Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: pjQ5Fb+IXNkR49unXJZ824wwWsvYaJXPf7TNnVnBv3g=
Subject key identifier: B1:5A:06:02:A9:E6:41:89:5A:82:F5:D1:8B:F7:58:A8:D8:6C:6B:2D
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 0198808B6FE523A786EBE4E595EB50613235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0D32
Signing time: Wed 06 Aug 2025 18:01:18 +0000
Manifest this update: Wed 06 Aug 2025 18:01:18 +0000
Manifest next update: Thu 07 Aug 2025 18:01:18 +0000
Files and hashes: 1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: JTeqt20tGA0w5Irkge1tF0x2Dl193uIWI63/vi183d8=)
2: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (hash: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:6f:e5:23:a7:86:eb:e4:e5:95:eb:50:61:32:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Aug 6 18:01:18 2025 GMT
Not After : Aug 7 18:01:18 2025 GMT
Subject: CN=b15a0602a9e641895a82f5d18bf758a8d86c6b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:5f:a8:0e:4f:8b:5d:e0:ad:1f:81:08:47:
88:fe:cd:c8:71:99:be:c5:22:82:e2:f4:d2:dd:56:
b9:dc:62:43:a6:12:2a:e8:c6:9c:7e:e3:a7:fc:26:
9b:f4:fb:fc:ba:01:f0:2d:57:29:3a:41:4f:f3:36:
74:51:ea:89:d7:31:30:7a:2c:26:82:dd:01:9c:fd:
77:1b:78:68:b5:fe:32:bc:c6:5c:7c:f4:75:e8:42:
94:24:68:fe:e7:dc:02:6e:e2:78:ee:4d:95:8a:0c:
df:51:16:d7:b8:a7:29:50:9e:e3:64:97:ce:f6:a2:
ab:ac:da:f0:16:d4:0e:8a:9c:aa:ff:2c:e7:c8:9a:
d5:32:c2:e5:c2:dc:ac:b5:76:b6:6c:c2:54:b2:f1:
fd:da:70:71:2d:17:e2:6a:47:69:5d:05:49:98:b1:
49:97:3a:57:2c:3f:6f:f5:48:cf:0a:4c:ee:b8:f4:
2e:d2:bc:9c:ba:8a:65:11:84:cb:76:e0:2d:3e:ec:
a5:97:57:3f:dc:70:3a:28:2e:31:e8:af:e5:31:56:
7a:be:3d:13:0f:d6:1c:4b:8a:a8:81:74:00:da:36:
81:1e:dc:e6:9b:fb:c2:7b:57:0f:a5:07:a8:fa:9c:
47:67:d3:ff:09:86:1c:05:cb:e9:08:ae:86:1d:cd:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5A:06:02:A9:E6:41:89:5A:82:F5:D1:8B:F7:58:A8:D8:6C:6B:2D
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:97:a7:a3:02:5e:92:45:f9:b6:26:50:2b:b4:3e:9f:85:ac:
72:f7:cc:d8:a1:24:0c:88:ab:64:ce:0e:a4:6f:a6:b2:66:00:
68:67:3d:09:15:19:8b:7d:46:c7:bb:1d:17:4a:4a:11:c4:0f:
b6:4c:2b:cb:46:e4:be:f3:1a:5d:b3:50:d4:f7:fb:c1:86:2d:
9b:05:48:4e:b4:55:01:a8:f7:ba:20:03:a7:b7:70:5f:e7:32:
82:16:b7:a1:e1:1b:c6:a6:32:3d:55:cc:e9:d3:44:4e:a9:a4:
cd:31:72:b8:04:fb:93:ef:56:3b:2a:9c:44:3e:ce:b0:14:25:
05:c4:56:cd:ff:2d:77:3c:d7:77:29:85:21:50:cf:09:c6:b6:
3b:c1:ef:1a:c4:ba:da:83:41:6b:0d:ec:d4:33:41:ea:0b:4f:
ea:97:55:6d:cc:fd:1d:23:19:66:87:e4:e1:0f:a5:7b:62:1b:
eb:4f:d7:f2:50:74:eb:77:7f:b7:1a:fa:50:e0:fe:0c:0d:a4:
96:01:62:14:fa:70:9e:75:18:1d:1f:51:00:3d:70:db:92:24:
09:c3:d3:3e:0b:cf:d2:a0:d8:0a:32:5a:6f:b8:57:87:b4:7b:
0e:1a:d9:84:86:69:f3:d0:87:21:7c:ab:93:92:d1:ef:82:bb:
12:d1:55:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:44:06 2025 by rpki-client