Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: EAjn7Mpx+mgCaVEEo/aEu1jVV736yCwE+96xGAzBJDU=
Subject key identifier: BF:69:7A:33:D6:E0:69:81:65:D8:14:97:A8:7D:73:72:81:DA:3A:5D
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01984588B313057775DDBC2A675BDF186087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:00:43 +0000
Manifest this update: Sat 26 Jul 2025 07:00:43 +0000
Manifest next update: Sun 27 Jul 2025 07:00:43 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: 62wb4WYfA7v8uLYzCBk1QF0Z7xQk+QzwnoV8u+kji7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:b3:13:05:77:75:dd:bc:2a:67:5b:df:18:60:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jul 26 07:00:43 2025 GMT
Not After : Jul 27 07:00:43 2025 GMT
Subject: CN=bf697a33d6e0698165d81497a87d737281da3a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:c5:59:52:ee:f6:c4:6e:65:b1:3b:fb:36:
10:3c:56:16:89:b4:fe:42:a4:8d:32:3e:34:b8:dd:
fe:0a:09:f5:ad:32:bd:02:1d:8c:15:75:f7:e7:39:
f2:00:6b:41:44:7b:a1:88:08:fa:d7:92:d0:6f:dd:
ff:d1:cf:46:45:64:c6:6c:51:8d:8e:3b:6b:98:b3:
75:49:96:f6:2a:d6:50:13:be:fe:7f:74:13:a7:4c:
c7:97:74:5b:e8:b0:67:5e:01:db:07:5f:e8:50:d7:
99:17:cf:15:17:42:58:93:e7:ac:a4:01:59:48:a1:
27:ec:f0:d8:8e:12:81:32:15:66:5d:f6:2a:ff:e5:
fb:41:4b:19:ab:af:ee:bd:8e:2a:09:84:59:15:2b:
35:54:fb:7b:85:95:f6:f0:41:af:83:6a:30:a2:e5:
36:89:1a:c2:24:79:cc:8a:cc:60:d7:36:57:f4:5c:
a8:1a:96:84:5b:91:bd:9c:46:37:d9:76:37:47:f1:
57:09:29:03:62:4d:d4:5a:8c:3a:89:e1:bb:8c:bc:
e1:8e:8b:44:9f:34:02:c0:b9:fd:d8:0f:79:50:b1:
38:9b:87:a6:d1:9b:42:82:01:f5:6f:01:be:a6:35:
8b:2d:59:f9:db:8b:a9:38:a2:72:c2:17:de:fc:ff:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:7A:33:D6:E0:69:81:65:D8:14:97:A8:7D:73:72:81:DA:3A:5D
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c9:0a:18:77:e5:78:01:d3:37:aa:f4:ba:db:58:67:ee:a3:
e1:a4:c7:34:c3:0a:6a:d9:1d:22:21:fb:96:2f:97:2c:4b:29:
d6:7d:41:be:46:96:a9:49:2c:c5:f6:c7:a6:48:85:fc:f4:73:
88:ed:c7:ae:7d:be:77:e1:91:12:e7:5d:b3:40:b2:85:d6:86:
b2:58:7e:11:1b:28:ee:72:9a:2e:86:4a:1f:d6:7a:e1:b2:41:
5c:8d:7e:80:c8:39:b7:1b:63:3a:81:81:4d:96:ca:d5:5b:a8:
30:35:35:fa:98:6b:3d:8c:cf:d2:99:2e:28:2d:7d:58:d0:6b:
e3:17:e7:06:fd:dd:cb:cd:09:d1:08:45:be:02:ca:84:e1:43:
e3:3f:03:d0:b4:0f:1b:2a:eb:36:fe:32:65:ed:53:66:05:d8:
13:af:47:35:e1:2c:06:d0:f3:2a:66:be:da:15:84:f5:49:7b:
8e:04:b3:13:e1:04:85:fc:58:8e:d2:3c:ff:45:ae:10:30:dc:
9d:f8:2a:d9:49:80:d0:cc:d6:d0:87:a5:32:d6:bf:99:76:b3:
29:ed:f4:88:8d:f5:d1:c7:17:60:86:75:b2:6c:25:bb:8a:88:
fa:30:74:5b:48:bc:03:98:3f:f0:68:87:2f:f6:94:2c:0e:67:
99:ef:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:07:50 2025 by rpki-client