Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: MvaoE1iTHP6kpfiWDTkCMYZbtHsO7Isx5MJMToinPq4=
Subject key identifier: 48:D8:C5:76:7C:EF:05:16:CE:D2:76:3D:8A:5A:A0:05:E9:1E:80:9B
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 01976C61B8E71C3BC428D200E52409B3686D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0CA3
Signing time: Sat 14 Jun 2025 03:00:33 +0000
Manifest this update: Sat 14 Jun 2025 03:00:33 +0000
Manifest next update: Sun 15 Jun 2025 03:00:33 +0000
Files and hashes: 1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: a3bioR1jVonC6XnGRFlTD3w/QIud92NA4vMKAAncjKs=)
2: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (hash: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:b8:e7:1c:3b:c4:28:d2:00:e5:24:09:b3:68:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Jun 14 03:00:33 2025 GMT
Not After : Jun 15 03:00:33 2025 GMT
Subject: CN=48d8c5767cef0516ced2763d8a5aa005e91e809b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:c8:65:8e:a7:33:97:09:ab:92:1f:43:f9:
ce:0d:4f:20:ee:ec:04:10:17:dc:36:31:38:c7:70:
03:32:ee:56:39:92:3a:17:02:58:50:97:3d:3c:be:
c5:0e:bf:40:a8:3d:8c:2a:c8:b7:59:9e:f7:f4:6c:
57:d9:14:62:0b:2d:25:55:0e:64:8a:1e:cf:d2:e4:
5f:a8:40:f4:18:2c:94:59:94:e3:40:5a:a3:0f:0d:
2b:27:1d:a4:8c:41:3b:2f:f4:6c:9d:14:ac:f7:78:
d8:82:d9:ba:4f:52:15:89:40:7c:82:0e:d0:52:d2:
3c:09:b3:af:aa:d5:f9:d0:7b:10:70:db:28:3c:6d:
19:8b:8c:27:93:61:b8:a0:e5:2a:ac:17:f2:b2:dc:
1f:41:d8:a6:ba:ff:87:e7:ec:0f:12:d2:79:ee:57:
26:76:58:d8:95:37:01:37:ad:92:53:54:ff:7b:cf:
65:c6:8f:3f:ff:0c:55:5a:90:41:85:3d:af:6f:e5:
63:b6:df:a8:2b:07:5c:bc:81:ff:a0:7d:9c:81:b2:
e3:f7:b4:de:c4:87:ce:28:05:81:ba:b5:e2:c9:cd:
1b:97:bf:bf:f9:83:d8:6b:41:6c:a0:dc:b3:62:04:
57:28:cd:bd:47:10:78:d3:37:91:b9:59:05:ac:bc:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D8:C5:76:7C:EF:05:16:CE:D2:76:3D:8A:5A:A0:05:E9:1E:80:9B
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:40:4d:38:a3:dc:02:a4:fe:17:47:0c:d7:5f:45:89:61:
6e:57:5b:13:d0:7a:05:ec:ec:a4:75:05:eb:72:e9:da:95:68:
21:3d:3d:cf:d9:7f:f9:24:b0:c7:ad:72:f3:e9:ec:b0:e6:4d:
3e:3e:aa:31:f9:82:f0:e9:8c:73:de:66:30:ec:1f:1d:cb:6a:
a1:e2:6c:94:76:4c:79:39:a0:da:41:81:4c:0e:14:6b:67:ab:
3f:9e:48:6c:6d:d3:0a:5f:c1:6a:a0:d0:3b:f5:90:12:c2:8c:
a5:e9:94:d7:44:07:d7:93:76:b3:f5:cd:44:d4:3d:e7:86:7a:
44:b5:11:ea:63:ce:b4:4c:e2:f4:ca:92:98:35:18:60:0b:39:
8c:ee:e2:ad:e1:b3:63:67:75:05:fc:19:49:6b:a0:62:71:b1:
aa:07:7a:29:b5:e6:4a:ec:3c:26:d1:7a:94:b0:d8:87:c8:f9:
e2:aa:3e:05:60:be:4a:e8:b6:ef:73:26:04:db:65:27:d5:75:
82:87:54:10:bd:d6:87:09:25:6c:5f:22:b4:51:53:69:93:ee:
03:7c:24:36:17:b2:f2:87:54:a8:ba:b0:a9:85:c0:b2:a8:0f:
2f:8b:39:3c:1e:1c:81:e1:6b:96:4d:d6:ee:9a:3b:4e:6a:1e:
b8:ac:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:57 2025 by rpki-client