Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
File: Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft (raw, json)
Hash identifier: 5TuQh7jPmS1p6yjFKURDZ9q1iPQBGKCjKlf5yaXuTtw=
Subject key identifier: E7:9A:14:9A:77:7C:93:2F:02:FE:94:D3:F2:3D:26:9C:70:65:70:70
Authority key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Certificate issuer: /CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Certificate serial: 01984B53BE2A0CEA862401443FD27A7F4FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
Manifest number: 02E2
Signing time: Sun 27 Jul 2025 10:00:35 +0000
Manifest this update: Sun 27 Jul 2025 10:00:35 +0000
Manifest next update: Mon 28 Jul 2025 10:00:35 +0000
Files and hashes: 1: Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl (hash: NntEPFKjnEl1dzEXby5HnUZQDoSmCkwGX/hEcaZeQsg=)
2: ZyPIESuaSWPIuQmq_le4sKOKISE.roa (hash: ZskQdIcp36rlr+2ORbgrG1PrwisAu9ueRcvHTkIY4YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:be:2a:0c:ea:86:24:01:44:3f:d2:7a:7f:4f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Validity
Not Before: Jul 27 10:00:35 2025 GMT
Not After : Jul 28 10:00:35 2025 GMT
Subject: CN=e79a149a777c932f02fe94d3f23d269c70657070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:0f:a2:47:70:96:33:f0:eb:53:62:11:f3:
a1:3f:4f:a7:7d:a5:25:38:ee:49:96:1c:22:94:c4:
e5:31:f8:57:ef:d1:2e:a2:5f:71:b7:a4:b5:2e:d7:
4d:ea:81:7f:f0:95:6f:d5:fb:ba:a4:a8:2f:71:d3:
1a:c5:24:7b:77:de:1f:52:58:da:bb:e2:17:9e:da:
c8:d4:43:a2:27:63:c6:83:ed:4a:9f:8a:ba:0b:e0:
05:ef:e2:ed:3e:bf:3a:eb:ef:71:e0:35:b1:84:fd:
b8:6d:f0:7f:6e:0c:0a:79:17:53:ab:9f:da:1e:bf:
13:d7:b5:21:73:c7:f5:c6:ff:a2:1c:db:34:89:09:
a2:2a:32:2c:38:31:14:33:49:7c:6b:db:19:6d:0e:
01:ad:58:9d:4d:0d:df:71:b6:da:46:62:28:b6:46:
ee:5e:a4:31:ea:fb:fa:88:85:fb:00:d7:93:1e:4e:
c6:b2:a3:aa:1c:2e:9e:a0:21:52:6e:7a:32:f5:a4:
61:3a:11:1f:dc:bd:8a:7b:ad:ac:da:4a:9e:18:3c:
aa:05:bf:cc:66:f2:b1:53:6b:86:fc:f9:76:33:e4:
c9:56:54:e7:e6:15:9f:e4:7a:74:81:ea:7a:97:f9:
c6:96:27:f2:37:5b:fc:1e:11:63:fd:a2:12:5d:0e:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:14:9A:77:7C:93:2F:02:FE:94:D3:F2:3D:26:9C:70:65:70:70
X509v3 Authority Key Identifier:
keyid:32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:61:a4:cb:21:8c:ba:f5:ef:2a:24:10:1a:bb:ae:80:e0:03:
55:6c:25:7e:ab:1f:9b:af:b1:d6:d6:a6:f7:b7:41:5c:ce:af:
57:c5:a2:0c:c2:dc:4b:cb:f6:74:04:90:9f:a2:0c:d5:05:42:
44:01:65:51:f6:ea:59:85:88:93:c8:d6:42:5a:26:ab:7b:d2:
15:7d:40:39:7c:40:e0:02:40:2f:2f:f4:41:88:4c:65:83:ce:
72:32:14:b1:08:b5:33:0c:0c:8b:a6:78:cc:cc:0a:72:39:0e:
15:9f:dc:dc:1d:19:af:dd:19:80:3b:1f:bf:54:b2:fb:78:80:
af:c9:a9:50:48:b0:72:fb:02:91:dd:6c:fa:a6:97:e8:c4:58:
08:5f:f7:ec:0f:64:34:db:60:75:b0:70:32:b3:20:14:31:91:
13:02:fe:32:a6:de:c8:37:94:ac:1a:86:07:90:3c:35:70:61:
aa:d7:f2:a5:39:e3:45:17:e7:7c:2a:e6:0c:4d:8f:42:cb:48:
03:1f:62:f5:3f:42:2e:e1:84:87:69:c2:30:77:88:3f:36:91:
e5:18:e8:ee:7e:5b:52:1b:55:31:78:c9:95:87:83:9c:c6:e2:
c5:65:a4:13:3a:2a:1d:30:9e:f5:f2:52:52:7f:86:f0:5a:11:
fa:bd:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:49 2025 by rpki-client