Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
File: MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json)
Hash identifier: /xopc+UYyfxwWDslHkJ/4pw5QbGrSSLhnF5Ng2q/SFY=
Subject key identifier: 23:08:22:B7:B5:56:A7:6B:F5:88:ED:F2:71:4D:4C:9C:48:AD:44:E4
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Certificate issuer: /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial: 01984852F8263529418BF6EEDCB4F54AF4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
Manifest number: 0BA2
Signing time: Sat 26 Jul 2025 20:00:53 +0000
Manifest this update: Sat 26 Jul 2025 20:00:53 +0000
Manifest next update: Sun 27 Jul 2025 20:00:53 +0000
Files and hashes: 1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: JTsv87KyvpYhWkZaEzU5wULyEwZQpXYG6PX93fHq/xY=)
2: gcvZb-H-QkR_u2nZg2XXj4qsub0.roa (hash: eOyY8yl+p8N7UEzFU3Q8jcWAiNPWbKDEoBQqZkxOiME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:f8:26:35:29:41:8b:f6:ee:dc:b4:f5:4a:f4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Validity
Not Before: Jul 26 20:00:53 2025 GMT
Not After : Jul 27 20:00:53 2025 GMT
Subject: CN=230822b7b556a76bf588edf2714d4c9c48ad44e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a1:34:72:d0:88:68:6a:6a:c6:59:06:a8:73:
3a:cb:e0:d5:fe:74:da:c7:cc:d1:28:df:ab:34:ee:
ef:7e:4a:b3:44:42:d8:f3:1f:9f:1c:0b:6c:de:30:
67:11:df:f6:86:49:a5:2e:7f:fc:d0:00:02:57:03:
8a:9e:c9:af:b7:15:21:a9:8c:cb:aa:89:4c:10:88:
21:85:32:49:cd:0f:83:e1:7c:9f:12:20:95:82:79:
1e:93:23:a5:ee:22:74:27:8a:5e:05:29:02:1f:27:
d4:64:02:38:74:e9:fb:26:b1:38:3c:da:53:f9:18:
db:bb:be:3f:c2:e5:8e:9b:76:59:4c:ea:c5:b0:24:
24:f2:8d:c9:58:62:88:66:4f:d9:12:4b:dd:9f:c8:
7c:59:e0:95:1e:00:95:50:a4:c7:ae:2c:5b:af:d1:
8d:45:ff:d0:1d:62:5b:98:3b:fe:cf:db:16:7b:c8:
bf:16:99:91:bf:36:13:29:d1:d2:45:28:22:b3:53:
9c:55:f4:2d:ef:27:9b:45:82:30:55:0f:3b:c9:aa:
90:3d:b3:2e:55:30:6a:de:8a:6e:eb:8e:74:ec:d3:
16:c7:27:1d:ae:a7:16:37:68:3f:02:47:ce:af:0f:
ef:a7:2b:40:09:49:fd:c3:3c:c3:d0:66:91:1f:6f:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:22:B7:B5:56:A7:6B:F5:88:ED:F2:71:4D:4C:9C:48:AD:44:E4
X509v3 Authority Key Identifier:
keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6d:c2:52:7a:5b:3e:c0:95:be:87:f0:24:f4:4b:fe:a3:fc:
5f:33:05:3e:1e:67:3e:ba:c3:a3:00:df:44:4c:6d:a9:a9:cb:
c9:a6:d7:f6:f3:23:6c:51:e5:bc:a1:03:dc:59:18:b0:69:e8:
7e:6b:fe:5a:0f:0f:cb:b0:d1:90:44:db:b5:45:a1:a6:0d:ab:
ef:7b:1b:98:89:86:47:1e:1c:64:04:90:5d:63:af:c4:e4:c3:
9d:c8:66:0a:1a:62:25:80:99:c0:1a:0d:ee:3d:14:85:78:86:
cf:2c:66:2d:13:3a:61:6b:ec:b8:5f:27:e6:99:4d:61:bd:ef:
e3:2a:8f:98:9a:f9:dd:0f:48:4f:1b:0b:31:cc:c5:97:19:a5:
ff:ab:38:d8:7d:dc:1f:50:a6:68:8e:7f:05:e3:c8:d6:56:a7:
7d:87:e0:a9:8f:9e:7c:0a:d9:e7:7c:1b:0f:19:c2:5b:df:52:
78:1d:f8:ba:59:71:23:4a:18:41:7c:6f:50:b6:ba:4a:8a:92:
5b:f0:94:c3:24:aa:d9:4b:16:0e:a5:7b:3f:d6:52:19:82:d3:
12:00:07:84:c9:36:7c:99:80:59:47:d1:bf:71:6c:93:27:1c:
d4:13:3f:31:84:ed:96:8c:ff:44:91:d5:69:7a:49:77:d5:96:
94:b2:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:50:05 2025 by rpki-client