Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: a9XQxdm65bTQWlcRzLNlbzhFyKqkSlTimxydRYSz8sc=
Subject key identifier: 7C:A0:15:2B:28:19:B4:93:10:85:FA:26:CD:5B:C7:2B:34:3A:EA:0E
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 0198A04CD33DCA791639F67A5C10B1B3A8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 1399
Signing time: Tue 12 Aug 2025 22:00:45 +0000
Manifest this update: Tue 12 Aug 2025 22:00:45 +0000
Manifest next update: Wed 13 Aug 2025 22:00:45 +0000
Files and hashes: 1: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (hash: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=)
2: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: Wq/qnk4vsu9nH7mBTwLyO+rNWYUvtcrqujfu9iGCgWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:d3:3d:ca:79:16:39:f6:7a:5c:10:b1:b3:a8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Aug 12 22:00:45 2025 GMT
Not After : Aug 13 22:00:45 2025 GMT
Subject: CN=7ca0152b2819b4931085fa26cd5bc72b343aea0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:0e:d4:79:6f:87:3c:4d:49:30:f4:a3:fb:
0e:12:13:b3:88:42:20:a6:0a:43:3b:c6:8a:da:fd:
c8:01:45:ba:1e:ac:61:47:96:8b:df:ce:d8:27:48:
30:8a:49:9d:23:d6:47:e9:94:62:2e:f6:36:d3:fe:
7e:d2:32:c5:aa:bc:fe:74:38:07:c1:73:a9:7a:a7:
f5:52:0e:06:cd:45:c6:ae:3c:49:d9:c7:af:d5:6d:
70:a0:84:9d:ff:07:4d:80:00:2b:51:65:7c:23:6a:
d0:1c:78:dd:cc:ac:f0:2b:85:f3:ef:23:2d:bb:91:
9f:09:87:58:69:b4:bc:3f:e7:8c:73:e7:f6:8c:5e:
3c:41:c0:f4:ef:39:1c:1c:a2:15:29:7e:1b:5b:c9:
e6:7c:56:1b:7b:9b:f2:7b:e3:88:82:76:03:17:14:
06:06:d8:75:36:a2:d1:65:5e:42:4e:c2:3e:a6:16:
71:d5:29:7b:38:bb:ff:8a:22:9a:a4:04:53:c5:60:
54:e6:43:39:ad:1b:d0:e6:5f:14:42:81:1e:39:d0:
c8:30:80:6b:34:8e:11:cf:4a:ba:11:fc:09:ef:b5:
e3:f5:12:e2:e7:d7:d5:78:21:fb:35:ee:e3:04:09:
23:4c:16:f0:24:fc:68:8a:0e:8b:5a:3e:8d:25:b5:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A0:15:2B:28:19:B4:93:10:85:FA:26:CD:5B:C7:2B:34:3A:EA:0E
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b5:61:7f:b7:61:15:26:67:f9:3d:1d:fd:17:29:55:63:e8:
32:77:8e:94:18:b6:b4:61:50:a4:28:ac:89:86:c1:38:20:4e:
b1:d5:c8:03:e0:42:e6:6f:ef:c7:ce:8f:af:79:58:96:79:9c:
18:ee:6e:e6:71:c2:55:dd:8f:c7:03:a8:ae:59:46:ec:bf:26:
2e:42:ef:1d:16:08:9d:14:b6:97:f2:dd:48:3d:b8:4d:62:77:
b4:f0:b8:43:1a:b2:46:33:85:6e:7d:05:c6:72:91:4f:11:ca:
05:48:d1:c3:84:17:03:8e:af:af:7d:96:b9:f8:3d:27:48:92:
15:22:fa:ee:91:21:c9:fb:be:b3:10:02:51:47:af:02:59:c9:
9f:b3:8f:5e:a3:df:a6:14:6e:13:0c:76:5e:ec:a5:4c:a3:45:
38:bb:ae:04:01:94:fd:46:68:27:55:b3:55:6b:a9:21:cd:ed:
ca:ca:34:b2:e3:04:20:9d:41:0b:84:bd:73:4a:8d:05:c3:d1:
7f:4d:92:01:b4:11:d2:69:2a:f6:de:9f:99:45:e6:db:34:96:
bf:fd:bc:c1:1e:4e:a4:25:0e:25:4d:a7:77:10:98:8b:be:5d:
9d:86:08:08:6e:23:f4:95:40:90:af:5d:53:b7:24:b2:6c:a2:
18:1a:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:30 2025 by rpki-client