
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
File: mTFQMIBh3NrF2EZc-ITGejuxkVk.mft (raw, json)
Hash identifier: Bg1inDRyNnuLfxnrnaXb9UwRnhezAjuL84KyYqJjeSs=
Subject key identifier: A9:91:C5:90:6C:80:D0:6E:28:00:A3:5D:BC:BC:72:08:CF:04:85:B9
Authority key identifier: 99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
Certificate issuer: /CN=993150308061dcdac5d8465cf884c67a3bb19159
Certificate serial: 01988A6A6D49EC74224406C874A6129AB977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
Manifest number: 0717
Signing time: Fri 08 Aug 2025 16:01:27 +0000
Manifest this update: Fri 08 Aug 2025 16:01:27 +0000
Manifest next update: Sat 09 Aug 2025 16:01:27 +0000
Files and hashes: 1: mTFQMIBh3NrF2EZc-ITGejuxkVk.crl (hash: StifqApqsBQ2RpOJJm/Amz73CFDJgq2GsKm5BsaSq6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:6d:49:ec:74:22:44:06:c8:74:a6:12:9a:b9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993150308061dcdac5d8465cf884c67a3bb19159
Validity
Not Before: Aug 8 16:01:27 2025 GMT
Not After : Aug 9 16:01:27 2025 GMT
Subject: CN=a991c5906c80d06e2800a35dbcbc7208cf0485b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:cd:7e:be:83:3f:02:15:8d:b7:08:e2:25:
e5:ef:2c:1c:5a:dd:02:e0:0a:41:da:8b:b3:c6:01:
e7:db:eb:24:3a:53:15:37:2e:3f:f4:c6:1a:ec:a2:
c5:b4:1e:d4:78:60:20:51:b8:dc:30:15:3a:1c:86:
c9:19:3b:d6:09:b6:4f:12:09:41:2f:15:3a:95:11:
64:86:e2:5a:f3:7c:ab:8a:b4:6b:0c:1f:13:f8:38:
a9:3f:13:d2:a3:a2:c0:9b:1c:d4:71:30:05:0d:1e:
d2:9b:31:a1:96:0f:72:f7:a7:85:69:65:13:23:38:
f9:41:bf:36:ed:56:83:51:36:19:86:44:41:f6:37:
26:a3:9e:b1:a5:81:84:0c:52:58:27:51:f9:60:5c:
70:4e:66:a3:8b:1b:69:4c:01:81:df:ef:86:57:4a:
ce:36:94:8f:c4:30:55:f9:33:3c:6a:9b:8f:be:47:
3d:b2:d3:4f:54:9f:90:3f:6c:4e:ce:b7:39:63:a8:
76:ce:ee:57:0f:a2:03:1a:c4:1a:6c:d9:c3:8f:7a:
89:52:92:ca:8c:da:01:83:55:3b:fc:d8:ad:ab:c7:
48:89:df:b6:ec:d6:d0:6a:5b:64:be:0b:9d:ea:bb:
79:41:b6:a6:fc:53:54:86:02:7b:e2:23:ef:06:66:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:91:C5:90:6C:80:D0:6E:28:00:A3:5D:BC:BC:72:08:CF:04:85:B9
X509v3 Authority Key Identifier:
keyid:99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4a:59:00:d8:4e:ec:2e:d8:a3:3d:7e:2b:ac:6d:13:e5:71:
b5:0b:09:a5:8a:db:a5:bd:6e:0d:c6:42:f6:95:60:44:d3:fe:
5f:c6:a1:6e:eb:22:76:e3:fe:73:b9:92:86:ad:81:0a:98:19:
2c:7e:05:f4:e9:2b:f9:c4:b3:e4:c6:4d:32:ad:26:84:19:e2:
3f:f3:61:ec:ab:07:28:2f:f7:4d:39:d4:fa:a8:08:6d:a2:82:
a9:a1:95:76:87:61:b7:7b:ed:be:82:61:0f:61:0c:4a:2f:1e:
23:84:9a:0c:9f:bd:d5:12:5f:e6:a1:96:67:ea:63:96:b9:67:
9a:df:61:ce:b2:64:5e:8e:09:de:d2:4c:ca:b8:3b:14:06:5b:
ce:68:4d:eb:30:14:3e:74:f8:27:eb:f6:c9:91:ab:b1:02:e5:
91:a8:36:b9:83:4b:47:9b:75:48:40:b3:d8:86:46:a2:f6:a2:
47:38:24:5f:bd:72:55:d4:87:b0:80:e3:03:10:fe:aa:d6:fc:
23:cf:be:2d:67:84:32:fa:65:7a:18:1b:59:8e:37:bc:e7:e5:
83:aa:ae:c2:2f:27:42:7d:0b:da:7c:87:73:3d:cf:58:89:d8:
8e:06:0e:6f:2c:63:ec:d0:5f:f6:82:da:cd:62:b9:20:3b:a9:
cd:b3:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:22 2025 by rpki-client