Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File: mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier: qttnpw5yH8kFPr8efb1ji3KCz9szilQCpBwfYxOOEU0=
Subject key identifier: 70:41:2B:28:C6:7E:45:8A:40:AD:F6:A3:65:DA:C3:5D:56:97:58:0D
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer: /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial: 019874874DA31499B2B31AA2E35E367A1498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number: 0D99
Signing time: Mon 04 Aug 2025 10:01:20 +0000
Manifest this update: Mon 04 Aug 2025 10:01:20 +0000
Manifest next update: Tue 05 Aug 2025 10:01:20 +0000
Files and hashes: 1: iCdHueFJzoeCEXGqlVVm5ScVPLc.roa (hash: WO+D1FK6ZZiW8oMD1xh3ZGMyihQtIz38YWI4KrXD8lM=)
2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: YbGLZsxIfi1kBTnflIsqzjdGRjPxyYZXUVC0SgSy7+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:4d:a3:14:99:b2:b3:1a:a2:e3:5e:36:7a:14:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
Validity
Not Before: Aug 4 10:01:20 2025 GMT
Not After : Aug 5 10:01:20 2025 GMT
Subject: CN=70412b28c67e458a40adf6a365dac35d5697580d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:cc:dd:25:6d:9f:af:32:f2:21:70:5c:2d:
f2:b7:54:e1:6e:33:8f:cf:20:e8:46:11:ed:b9:72:
b9:69:45:b5:2b:2a:2e:be:09:22:3b:8c:7f:37:d4:
de:10:a7:fd:ea:14:e9:32:dc:9d:2b:48:5f:1a:12:
3e:97:a1:37:b3:65:ca:ef:76:e2:96:0b:84:2d:ce:
64:f4:d3:cb:5b:b2:da:61:51:f0:da:98:8a:c9:1f:
73:ba:5c:76:4a:44:3f:fd:1e:7e:f6:09:a0:ae:41:
09:86:08:13:33:30:cb:a0:91:17:91:97:92:fa:98:
54:3f:0b:30:a2:d4:28:e2:91:02:fe:36:2b:f9:6f:
ad:89:b7:f0:86:32:6b:32:0d:0f:a1:a3:02:78:08:
e4:7d:84:8e:d6:19:a6:05:99:04:fe:36:b8:eb:7d:
26:b2:9f:52:0b:57:e2:00:59:a8:72:f1:62:df:a9:
dc:83:f0:49:d8:c7:99:e2:5e:9d:38:33:9d:f9:2a:
d2:00:b4:b1:8e:52:e6:4a:de:bf:ec:74:4e:5b:2e:
0c:1b:13:27:dc:d6:d7:ad:0f:95:3e:c2:80:b1:c5:
5a:4a:9e:db:ae:32:0d:d5:0d:4d:3a:f0:e9:7a:c0:
e5:96:21:81:09:b8:43:e5:c2:d6:e4:e9:a9:6f:8a:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:41:2B:28:C6:7E:45:8A:40:AD:F6:A3:65:DA:C3:5D:56:97:58:0D
X509v3 Authority Key Identifier:
keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:8c:73:b9:b5:aa:fe:5b:3a:76:3a:9c:66:12:3c:a0:4a:
5c:89:ec:4a:d7:43:c9:89:22:9f:ce:5d:81:55:24:8b:81:48:
d7:6a:f7:8e:0e:7c:7d:32:4f:70:83:fb:6d:7e:d3:90:ff:73:
00:a6:47:6e:91:90:da:ae:af:4f:a6:19:c8:a0:74:df:2b:ca:
45:55:f2:1b:0d:53:c5:59:86:f7:8a:d9:ae:6c:cf:da:5a:0a:
58:55:bf:03:2d:b4:88:5e:a6:68:2f:e5:60:c1:47:33:b7:82:
d8:c9:8a:6e:83:5a:ef:ac:f0:73:db:0d:64:0a:0f:40:7d:00:
3b:53:89:a1:6f:b9:c1:cf:fa:7c:ed:37:fb:a5:00:ac:5a:ee:
e0:4c:0b:20:bb:54:78:24:44:e2:17:d4:a4:ad:11:b0:15:73:
ab:c1:d8:45:dc:b4:2a:fd:08:e7:5f:9f:2a:8c:4a:60:f3:69:
54:52:5d:f0:5a:c0:12:aa:63:9a:92:d7:f6:8d:54:12:b1:77:
4b:25:bc:99:ad:f9:49:50:9c:01:06:b5:97:99:53:f0:f5:fb:
2f:20:26:5f:10:62:61:5b:93:0a:f7:74:4f:38:31:ee:19:fe:
7a:2e:20:a0:e0:eb:15:59:d9:4c:22:a4:bc:9b:6e:84:1b:c9:
e7:24:9f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:28 2025 by rpki-client