22:8c:fc:b4:cf:23:77:29:bd:5f:b3:cb:e1:d7:a7:
49:1f:d8:60:b5:cb:a9:de:5d:d8:0c:e5:d6:f6:06:5f:a5:22:
23:d8:0f:48:5d:73:2a:ca:11:91:58:9a:39:fb:40:50:b8:e9:
67:f3:52:d6:eb:02:e2:64:5b:42:df:0d:64:83:1d:30:66:4d:
b2:3b:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:28:02 2025 by rpki-client