Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: lirq40as/4hp+nRezh1QGgPt4lnACxRUPRykOPhhZs0=
Subject key identifier: 42:CE:29:00:6F:9C:3D:36:AA:FC:0D:0C:89:42:21:B7:0B:AA:BD:33
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 019851C3F32200284A837A7CBEEEE540877C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 0D87
Signing time: Mon 28 Jul 2025 16:00:52 +0000
Manifest this update: Mon 28 Jul 2025 16:00:52 +0000
Manifest next update: Tue 29 Jul 2025 16:00:52 +0000
Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=)
2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: FbLvqrvomVtLPia4+EkKv8O2hlHHCc8+D9DsKH64sqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:f3:22:00:28:4a:83:7a:7c:be:ee:e5:40:87:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Jul 28 16:00:52 2025 GMT
Not After : Jul 29 16:00:52 2025 GMT
Subject: CN=42ce29006f9c3d36aafc0d0c894221b70baabd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:f0:a1:79:3e:95:bb:8b:89:4d:f7:81:35:
c2:f2:b4:64:39:c9:c9:67:24:7a:8e:a8:bb:ee:e0:
fb:71:54:6e:81:e7:87:5f:82:54:31:e9:f1:df:6c:
ce:d0:a4:bb:d4:6e:5e:a6:d6:5d:79:40:f0:45:83:
25:1a:78:40:e1:d7:9e:51:66:14:eb:70:45:cd:2f:
3d:49:10:43:c1:00:12:52:aa:47:18:a9:e6:cc:ce:
17:21:94:83:09:14:9e:7a:a6:58:a4:d5:15:f3:68:
f5:80:ee:a2:30:d2:59:95:60:16:93:df:b8:82:47:
83:22:da:25:19:36:5d:03:19:7f:03:c2:2d:b7:9d:
fb:4d:b3:51:02:42:63:8e:32:5a:78:d6:51:46:a3:
44:75:56:96:aa:5d:9d:f1:6c:ae:52:2b:68:48:0d:
93:0c:69:97:b6:6e:5a:8c:82:fd:ca:56:a0:12:05:
7b:46:f2:0f:13:a7:18:2b:75:7f:9a:a2:1e:39:fa:
10:f4:b1:ae:5f:05:8f:8c:4a:53:d3:f3:6a:ca:67:
82:ee:3f:f9:cc:7e:60:7c:77:ee:6b:31:47:fb:70:
92:aa:a5:f1:ba:ef:51:66:7a:13:12:8c:c6:f4:dc:
33:65:bc:f2:fa:fd:95:da:c0:7d:44:0c:8f:07:bb:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:29:00:6F:9C:3D:36:AA:FC:0D:0C:89:42:21:B7:0B:AA:BD:33
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6c:e7:79:84:80:52:48:e1:9e:79:71:65:f5:9d:10:bb:2a:
4c:42:76:51:b8:bd:7d:ae:9c:29:a8:4b:33:16:ff:11:bd:27:
f1:61:52:1a:97:ec:3f:9d:58:66:d1:ed:c6:f3:0c:c1:2f:10:
a0:ff:b3:ee:f9:4c:77:c2:72:9f:8c:a5:04:e7:0d:e5:09:f1:
26:68:e4:fe:cc:94:1d:c4:cf:05:a9:12:d9:0c:72:a6:32:78:
fd:91:3a:e0:d4:a2:f7:51:69:ff:c9:d8:fd:3c:22:6d:b2:a2:
4b:80:49:fd:84:17:e2:62:90:4f:72:c7:a3:1b:a1:4f:94:85:
b5:14:49:29:1d:86:ba:95:d7:e2:90:d1:72:51:5c:ee:76:3d:
cc:df:79:4d:39:91:bb:7d:ad:ca:7d:f8:68:cb:26:46:4f:6a:
0d:9d:57:b4:0a:40:90:c5:ce:d7:4f:b2:a5:8f:38:a9:08:f5:
55:9e:f9:f7:94:95:49:90:45:37:c0:a5:a1:98:20:84:6b:00:
e0:be:c9:90:1c:4c:48:2a:65:fa:9a:a6:43:9e:84:42:93:99:
a7:b8:ff:5d:d4:05:90:c5:dd:ac:8c:44:56:f5:f8:12:bb:c2:
1c:2d:06:9f:fd:35:6f:d3:37:97:2d:68:aa:7e:3f:9a:00:5f:
1b:09:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:06:12 2025 by rpki-client