Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier: 57LVRBzOYRLD2+SWrwz72Nq9COb1yJgSvWaj0NDzNAg=
Subject key identifier: CF:0A:6A:19:60:EF:F2:B9:A7:CC:DB:29:68:3E:D0:6E:B3:EC:13:E3
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 01987418FCA4AD46F3576E1C172327DAA14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 08:00:51 +0000
Manifest this update: Mon 04 Aug 2025 08:00:51 +0000
Manifest next update: Tue 05 Aug 2025 08:00:51 +0000
Files and hashes: 1: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (hash: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=)
2: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (hash: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=)
3: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: am+cJYTuXRMcEjDCf3qeOQkU7i8HUbFrzx4fl/+oBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:fc:a4:ad:46:f3:57:6e:1c:17:23:27:da:a1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: Aug 4 08:00:51 2025 GMT
Not After : Aug 5 08:00:51 2025 GMT
Subject: CN=cf0a6a1960eff2b9a7ccdb29683ed06eb3ec13e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:3f:74:d0:10:60:7e:ad:0f:08:e3:cf:78:
ee:17:75:1e:83:11:c2:c3:85:14:3c:6c:17:86:45:
b0:1b:dc:65:27:0c:28:46:e8:7d:b1:39:84:05:e9:
0c:20:05:68:4d:50:c0:57:84:36:15:25:e2:80:d0:
be:17:10:7f:6f:c1:9e:8b:7f:8e:0f:bd:1f:62:5b:
25:8c:ee:a0:9a:26:1b:7f:47:a1:47:69:af:e9:58:
81:2b:93:fe:3f:4a:2f:2d:bc:82:39:cc:e3:01:a5:
0f:b6:f9:e4:ae:03:1d:ea:5b:60:2d:3b:fb:5e:93:
15:44:0d:8e:52:b2:31:35:c5:b1:2f:e5:bd:70:5d:
b0:3f:b2:1a:a9:78:7e:3d:80:6c:8a:d2:06:3e:4c:
bd:9a:da:1d:ac:25:5b:7d:43:89:cf:c1:9d:80:95:
78:9f:94:63:d7:82:4d:64:fe:e6:16:a5:68:20:e7:
27:cf:ac:46:12:4d:25:10:a5:ca:67:30:bc:55:c4:
c1:5f:27:ea:eb:5c:21:84:a1:9d:2a:c0:08:c2:a0:
e0:01:1d:fa:3e:b4:31:a0:cc:67:ac:e6:b0:3e:6f:
83:39:b6:77:d5:4b:b7:47:5d:6f:f9:25:f8:43:6c:
32:04:11:26:6d:e2:08:dc:3b:78:37:ff:f9:d1:ea:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0A:6A:19:60:EF:F2:B9:A7:CC:DB:29:68:3E:D0:6E:B3:EC:13:E3
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ac:57:a8:26:a7:cf:fd:8b:bb:b8:81:d7:49:89:46:ef:54:
47:33:be:c2:20:57:cd:73:d2:db:68:c4:15:e3:08:5c:b4:86:
76:d5:a5:c5:35:cc:65:0d:f3:85:20:4f:a5:eb:8a:01:21:92:
e2:ec:49:77:4e:0c:ed:64:fd:3c:86:64:6f:34:74:0d:1a:5f:
12:9b:e2:1a:d0:76:28:12:f2:16:4e:ce:57:8f:ee:e2:a5:78:
9c:59:e5:49:49:b2:cb:e2:88:91:67:3d:4a:da:1d:6a:3b:83:
a4:9c:42:be:0c:22:f0:ae:a5:de:6e:6d:28:02:e0:9a:26:64:
a5:38:bb:b4:32:8c:31:f0:60:75:d2:95:9e:1f:6e:37:98:b3:
61:40:7c:fd:a8:e5:c4:87:ea:df:d3:2e:32:5f:42:45:ec:c8:
52:ef:76:5c:46:43:f1:08:12:78:e1:de:a4:52:c7:b0:2f:03:
10:42:1b:c7:6f:b4:cd:2a:1c:04:dd:c5:a6:67:40:fd:64:ed:
3a:a8:67:51:a2:c3:ad:4f:ba:30:14:b3:92:be:db:a5:cf:b6:
b0:05:d8:fb:c8:bd:0b:95:ca:c0:8c:67:e0:20:71:7d:e2:84:
9d:92:f7:51:4b:70:39:74:25:ae:0b:82:cd:77:10:ed:6f:56:
ec:60:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:09 2025 by rpki-client