Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: g0YX31eGgVOOLu4xeNdOGWKWsgpAuUhB8xGxnY+PwDc=
Subject key identifier: 4A:0D:5C:E7:83:EE:57:06:7B:12:60:0F:72:D8:32:09:39:0B:73:54
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019771BFB029C0F4E498F88291DA59B3751D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 15B9
Signing time: Sun 15 Jun 2025 04:01:17 +0000
Manifest this update: Sun 15 Jun 2025 04:01:17 +0000
Manifest next update: Mon 16 Jun 2025 04:01:17 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: a4rDipkMfCKVMYGHHgpes+sOazqx2t/b6eI75neXHQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:b0:29:c0:f4:e4:98:f8:82:91:da:59:b3:75:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jun 15 04:01:17 2025 GMT
Not After : Jun 16 04:01:17 2025 GMT
Subject: CN=4a0d5ce783ee57067b12600f72d83209390b7354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:24:3f:b3:3c:2d:e5:cc:6b:b0:e3:3b:64:
c0:ce:e6:15:66:7c:2f:51:63:9e:ef:fb:5c:e1:97:
fd:2c:bc:71:e9:dd:29:22:34:63:96:50:35:dd:a5:
d7:2f:74:fe:78:85:58:2c:20:95:04:76:e9:a4:d7:
28:25:71:13:0d:dc:8c:67:89:7e:30:04:4b:c7:95:
0d:6a:b7:24:51:13:8f:c1:1e:24:e2:23:47:2b:b9:
af:44:08:a2:5b:a7:31:7d:6d:e1:ab:4a:f7:57:77:
1a:b2:60:3e:df:19:0f:ba:c4:ae:3f:92:c7:46:1c:
1e:e9:05:8f:95:b8:ee:ba:1b:7b:6b:16:5d:cb:d0:
0e:7d:48:ab:29:19:f9:79:a5:01:6f:33:0f:7c:2b:
17:80:de:08:2f:9a:c6:5d:07:5a:1d:ba:96:6c:ae:
de:1b:f8:e8:88:5d:ee:88:3a:cf:ff:b5:6a:ae:0e:
ad:af:f1:aa:60:08:1d:87:ea:63:a1:d5:01:77:b0:
42:77:0f:78:88:1f:b6:92:2f:b6:35:f9:ba:1f:f6:
12:45:5d:e6:f2:60:55:21:e6:ef:4c:cf:f3:7f:56:
a7:f8:71:b3:a3:d7:c9:a6:0b:28:79:1d:91:16:5e:
07:dc:0c:32:cd:fe:9e:1a:5f:12:56:b4:b2:fe:2b:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0D:5C:E7:83:EE:57:06:7B:12:60:0F:72:D8:32:09:39:0B:73:54
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:81:38:c1:59:29:06:b7:24:2b:0d:12:ed:2f:40:20:54:
75:47:15:f8:9c:05:d0:2c:9b:ee:3a:7f:6f:38:40:53:94:20:
b5:a6:61:ab:e6:9a:b6:30:7f:39:90:7a:b2:d3:6b:8a:53:4b:
9e:a7:33:17:b6:09:dc:89:2e:ec:23:b0:2b:3d:6c:6c:f4:27:
a1:2a:ac:1c:68:05:2b:bd:22:dd:54:ff:ac:7a:36:69:f7:6c:
72:8e:27:c3:9c:c0:c1:42:87:31:c9:50:1a:cf:4a:3b:39:0c:
aa:44:7f:36:d9:01:a0:2e:ab:c7:36:7f:2b:6a:fc:70:74:12:
a9:70:b0:4f:44:20:ea:6b:a5:3c:62:a7:c2:77:26:da:ff:0f:
47:50:35:87:b3:d6:ee:9e:7e:49:3d:43:56:d8:bf:55:86:f8:
c3:29:3a:d1:35:be:1b:4d:b8:7a:7f:a0:c5:76:40:53:cc:7a:
6c:21:a6:7c:aa:08:d1:0e:40:b5:19:3b:68:f2:c6:18:77:3e:
9e:25:14:6f:b9:2c:b8:11:77:e5:00:2f:c4:19:47:44:26:40:
71:16:0d:e2:51:e5:bd:e3:d2:fa:8a:c0:5c:0a:a4:b1:ed:30:
33:01:ab:d1:98:68:c3:fd:4b:65:f6:26:ae:53:c4:bb:d4:f3:
ee:d7:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:46 2025 by rpki-client