Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File: mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier: Y2Gh5Jk7JEXS9z9kfW4T5qvK/33hme6xT1roF4KH6Q8=
Subject key identifier: 56:D3:FA:17:58:B1:75:6D:D7:18:CA:CE:1E:A7:8F:1E:61:8C:EF:B0
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial: 019827B4F403AAF9215C0B68EE792E8BF27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number: 1171
Signing time: Sun 20 Jul 2025 12:00:26 +0000
Manifest this update: Sun 20 Jul 2025 12:00:26 +0000
Manifest next update: Mon 21 Jul 2025 12:00:26 +0000
Files and hashes: 1: ONDqQfjr9_AJ9RydMAScKqXbPqA.roa (hash: tzIBuHIsI+gH6B58aDq25YyBMDZoGOkfi5bBeLvI+/k=)
2: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: Jb3ocf7BPFt5i6bifNi66Z1q+eEVT/fa0RK5G8C9dI8=)
3: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (hash: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b4:f4:03:aa:f9:21:5c:0b:68:ee:79:2e:8b:f2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
Validity
Not Before: Jul 20 12:00:26 2025 GMT
Not After : Jul 21 12:00:26 2025 GMT
Subject: CN=56d3fa1758b1756dd718cace1ea78f1e618cefb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:cb:83:bf:2e:62:7d:c6:59:d2:a6:c1:95:
35:db:45:9f:95:6c:e9:40:bd:4b:84:21:14:d9:dc:
11:8d:de:68:67:65:21:26:6c:97:64:7d:c0:f3:26:
dd:13:a3:7d:0b:28:e9:41:d0:0e:4f:1e:6d:4f:cd:
8c:27:e4:33:64:d8:d5:88:c6:23:a6:80:66:a6:c7:
e7:7b:22:7e:1c:6d:34:a0:40:47:f5:44:9a:63:5a:
4a:53:9d:24:32:8d:8f:94:ed:44:28:c7:55:79:43:
c4:85:ee:31:5f:53:93:e8:ab:5b:22:7e:7d:9b:b1:
46:96:1d:86:4d:9a:34:00:1e:65:41:45:3d:51:7e:
99:ac:9e:6e:4c:12:25:cb:bc:d5:b0:50:5b:86:d2:
8f:09:0d:0b:29:89:0e:ff:42:0e:a5:45:e2:38:91:
26:dd:61:ee:0c:f1:41:27:93:1d:a0:db:0f:20:9b:
af:d7:8b:7b:80:ab:a9:0b:07:a5:8c:2d:dd:7a:75:
d5:ee:16:c7:47:90:cb:93:8f:fb:7e:ea:c0:fb:c5:
6b:62:de:d9:82:17:ca:c8:5c:f3:b0:10:24:6e:71:
ea:a3:2b:5c:97:28:52:85:18:f2:c1:1b:b6:36:83:
13:21:12:9b:8c:a7:6d:75:5f:1e:80:1c:9f:a1:8b:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D3:FA:17:58:B1:75:6D:D7:18:CA:CE:1E:A7:8F:1E:61:8C:EF:B0
X509v3 Authority Key Identifier:
keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1c:40:81:36:0a:da:4e:05:61:a8:2c:05:32:e7:f1:d6:40:
f2:15:ac:27:79:ce:dd:02:c9:da:cc:c4:5b:f7:93:ff:6a:2d:
62:2f:3b:39:a5:80:fb:c3:f2:a3:6a:ad:05:e1:57:86:1f:d1:
97:65:3a:f6:cd:33:5c:c5:59:77:29:ca:ca:b7:c5:5b:7b:cd:
f2:bf:e7:2d:5d:03:54:1d:98:1d:7e:b6:1a:80:8d:c7:71:ff:
d4:74:4c:7c:2d:a6:71:de:fb:2d:ba:43:8f:5f:d9:b2:f5:dc:
af:98:85:a1:9b:4d:be:af:af:20:02:8f:00:f4:7b:c2:d4:84:
58:4d:8f:71:97:9f:31:79:fa:5a:f4:e7:48:0b:19:f5:e8:cd:
cc:ef:93:1d:8a:af:02:a0:dd:d2:49:09:08:65:e5:f8:1d:89:
b6:72:27:54:d0:83:0f:0e:14:66:89:4f:e4:1f:fe:ea:ee:6e:
98:38:35:e5:9e:01:b8:6e:9d:6f:a0:c8:a0:5d:a5:fd:e1:d0:
7e:08:7e:47:56:cd:c2:8b:e6:e3:ee:21:0e:96:7b:ba:53:be:
b0:6f:0d:e6:c3:c9:bd:78:df:f1:b1:4f:ec:a2:ae:b0:05:7b:
50:66:a5:60:e8:92:fc:c7:8b:2f:0f:23:5b:ec:8f:7e:09:8e:
73:74:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:31 2025 by rpki-client