Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: PNOBBnY5Xg3vuDgM57wlOXrd0qQGyl0ObsJmdlaBn5I=
Subject key identifier: 89:AB:86:76:87:21:09:D1:02:94:3A:ED:8E:FB:E3:64:85:D9:71:89
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 01988B10033CF42B86AF9EA0B1117D7BE502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 19:02:18 +0000
Manifest this update: Fri 08 Aug 2025 19:02:18 +0000
Manifest next update: Sat 09 Aug 2025 19:02:18 +0000
Files and hashes: 1: I46JWrJ0wkgqhhjcXFEe1Gwyho8.roa (hash: DdJIf3u90dazdq9CZo2Xm0G5puQXvhN9Fr/LhJUcUXI=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: uQG7XRXaRSDV6An1uByYRvwTs1zDuTvdYeQIocf/+Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:03:3c:f4:2b:86:af:9e:a0:b1:11:7d:7b:e5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Aug 8 19:02:18 2025 GMT
Not After : Aug 9 19:02:18 2025 GMT
Subject: CN=89ab8676872109d102943aed8efbe36485d97189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:06:45:ac:d8:e4:fe:23:ec:e1:ae:4a:e7:
0b:f0:e3:f6:6e:51:d4:1d:cf:46:46:82:77:85:fb:
68:fc:5f:7b:50:a4:87:00:30:77:67:cd:1a:88:9c:
78:85:c1:c4:f0:e8:95:eb:34:60:7e:c4:42:ec:c5:
88:7e:7d:74:af:7b:c7:fe:79:39:5c:56:95:bb:93:
34:5b:5d:85:c9:7f:44:f2:08:e8:98:fc:dd:1d:a3:
ec:c5:a0:db:db:2d:ce:d4:44:41:fb:7d:fa:0e:06:
ac:a3:b7:1a:85:05:7a:5d:b4:47:83:69:a0:8f:5f:
10:ee:03:b4:4c:c8:c4:35:02:df:f4:85:4e:74:0f:
01:d5:1c:a8:3b:48:2a:1d:c7:c4:59:d7:99:b1:e5:
a8:dc:6d:f6:f6:c2:0d:09:cb:25:26:87:9a:f7:15:
fd:13:05:5f:6c:69:40:e5:a9:07:37:6e:54:09:ba:
38:5c:0a:e1:02:98:c6:75:46:1a:90:a9:6c:d1:c6:
f0:41:4c:95:1c:67:43:d8:db:98:ab:d0:88:82:4b:
a0:d7:2e:c0:b9:fd:1a:86:c1:df:a0:3c:f5:46:00:
fb:ce:62:87:c8:b8:d9:11:43:5d:7f:de:b1:d4:26:
06:08:ee:62:f3:04:3a:5c:e2:10:d6:6e:6f:5b:01:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:86:76:87:21:09:D1:02:94:3A:ED:8E:FB:E3:64:85:D9:71:89
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c6:a0:ce:77:29:4a:71:f4:49:06:02:a8:77:56:9b:9a:dd:
bb:5e:aa:7e:f7:5f:d1:3c:ab:e8:19:63:51:15:78:e9:14:8d:
d0:a5:93:4d:22:7b:d9:f8:a7:21:ff:ec:03:b2:50:50:4a:bf:
08:bd:8a:fc:0d:bb:4f:af:ea:6b:43:bb:5e:23:77:34:e6:3f:
62:07:8f:59:79:90:d2:91:ec:d6:ef:8b:d6:9e:ec:cb:c2:68:
89:6c:1d:6f:dd:40:f3:72:a6:89:af:21:af:05:20:38:4f:54:
e0:2f:d3:87:c5:3c:76:76:d3:b8:69:9b:07:15:a8:5a:71:61:
de:60:f2:f1:d9:c0:53:6d:22:a7:96:77:63:9f:20:69:85:6e:
72:50:5b:2f:d7:0c:0b:93:49:7a:0f:67:55:ef:13:98:e6:3e:
fc:e0:90:8d:32:37:f8:18:68:2a:b6:96:56:b4:95:4d:1a:1e:
d4:13:6a:7a:8d:a3:40:df:94:ac:02:75:a0:79:16:f9:94:13:
fc:ee:0d:d4:ed:90:31:46:24:fb:ba:40:60:62:42:a3:f9:b7:
57:07:7e:34:0f:53:28:99:10:58:9e:65:c6:3d:c2:be:b7:0d:
2e:43:3b:11:28:74:a6:f5:10:af:89:03:8c:c5:fb:d6:7b:cb:
fe:ad:d7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:22 2025 by rpki-client