Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
File: mSAfYJ56iT2obPDrvKS79HJ51hc.mft (raw, json)
Hash identifier: HnHlLpBt3383X36Df+5YdJWBcW36+EvRBObRlagWZNw=
Subject key identifier: CD:48:9B:65:8A:51:0E:4A:2F:1B:90:19:52:EC:61:56:50:41:51:CD
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 01984AAF1216B07BFE4E00FE09DD93D8F28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
Manifest number: 0499
Signing time: Sun 27 Jul 2025 07:00:43 +0000
Manifest this update: Sun 27 Jul 2025 07:00:43 +0000
Manifest next update: Mon 28 Jul 2025 07:00:43 +0000
Files and hashes: 1: 1tSheZow3C5eA6jOu_MWtrfHmEY.roa (hash: KFhShtQvmMD0Mr4HPxFeWZgSKSgyixhc5C8a67+FVZE=)
2: mSAfYJ56iT2obPDrvKS79HJ51hc.crl (hash: UENrf2l0htzwlbdBPc/OEGYre8DkciqnrsX0U/WvKhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:12:16:b0:7b:fe:4e:00:fe:09:dd:93:d8:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Jul 27 07:00:43 2025 GMT
Not After : Jul 28 07:00:43 2025 GMT
Subject: CN=cd489b658a510e4a2f1b901952ec6156504151cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:7b:75:13:bd:86:82:1c:6b:69:32:0c:1a:
b3:e4:c7:3d:61:33:5c:0d:37:a1:fe:72:31:96:86:
00:19:74:48:f4:56:05:ce:a7:dd:cc:2a:95:22:80:
62:1f:f8:1f:0a:4d:0a:78:7e:4c:6d:22:e6:d6:ce:
91:86:48:c1:83:c3:6a:74:9f:69:24:67:16:51:40:
0b:15:15:98:8a:0e:4a:7b:90:13:08:9e:b4:53:f8:
cb:1c:b0:1d:74:5c:30:6d:cf:07:b9:ec:1c:15:0a:
56:63:a5:44:dd:bb:23:7e:19:bc:89:78:0c:7f:0b:
e6:88:2d:12:77:0e:bd:6b:06:8d:ef:5c:66:11:95:
51:09:54:65:fe:54:e8:92:3c:08:af:4e:98:18:99:
28:4e:ef:25:54:76:56:01:45:5a:4b:cc:08:fc:52:
86:8a:d9:5a:6e:4c:ef:f3:8e:98:ff:8a:62:ab:d6:
1d:d9:eb:64:88:24:2f:0e:bf:95:d2:c4:9b:18:e6:
df:15:af:5e:6a:d6:db:cd:81:60:6b:45:68:d2:83:
9d:ce:b7:0b:04:2a:92:bb:c1:48:3c:50:2e:0b:42:
58:1a:f9:b7:5d:52:3b:d9:38:e3:89:99:3f:89:c9:
46:7e:95:e2:ee:a7:9a:55:2d:d6:e1:12:04:e2:d9:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:48:9B:65:8A:51:0E:4A:2F:1B:90:19:52:EC:61:56:50:41:51:CD
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fb:ef:5f:eb:45:67:63:6c:c2:6e:87:16:c6:93:7b:91:37:
f1:c5:c7:92:ea:32:a6:44:24:fe:2b:6d:33:c3:2d:5e:cf:25:
d7:49:17:a3:df:33:1a:56:cc:2a:5d:9b:78:d3:99:be:c6:95:
03:1a:07:8f:19:ad:94:1d:1c:3f:a3:22:6c:37:26:3a:75:07:
4e:c5:c3:97:a2:dc:fe:12:e4:e7:ae:3b:06:87:1d:1c:ef:7c:
de:7e:6a:25:70:d9:cb:07:6b:90:97:f4:5b:a3:44:fe:22:1c:
e1:ea:c3:b2:00:17:b7:c4:c1:be:4c:ef:bd:64:0a:1a:15:97:
ac:fe:59:a7:e5:ce:ba:bb:28:23:64:a2:4a:c4:d4:d9:f4:8f:
d1:a9:ed:22:16:6c:d6:c5:92:cb:6e:b2:91:61:08:2e:51:d2:
9d:fb:93:9a:cf:0c:bc:21:a2:2a:49:ae:43:04:3d:64:da:f9:
13:54:f4:ba:50:92:5c:1c:d0:e6:e4:b9:26:66:0c:29:ff:8d:
5f:2d:dc:17:f7:f0:93:9d:8b:bf:68:41:5b:43:d0:bc:e3:09:
9e:ee:10:d2:02:75:b1:32:88:b6:d7:24:69:ac:fc:14:74:2f:
be:b4:f1:2c:58:62:01:ed:bb:44:f3:b0:af:f7:8c:ad:c2:90:
6c:8a:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:08 2025 by rpki-client