Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File: maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier: tMwLwjD670OX4pYtzvmQy09dizQO1sbEMMWCzgKe7Uk=
Subject key identifier: 81:6C:A4:68:F4:F6:0F:6B:1F:3A:CE:7C:FE:96:C9:85:88:76:0D:8E
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer: /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial: 01992EC736F0610833898C24E1003D424847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number: 048C
Signing time: Tue 09 Sep 2025 14:00:31 +0000
Manifest this update: Tue 09 Sep 2025 14:00:31 +0000
Manifest next update: Wed 10 Sep 2025 14:00:31 +0000
Files and hashes: 1: ZpEam4JrA75W3vKeb-kb3n0W0y0.roa (hash: kYGb95Bh9aZOERP/x6nIdXNnyuRNyDQM9q/MQE4pooE=)
2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: h0tRTIZ2xOpcK/V/x2zws/hXA/ZlhRRj4gGl6Efuvws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:36:f0:61:08:33:89:8c:24:e1:00:3d:42:48:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
Validity
Not Before: Sep 9 14:00:31 2025 GMT
Not After : Sep 10 14:00:31 2025 GMT
Subject: CN=816ca468f4f60f6b1f3ace7cfe96c98588760d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:d7:24:e3:fb:d1:1c:e6:b2:95:08:b0:8e:
7b:c4:3e:9c:80:87:13:bd:18:77:16:2b:db:fd:15:
39:3d:bd:f3:70:6f:a7:75:d1:2b:5b:de:ec:47:8d:
36:16:8b:5d:e3:f0:a5:a9:04:9e:e1:41:e8:7c:f6:
e5:a8:ff:57:29:91:02:46:4e:c5:a4:47:ee:50:29:
11:2d:a2:28:e4:62:77:81:cd:21:13:74:00:26:09:
e0:af:6d:80:16:d2:e3:04:46:21:69:4f:66:34:1f:
a3:a5:58:c5:40:89:45:6e:67:29:5e:dd:f8:ab:98:
04:72:f9:89:2f:11:45:5a:7b:da:18:ca:d8:e3:91:
ce:65:a3:30:da:4c:a7:8e:7f:dd:5a:e9:10:3e:0c:
08:7e:85:7b:64:ed:f9:6b:67:c2:5b:7a:a2:85:49:
94:c7:fe:a1:d7:6b:aa:8b:82:c6:f8:dd:58:99:ef:
4b:4e:1d:db:9e:7f:bc:cb:da:10:8b:9b:54:dd:47:
86:01:b1:85:83:5e:b3:94:84:8f:5a:4c:5c:52:2f:
e7:31:a2:da:79:c7:2f:6e:10:90:56:b1:c0:31:11:
64:10:87:fa:01:8b:0d:7e:48:b5:07:89:d9:81:d4:
6b:c4:84:e6:6a:e6:0d:c6:a7:92:11:aa:dd:91:48:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:A4:68:F4:F6:0F:6B:1F:3A:CE:7C:FE:96:C9:85:88:76:0D:8E
X509v3 Authority Key Identifier:
keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:73:88:6f:49:de:e0:50:e2:5d:34:f1:b2:b3:11:ff:86:d0:
13:27:d2:ea:d3:4e:7a:9f:c4:1b:03:9b:30:e4:22:9f:b1:68:
d5:77:d9:7c:0e:2f:cc:56:0f:21:e1:b7:df:b7:20:c7:d7:38:
ce:f4:2a:19:66:b0:39:1a:43:37:67:4e:0d:25:f4:89:77:56:
1f:47:2c:6c:17:9d:91:1e:75:08:14:ab:71:73:1a:44:a8:dd:
4a:e2:9a:69:2c:a2:c9:d4:f2:45:45:02:7d:57:b2:14:c0:d1:
46:12:0f:b0:18:19:40:f9:88:ca:ef:b8:b0:f0:80:0c:78:81:
e7:0a:9c:8d:80:f8:15:4f:94:13:07:43:63:bf:18:1c:81:d8:
79:bb:7b:13:62:54:09:66:49:88:14:86:ab:b6:b6:54:7c:74:
e4:01:98:a1:95:1e:13:e9:77:b0:84:2b:4a:f1:75:fd:7f:b1:
cc:81:63:f3:e5:04:89:ce:6d:84:8b:d0:93:94:cf:19:f8:4a:
70:73:75:9e:a6:94:99:1d:e6:b0:3c:ee:1c:23:66:fb:5d:73:
96:79:21:c2:0b:25:a2:ae:d1:8b:9d:4c:f2:32:6d:a4:17:92:
6b:3c:ec:49:ee:4a:6b:bd:ec:8b:63:c2:26:95:b8:9a:6c:bd:
de:b3:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:29:44 2025 by rpki-client