Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: cdx/FI2c9AbCxL5ZyYnIxCBV6StdAfaefSBTwV7sKIw=
Subject key identifier: 4C:82:D9:F0:62:1C:B2:23:32:68:9C:C1:B9:43:F7:B8:F0:FA:22:6C
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 0197481E16FEC6744F3B1CB52F9A0EDBCCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 02F1
Signing time: Sat 07 Jun 2025 02:00:20 +0000
Manifest this update: Sat 07 Jun 2025 02:00:20 +0000
Manifest next update: Sun 08 Jun 2025 02:00:20 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: rkdyUFOkh0H/YbmQ5xZjjHGiNun+KACdP6mFJwX1xBo=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:16:fe:c6:74:4f:3b:1c:b5:2f:9a:0e:db:cc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Jun 7 02:00:20 2025 GMT
Not After : Jun 8 02:00:20 2025 GMT
Subject: CN=4c82d9f0621cb22332689cc1b943f7b8f0fa226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:95:23:e5:d1:05:4f:71:ae:b4:70:f8:d2:5e:
57:c5:3e:25:a6:34:f4:0a:05:0f:cd:28:a4:4b:b7:
d2:d2:9b:31:bd:11:47:9b:f5:ba:79:bb:25:2b:9b:
26:b1:46:e5:a6:12:87:24:23:e7:d8:d8:bd:48:b1:
b3:1e:d9:6a:eb:1d:02:00:09:71:1a:9e:f9:4d:50:
e6:fc:6c:0a:0e:ac:8d:76:56:86:6c:fb:4d:a0:6f:
d3:66:cd:8b:7b:c4:7f:97:f0:b3:0f:22:9c:cd:1a:
fd:bc:1a:ba:d0:a0:9c:ae:3f:ee:68:af:78:c4:ab:
ca:a2:e0:ce:65:ac:9c:a7:63:70:7c:0e:2e:55:2c:
8c:a1:e8:42:0e:af:05:20:e3:69:63:84:1c:4e:50:
0a:1a:e8:3d:7f:89:60:a2:79:68:22:19:48:ce:3a:
64:44:58:18:29:7c:70:f0:24:d3:2c:f2:e6:93:0d:
0f:cd:93:74:65:11:c4:dc:a8:11:ad:12:fe:7a:d7:
0a:a8:c7:8c:7a:3c:35:fa:66:d4:3c:a5:22:10:e9:
a3:3b:92:de:07:c9:6c:54:87:1b:a5:c1:61:92:ce:
d7:72:be:b3:a4:2b:aa:c0:27:df:90:0b:a6:16:af:
ce:97:37:55:52:71:4b:ea:71:8f:08:85:79:5d:73:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:82:D9:F0:62:1C:B2:23:32:68:9C:C1:B9:43:F7:B8:F0:FA:22:6C
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:82:24:9d:6a:20:e1:7d:ac:ee:30:93:b7:5c:2e:a7:ea:dc:
87:c4:4e:68:63:5b:7a:1e:f5:f4:28:7f:b8:48:f0:2c:3d:20:
ce:d6:c1:43:f4:d4:3f:6f:20:06:7a:cf:90:1e:bc:47:43:15:
4f:06:65:9a:63:3c:bf:bf:eb:67:da:e0:73:d5:65:73:3b:b7:
1b:7a:ac:96:23:1e:1f:33:f7:4a:b1:7f:b9:31:b4:36:23:0c:
9c:6c:95:75:56:fc:3b:83:9d:27:b2:05:c0:31:0d:09:d2:82:
d3:1f:c0:04:d6:ed:5c:4a:44:02:91:ac:f4:7d:5f:e5:5a:e9:
71:9e:87:3f:f2:01:a6:dd:1e:68:36:78:8b:a5:10:47:e9:54:
db:ed:8c:99:e5:f5:c6:79:02:e2:4b:4a:98:b5:c3:7a:cb:e6:
aa:22:e3:a8:be:c0:3a:9f:26:31:76:47:85:87:15:3c:86:b4:
49:67:42:96:d8:37:9f:1a:fb:2a:fb:be:51:ef:b6:70:3c:14:
64:42:bf:da:48:d6:84:45:da:c7:fc:ff:11:3c:4d:63:b1:e6:
e8:89:95:1e:04:ff:5b:e9:b4:c2:d4:fc:8d:02:64:e0:db:95:
07:ad:d8:45:cf:99:23:64:6f:57:0f:00:ad:ea:56:1b:65:a9:
4f:34:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:58:05 2025 by rpki-client