Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File: mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier: XygcrPNtCTENiFLIb6tqfsuXvyYrY2OKUMVW8nFTpRA=
Subject key identifier: 47:0A:0C:FE:BC:8D:E8:B3:9B:BE:44:CB:A6:F4:9E:FF:FE:9E:ED:86
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial: 019849D2F5F2713EEF1169F0F42CA78F4F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number: 04B6
Signing time: Sun 27 Jul 2025 03:00:18 +0000
Manifest this update: Sun 27 Jul 2025 03:00:18 +0000
Manifest next update: Mon 28 Jul 2025 03:00:18 +0000
Files and hashes: 1: WvHTHUW2Hu_mDZctFQeVwGysiHE.roa (hash: 0IRIumTzEnldnjuLK5Mty3ubumeenKJPjlLba1MpsmY=)
2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: CkxBvP4b738XznRk/GvcGgZdBO4T4jz29hkje7mGtIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f5:f2:71:3e:ef:11:69:f0:f4:2c:a7:8f:4f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Validity
Not Before: Jul 27 03:00:18 2025 GMT
Not After : Jul 28 03:00:18 2025 GMT
Subject: CN=470a0cfebc8de8b39bbe44cba6f49efffe9eed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:a4:ee:3a:48:8b:c1:32:48:fd:c6:44:db:
c4:d5:84:19:5f:f6:3e:46:ca:16:35:ff:2c:38:d5:
78:03:4c:18:5f:de:67:7a:40:b4:f5:20:cf:9d:6b:
60:f3:7d:a3:a2:ae:aa:c1:ae:1c:d3:9b:c1:1f:4d:
5d:32:ee:b6:e9:31:4e:dc:d1:d4:be:f7:03:96:44:
79:3f:b9:cf:d5:d7:57:7b:8e:74:d9:35:ca:b9:57:
14:05:da:b6:04:bf:e5:27:6f:3b:c4:2e:9e:ec:f5:
65:35:d6:95:43:13:08:eb:44:62:8a:b1:65:be:b0:
e4:f7:8f:51:20:55:b3:5e:aa:3e:a2:61:73:1a:d6:
69:c1:50:22:95:62:04:6d:83:49:cf:85:d4:4b:8f:
b9:a4:b6:75:a7:d4:35:08:03:47:8f:08:45:fb:a9:
da:5a:7a:e5:82:2b:b0:cf:44:f4:66:e5:f7:ac:1f:
a9:44:e3:e6:21:cb:f9:49:83:d0:47:67:e0:70:65:
32:c6:22:62:5c:16:c5:03:c4:99:e4:8a:19:85:1b:
ee:d5:96:91:50:0a:e9:89:78:80:57:3f:48:12:29:
cb:b1:f9:a9:02:6f:2f:b5:f0:1c:91:bb:e8:92:88:
ad:c0:41:5f:bd:aa:d9:35:16:24:8a:a4:92:a0:d9:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:0C:FE:BC:8D:E8:B3:9B:BE:44:CB:A6:F4:9E:FF:FE:9E:ED:86
X509v3 Authority Key Identifier:
keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2d:fb:fb:a9:5a:d9:23:72:da:00:3b:e0:29:db:5f:91:f3:
3b:b2:a8:d2:e9:c4:00:cd:28:37:a9:11:b2:0c:fe:80:89:50:
09:3e:0e:5f:95:bf:8a:99:8a:d6:55:b7:00:c9:43:09:ec:1a:
c0:7f:26:f7:91:73:e6:ee:6d:93:04:d6:58:d2:75:56:15:c7:
74:8c:43:b0:7b:63:d3:d0:3f:72:87:46:6a:33:cd:b9:2b:34:
bb:0d:12:81:4b:b2:f0:ec:1d:56:16:09:de:57:2b:e5:b7:2b:
f5:fa:3d:d1:b3:22:60:eb:9a:1e:fe:81:62:ba:57:84:c4:02:
2c:9a:9c:90:f2:30:80:2c:3d:a3:e9:c7:a2:ba:41:ae:c0:9d:
bd:94:55:6e:20:9d:99:e3:ae:c0:c6:d0:74:e9:bd:22:ec:62:
23:0d:61:64:72:d7:47:0a:a8:a5:42:8f:57:3a:0f:cc:7a:9c:
ad:fa:65:17:84:c9:24:5b:1d:dd:29:15:45:d5:1e:4f:0f:b4:
c3:c7:21:36:90:71:bb:56:df:3d:23:bb:30:50:a1:81:93:d0:
c1:63:cf:98:c7:1f:1b:03:83:59:1e:75:29:3a:2d:e7:1a:76:
a8:45:bb:10:a1:30:75:78:bb:ad:eb:8d:87:bd:17:07:e7:d2:
4a:b5:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:05:02 2025 by rpki-client