Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
File: Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft (raw, json)
Hash identifier: c1BLbGYyvs9gAbeWs8tN/3b35H8OKu8JiMnwGcPtTDI=
Subject key identifier: 3B:24:C1:E8:E4:06:CC:2F:14:20:57:2A:D4:61:54:3F:8E:9C:1A:3D
Authority key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Certificate issuer: /CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Certificate serial: 0198816715A2BA149B81FC2B48B6A33713F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
Manifest number: 02FE
Signing time: Wed 06 Aug 2025 22:01:13 +0000
Manifest this update: Wed 06 Aug 2025 22:01:13 +0000
Manifest next update: Thu 07 Aug 2025 22:01:13 +0000
Files and hashes: 1: Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl (hash: 5F3gV+JvwtNz/m36g72PCM90usE33mvl3o0cnIxaXuc=)
2: ZyPIESuaSWPIuQmq_le4sKOKISE.roa (hash: ZskQdIcp36rlr+2ORbgrG1PrwisAu9ueRcvHTkIY4YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:15:a2:ba:14:9b:81:fc:2b:48:b6:a3:37:13:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Validity
Not Before: Aug 6 22:01:13 2025 GMT
Not After : Aug 7 22:01:13 2025 GMT
Subject: CN=3b24c1e8e406cc2f1420572ad461543f8e9c1a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:95:98:c0:46:a4:86:95:ae:dc:4b:39:bf:
38:ae:ef:bc:9d:03:aa:72:af:f8:2a:84:6d:1e:07:
d4:d0:5e:5d:85:74:c7:06:93:7e:29:4c:51:fb:27:
25:61:24:82:5e:74:38:06:28:ad:d1:5d:f3:7c:49:
f9:dd:e3:4f:02:ac:4b:5f:bf:e8:89:89:a6:ad:c5:
62:27:8a:55:e3:33:42:66:03:f4:fb:38:a9:40:ce:
a9:b8:a1:0f:33:49:2e:29:cb:f7:e7:64:b9:20:cc:
02:cb:06:0b:5e:1d:ee:ab:03:19:7c:64:15:2c:ac:
5b:fe:ff:a9:c0:65:62:f2:5b:29:4e:9e:37:a9:e6:
9c:8e:59:01:21:62:8e:0f:a5:9c:39:2a:ca:bd:c0:
86:e0:0d:61:88:21:b4:a7:9c:e1:28:0c:f2:1b:57:
cc:40:65:0f:ab:43:00:93:c6:65:d7:5b:66:58:48:
89:64:b3:f9:85:2c:2a:4f:17:63:51:01:b3:65:be:
5f:c0:15:62:ca:d7:b1:59:c3:17:ff:82:95:3c:3e:
3a:b3:42:61:2b:3b:3d:ad:99:64:9c:d9:6b:b5:64:
35:9d:18:f7:78:fc:02:c1:21:f1:12:9a:fa:35:aa:
ac:3d:ca:62:33:fd:8b:e2:97:0d:24:98:0e:ab:04:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:24:C1:E8:E4:06:CC:2F:14:20:57:2A:D4:61:54:3F:8E:9C:1A:3D
X509v3 Authority Key Identifier:
keyid:32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:40:bd:3c:23:f2:6e:d0:7e:16:b3:55:2f:88:57:6b:12:05:
9b:72:d0:13:60:13:51:cd:28:0e:c9:ef:f2:88:ed:11:f0:ed:
82:ae:75:bd:63:e9:21:58:c7:55:e4:04:8b:ef:dc:6c:f4:8b:
fd:04:48:4e:6a:6a:08:ab:7f:6a:b4:ae:c1:10:af:64:b6:b6:
d8:74:14:90:ed:1f:27:c2:4c:95:5c:7c:c4:69:84:82:df:d7:
f1:ac:7d:43:f2:fe:08:bc:a4:02:83:1f:87:88:a8:86:e6:33:
e4:ce:8b:bb:47:e8:dd:ec:1e:d3:a5:8a:17:a4:eb:93:11:56:
01:9d:a1:ac:15:87:63:70:ad:34:b2:3c:65:24:25:62:2d:f6:
eb:ec:da:82:76:1a:5c:3f:64:bb:47:27:96:23:25:2b:89:5c:
45:c0:90:01:a3:60:b2:6e:a3:de:fe:1e:46:92:4b:95:e7:a3:
8f:10:0f:28:ce:2e:5b:96:87:23:fd:6f:50:29:0b:5a:83:4f:
af:9b:7a:c8:e5:f9:fc:49:06:f8:f0:21:e7:b5:5b:c0:c5:bd:
4a:0b:93:23:28:47:15:f0:a9:e8:d7:6f:a2:47:94:7b:5f:45:
aa:b9:06:cd:ea:1b:1c:13:a5:ea:9a:8b:b8:1d:dc:c6:5f:41:
67:06:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:00:01 2025 by rpki-client