Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: EoOGuxiNxvMf1tPO9O5awkvzfLzOSErz0JVgD5Iyhks=
Subject key identifier: C8:0D:48:F7:20:6F:51:55:C4:A3:0D:D6:0C:54:5B:6B:68:10:00:16
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 019873E3C4C4FEA3D2B7964D8F3FD406D120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:02:43 +0000
Manifest this update: Mon 04 Aug 2025 07:02:43 +0000
Manifest next update: Tue 05 Aug 2025 07:02:43 +0000
Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: eyomaejpVRNNV+kk4An2sJlSe2tzetVilQenCzIa+MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c4:c4:fe:a3:d2:b7:96:4d:8f:3f:d4:06:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Aug 4 07:02:43 2025 GMT
Not After : Aug 5 07:02:43 2025 GMT
Subject: CN=c80d48f7206f5155c4a30dd60c545b6b68100016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:8b:91:f8:00:5f:25:5a:b7:9b:f4:7d:d8:
2e:81:c7:67:af:f5:5c:cf:d5:3e:ce:2c:18:c3:12:
ac:67:de:5d:be:d3:5a:71:6f:1a:01:6f:cc:5a:8f:
07:12:dd:17:15:7a:48:6e:b5:b2:3e:77:d4:50:ce:
61:bf:76:4e:1c:8b:6d:3b:76:bf:8f:8f:12:e2:56:
c9:6a:c9:b3:81:11:a9:5c:9a:4e:dd:8b:7d:d9:a6:
38:0a:cc:a5:4b:a3:35:16:eb:a1:59:aa:ed:e0:13:
2a:a5:15:5e:6c:a2:f6:11:2d:21:c9:ea:4d:1b:37:
11:af:31:4a:27:ef:eb:27:64:c4:67:b7:34:78:52:
f1:70:af:98:32:9d:f4:6f:c2:e8:26:8c:5e:10:bd:
c2:d4:8f:c8:a3:f5:23:f7:a0:d6:f2:27:63:ec:3f:
73:b1:73:ff:fa:87:f2:75:c4:81:8e:0a:db:73:23:
0c:9f:85:5d:ef:c7:3a:7c:2e:3e:73:de:5e:24:5c:
66:32:71:8e:9a:e7:87:58:8d:33:49:48:3e:6c:b6:
c2:4f:42:3b:b4:4e:ee:dc:6b:c2:e1:69:de:77:5c:
70:11:47:c6:b1:01:73:43:51:d1:f6:38:1d:f1:f6:
5a:4c:10:cd:e5:e8:6b:30:f9:d0:60:e6:56:37:cc:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:48:F7:20:6F:51:55:C4:A3:0D:D6:0C:54:5B:6B:68:10:00:16
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:50:93:06:ba:59:1c:7c:8c:ed:7e:d9:49:86:10:4b:83:fb:
3c:7d:63:f8:ce:a8:8a:90:2e:b9:2a:6c:fd:60:08:23:56:24:
6e:1f:8b:ea:21:ac:15:0d:80:63:cd:27:c8:93:68:fa:4a:85:
58:6d:61:8c:01:64:31:03:9c:d0:9b:69:58:46:6a:e9:f2:f9:
f4:04:2e:82:a5:6f:2d:af:43:2a:27:5a:2b:7a:6a:13:51:54:
92:11:f3:e5:29:ef:50:3d:44:f8:e1:90:d0:f7:6b:83:a1:0d:
ee:45:aa:44:a3:7e:69:58:26:02:a5:04:c5:e2:36:0b:6f:fa:
d9:d1:46:dd:f0:45:b9:9d:46:4d:ea:b7:88:a2:39:4f:0a:f4:
9b:95:c7:7d:3e:17:08:a3:9d:f9:f9:f9:66:5c:36:31:9a:34:
af:29:f7:39:03:9f:e8:4b:3a:a4:4f:0c:8d:56:e4:7f:a0:2b:
74:a9:f8:07:ec:37:84:0d:49:ea:e3:0c:2e:eb:e4:c5:32:ec:
20:87:69:42:50:d4:ff:2f:32:7d:b9:84:9f:3e:3a:d2:10:4b:
9f:b3:bc:f6:db:e3:d5:dd:5b:e8:85:e2:87:be:23:ba:ed:99:
34:8f:5f:61:2f:dc:7e:aa:4f:cd:66:21:c1:f3:9b:19:4b:cd:
b6:99:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:55 2025 by rpki-client