Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: MQZDvoLJnZ0vwJmBdjjWBf7H7XtFWENsGnnp8gQJN78=
Subject key identifier: F9:5C:48:F6:78:63:5F:05:14:86:DF:80:66:7C:D7:AB:E3:7E:DA:F8
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 01984AE56DFA91A13156250E4A660418B182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 0377
Signing time: Sun 27 Jul 2025 08:00:06 +0000
Manifest this update: Sun 27 Jul 2025 08:00:06 +0000
Manifest next update: Mon 28 Jul 2025 08:00:06 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: ocOWGDIH/Y+BXHp+9ASHuGdBhAP3JE7XbqI+bwSkghc=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:6d:fa:91:a1:31:56:25:0e:4a:66:04:18:b1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Jul 27 08:00:06 2025 GMT
Not After : Jul 28 08:00:06 2025 GMT
Subject: CN=f95c48f678635f051486df80667cd7abe37edaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:20:8e:59:30:92:23:16:5e:6c:22:d0:5b:
c2:10:d9:4a:c8:de:27:3a:ff:84:55:26:4c:0b:51:
9e:53:2d:65:92:78:da:c4:ba:3e:56:0a:18:ea:56:
ae:04:e5:46:ac:16:90:d9:17:4e:84:e1:df:8a:03:
fd:85:fe:07:cf:76:29:77:8a:be:17:b7:fe:2c:93:
5b:4f:b9:01:6e:e2:f1:ac:60:7c:ee:fe:2b:68:b1:
e8:6e:bb:81:25:b0:69:39:e7:4e:dc:9b:6c:83:e5:
f5:86:96:85:22:e8:58:05:c6:fb:ad:cc:b1:2b:83:
96:3c:6a:04:11:fc:a5:5a:9d:0c:d2:9a:50:3f:e2:
f5:2d:8b:95:be:4c:7d:59:a9:50:d8:5e:3e:49:1f:
f7:06:92:38:c5:92:a3:f7:3b:d4:69:7a:24:7b:af:
45:7c:e5:01:87:85:3b:bc:4b:a6:32:aa:69:5d:03:
b6:0b:a5:e0:93:d1:e0:7f:ae:2e:b8:06:68:52:b2:
f3:77:ff:54:26:da:31:5d:cc:4a:5d:8f:e3:10:c8:
66:96:f5:a9:62:37:23:3c:fb:8e:e1:92:7f:52:77:
15:93:f6:cb:88:44:4e:81:8a:7e:ae:3f:8f:fb:fd:
c8:2c:24:67:39:f1:b2:11:f3:e6:44:bb:4a:c3:62:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:48:F6:78:63:5F:05:14:86:DF:80:66:7C:D7:AB:E3:7E:DA:F8
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:16:c3:7a:1d:bc:3e:89:c1:5c:22:6c:33:4b:a6:e8:7b:6c:
4f:9f:a6:a7:b6:3f:89:3c:d9:32:3a:18:96:50:db:26:08:5b:
a2:c6:52:a7:be:42:56:03:6c:dc:47:5b:ac:5f:04:a4:21:29:
49:1f:0a:1e:19:64:0f:c6:78:e5:09:a9:97:23:7d:5b:a1:6a:
0a:c0:ed:08:e8:b9:35:4d:c3:2e:b7:e1:cd:4f:20:bc:6b:21:
4a:27:bb:15:26:45:9a:ec:a7:95:c9:e6:d5:b3:98:f1:97:a6:
a9:0c:03:f0:fc:36:e9:aa:29:87:84:25:d5:d8:fa:8c:a2:d4:
49:a4:5d:ad:ce:b2:b6:ef:5b:13:5f:ed:e2:57:34:ab:85:54:
01:52:33:e8:eb:fd:e5:9c:d1:2e:63:9e:61:9e:58:35:11:b8:
25:ce:66:73:56:ed:69:a4:d3:73:86:71:9b:f1:43:a8:2d:b3:
58:c3:31:15:35:cd:21:19:13:77:1a:8a:01:6a:78:69:8b:80:
a6:c6:0d:42:40:17:53:0f:65:1a:29:7a:89:3f:d5:d6:be:26:
9a:c5:26:12:b2:e8:a5:79:6f:20:63:d8:86:18:a6:60:27:af:
45:5d:28:44:c9:1a:9e:35:2d:b7:aa:a8:9a:ba:2f:eb:c2:14:
35:d0:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:31 2025 by rpki-client