Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
File: mLERYbntS7CKACbVz9H-yWh8GcM.mft (raw, json)
Hash identifier: 1dFigrWEObqNnQxI0V5TGLYnql+HmSf2A1UB0HbCIX4=
Subject key identifier: 39:2C:85:C5:B8:F0:F6:A5:F3:90:D0:31:6B:01:C4:2F:E3:F8:67:38
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Certificate issuer: /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial: 019880F90D2EF4C37F0F93177824F230E346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
Manifest number: 0807
Signing time: Wed 06 Aug 2025 20:01:02 +0000
Manifest this update: Wed 06 Aug 2025 20:01:02 +0000
Manifest next update: Thu 07 Aug 2025 20:01:02 +0000
Files and hashes: 1: Cm8RCYhViL8QXogPawjCQz1KEOE.roa (hash: 0Bf8kPU+ifdON2kDga7X6CtCb4LJyzlqkerUdEy/siA=)
2: mLERYbntS7CKACbVz9H-yWh8GcM.crl (hash: Ac3yKeb34Xh5TnvPUotGfxaUafLs5VubNxFLYbYab/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:0d:2e:f4:c3:7f:0f:93:17:78:24:f2:30:e3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Validity
Not Before: Aug 6 20:01:02 2025 GMT
Not After : Aug 7 20:01:02 2025 GMT
Subject: CN=392c85c5b8f0f6a5f390d0316b01c42fe3f86738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:b2:59:90:02:8f:b1:af:c5:5f:47:c1:5d:
bf:7e:cc:3a:08:a7:ab:e7:14:3c:18:b5:ac:1e:39:
16:ea:dc:d9:fe:9b:b3:3c:00:0b:26:ce:48:ed:13:
dc:05:c8:ce:fb:2c:16:93:29:a7:14:05:14:ee:3c:
e0:7f:33:22:d7:97:1a:47:c4:f1:e1:6d:33:0e:30:
5e:33:c4:0a:fe:07:0f:e3:69:c4:7d:79:23:fe:23:
25:58:a3:fc:fd:ac:60:3d:3b:37:6e:5c:e2:b1:76:
a2:bf:be:4b:4b:38:8c:24:7b:af:ae:68:62:8d:26:
7c:23:33:1f:b4:c1:11:3a:e9:a1:73:be:db:ae:39:
99:cb:82:c6:f1:98:56:26:9e:39:42:97:43:d9:bf:
92:23:ef:45:45:35:9c:65:2b:3c:6d:d0:90:7d:5a:
c7:a1:55:8f:ff:75:3b:f7:50:28:ba:2d:57:4e:27:
ee:ae:28:e6:dd:82:58:be:2a:72:a8:83:09:9c:c1:
b6:ae:07:a2:ae:d1:55:6a:9c:d0:c0:e1:1c:07:20:
37:2f:08:9d:3a:c0:d6:34:24:62:57:6e:40:a0:c3:
39:bc:ee:ee:76:ed:1e:77:a0:d0:e3:24:66:f6:d5:
1d:de:1b:e0:df:1a:d1:2d:91:ab:14:a9:19:79:18:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:85:C5:B8:F0:F6:A5:F3:90:D0:31:6B:01:C4:2F:E3:F8:67:38
X509v3 Authority Key Identifier:
keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:7d:50:c5:6b:80:17:72:e4:f9:32:93:e8:e1:ef:68:cc:
09:10:41:6c:b5:1f:34:e1:12:4a:8b:cd:c8:3f:3e:74:f3:38:
35:d2:cb:8a:2d:0b:29:fc:f0:a0:6d:7f:72:60:35:19:c5:7a:
4d:e1:5f:95:f1:98:a1:92:90:ee:e3:6f:01:9e:21:f3:dc:2e:
5a:49:33:ef:48:2b:23:3b:7d:06:b6:36:68:1d:8e:07:27:9d:
d7:19:33:a3:5c:79:b0:86:04:5c:96:e6:5c:be:cb:fa:6e:90:
56:c1:c6:b0:3c:57:da:08:56:69:84:2f:0f:d6:b0:5a:ff:b8:
96:e8:e7:cc:04:b2:ea:7f:04:5d:89:17:66:07:bd:d8:9f:d4:
97:1e:1e:f2:a6:81:23:68:36:72:8a:c9:04:21:eb:15:99:7c:
0b:d7:b5:c4:06:a3:13:fd:56:a4:5f:86:83:e2:d1:ba:db:5b:
3d:70:3e:c2:4a:e5:d8:65:58:26:34:d4:04:62:9d:8c:81:09:
d7:dd:5f:90:19:89:f4:aa:e4:e6:e8:18:65:c2:79:16:29:89:
b2:1d:c2:67:62:e3:b2:4b:65:13:e1:c3:15:bb:d3:c6:92:2e:
45:60:4a:8f:f9:16:2d:b0:a9:30:08:5d:0a:c4:09:2e:db:76:
33:d5:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:10:20 2025 by rpki-client