Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: GYNY+E/59cjMtneumv0LdXhgJhKeGZb6Ge+R9zuDj4s=
Subject key identifier: 69:E0:4F:8F:AC:CB:91:11:76:65:D8:D7:76:EC:52:C3:F2:57:6F:7D
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0198820BB458AA4DB4A7CA89FD785E5FFC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1646
Signing time: Thu 07 Aug 2025 01:01:01 +0000
Manifest this update: Thu 07 Aug 2025 01:01:01 +0000
Manifest next update: Fri 08 Aug 2025 01:01:01 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: u8NoSD7ix4ntQcDva5XJ09j1J1TjuqRffTX3sVi2i6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:b4:58:aa:4d:b4:a7:ca:89:fd:78:5e:5f:fc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Aug 7 01:01:01 2025 GMT
Not After : Aug 8 01:01:01 2025 GMT
Subject: CN=69e04f8faccb91117665d8d776ec52c3f2576f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3e:2b:df:14:31:3f:29:a1:30:15:01:02:5e:
5a:29:7a:b6:6c:2b:99:38:52:86:b8:76:91:36:39:
ea:42:3b:c0:43:b6:33:ee:df:a1:78:a4:6c:17:d8:
83:71:fc:3c:fc:09:5a:be:95:a4:2f:a2:d7:b6:b5:
5d:76:31:4b:20:a9:0e:92:52:0a:cc:9a:78:0c:0f:
8a:57:2b:f1:54:85:c7:9e:8b:c1:0a:8c:54:06:74:
42:fd:d2:49:1a:93:c0:ca:66:f3:07:69:3d:f2:ba:
a4:53:a2:74:f2:77:b1:55:eb:c7:b0:90:12:4c:92:
6e:00:e1:23:f0:31:24:4a:07:68:10:de:1b:0a:9e:
e3:43:eb:41:c1:dc:de:3a:73:9c:10:d7:85:e0:20:
3e:3d:2b:13:9e:0d:0f:02:2d:d5:49:08:47:7e:4f:
80:fd:23:a0:a3:f6:a0:bf:1c:24:1f:86:41:02:e6:
6f:3b:73:58:86:b3:30:1b:0c:65:9d:26:af:fe:a3:
d8:07:b3:4d:b0:a1:ed:c3:28:48:cf:d8:bb:3b:39:
c4:4d:a0:15:d6:40:e2:0f:f5:0b:68:6c:e6:34:42:
18:15:25:3f:07:39:bf:d3:c0:15:7d:50:0d:26:cf:
a1:fa:06:5c:c2:8a:bc:f9:91:91:b7:b5:ee:db:a8:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:4F:8F:AC:CB:91:11:76:65:D8:D7:76:EC:52:C3:F2:57:6F:7D
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:21:c4:2c:6c:b5:6d:d6:04:2e:38:63:96:06:f8:0d:6e:73:
73:43:0d:8b:71:7f:d1:b5:08:66:0d:66:b4:5c:03:9e:14:e3:
1f:14:a0:16:fb:5d:7e:08:2c:4d:d4:4d:ca:79:0b:60:dc:cd:
1e:4a:65:2d:2d:cf:a8:4d:0f:3f:5e:f5:07:e0:08:64:32:6e:
ff:d2:31:07:20:bf:f9:0e:c4:fb:d7:ba:ae:5c:dc:51:19:b9:
65:e8:f0:63:59:59:94:03:f0:25:e5:a4:04:93:72:69:ba:e1:
4d:ff:49:d6:9a:cf:49:54:6a:15:3e:19:75:f2:38:5d:12:a1:
a5:e0:d1:3d:66:f5:71:7b:b2:86:19:f0:68:3a:15:03:d5:25:
83:75:f6:18:5d:1c:ba:c0:bc:94:7a:69:4d:ca:f9:f0:18:dd:
16:8b:93:a8:f5:d7:f8:45:7a:ab:1d:56:16:19:5d:ed:c7:e2:
c6:ed:2e:a3:2a:d1:28:64:32:d8:86:e2:09:cf:4a:64:7c:5d:
cb:1b:63:e3:da:e2:ea:68:3d:ec:06:1e:6c:19:f3:8e:34:76:
ba:85:99:0b:5a:dd:f1:75:19:4c:f8:9b:f8:ed:68:32:77:8a:
5b:1d:3a:e4:21:b1:04:63:66:86:a3:02:a5:93:fe:c7:53:37:
fd:f6:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:40 2025 by rpki-client