Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: OeQpVlj5EGpJQ8IpWGoo+0oZ8Ei1mLQ3oJOa0KKIePY=
Subject key identifier: B5:38:1B:90:F2:79:FE:32:8E:E8:B2:4B:ED:30:75:38:29:AE:FB:95
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019749313E6964AACE96E02A333E4989232A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 15A4
Signing time: Sat 07 Jun 2025 07:00:53 +0000
Manifest this update: Sat 07 Jun 2025 07:00:53 +0000
Manifest next update: Sun 08 Jun 2025 07:00:53 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: cHkfDUnWmnCOTnp1tK/dxcrU8ew29C6e8+EgRYzjfu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3e:69:64:aa:ce:96:e0:2a:33:3e:49:89:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jun 7 07:00:53 2025 GMT
Not After : Jun 8 07:00:53 2025 GMT
Subject: CN=b5381b90f279fe328ee8b24bed30753829aefb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:dc:0f:a2:40:82:96:c2:85:9d:54:87:3d:
3c:d8:90:e4:9f:5a:28:00:71:6f:4a:c7:5f:f8:44:
85:ca:0c:b7:73:e7:fd:76:37:3f:2f:76:05:39:54:
99:38:f8:89:3f:2d:c5:65:ea:09:a8:66:79:96:d7:
71:18:59:34:e5:07:70:a7:e7:43:4c:10:18:09:c6:
40:cc:1e:cc:41:4a:eb:78:9d:a9:28:84:fe:79:81:
f1:bb:2d:b9:e9:25:8e:bb:99:d2:18:22:a6:2b:1c:
72:c9:47:43:90:8e:7b:84:35:38:83:be:45:9c:ba:
87:92:74:0c:68:66:2e:62:1f:14:bf:e2:b7:39:90:
e2:05:70:e9:9e:b0:6d:b0:5f:76:80:c6:b4:fa:5b:
e9:c8:39:fe:5d:cf:d7:3f:28:6c:b6:9f:ca:02:b4:
74:48:b9:43:45:f1:a8:3d:29:25:ca:0a:0e:59:28:
a7:3b:33:d1:3d:d5:3a:3a:2e:23:e4:4e:5e:5a:9e:
ff:fa:34:98:5f:96:1b:c8:a1:59:7b:26:ec:12:ce:
49:c5:75:a3:af:fc:fb:c6:05:96:b9:5b:f0:6b:9d:
a5:76:83:b1:0a:39:94:5a:3b:66:3b:2d:55:f9:58:
cc:f4:04:ed:34:ce:1c:a4:75:e4:8c:cb:15:c4:ce:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:1B:90:F2:79:FE:32:8E:E8:B2:4B:ED:30:75:38:29:AE:FB:95
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:92:9f:f3:51:06:06:c3:f6:35:9c:35:3c:43:27:75:04:e8:
e9:75:91:e0:ed:46:01:c9:2d:27:cf:0a:6e:2c:0b:90:14:ae:
93:7d:e4:fa:1f:5d:ce:3b:65:37:ec:bd:f5:c8:b9:47:eb:60:
13:ca:88:d0:5d:b8:4f:ad:da:a5:8b:41:21:42:78:05:e8:cd:
c1:52:3a:7b:ca:24:40:7f:a8:98:44:5b:48:c5:00:65:08:d5:
ce:cd:6c:8a:19:18:bd:52:5b:59:99:89:68:93:02:df:6e:24:
02:6f:e1:a1:70:75:63:cc:de:8b:92:02:5f:1d:ee:35:90:24:
8b:1e:5a:1c:7c:de:df:1e:f0:1a:cf:42:32:8e:4a:f1:24:9a:
d5:c1:5d:52:59:0b:53:9a:a1:d7:c4:49:76:0d:d6:6b:00:48:
14:12:79:c5:cd:a7:0d:34:bf:cf:d1:79:28:5c:11:9b:b5:4e:
8a:e5:b7:f3:45:4a:e7:c4:d4:8b:3a:d7:13:80:26:78:e4:f8:
4e:84:61:64:a5:ef:90:70:86:d1:5e:de:c5:2f:b9:59:23:9d:
d5:14:d2:90:12:c9:f1:e9:30:39:36:66:76:4b:0e:85:72:a9:
87:3c:7d:4a:ca:1a:e5:69:a1:61:1b:37:70:97:eb:c8:91:57:
df:ae:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:35 2025 by rpki-client