Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: Ucm9NSvgn7tcfAFFTE/W5iFRiYMLO/6XXeMaPufZ5PU=
Subject key identifier: 8A:20:FE:BA:F0:04:6D:62:8F:C5:BC:38:3F:9B:B0:02:A1:EC:C7:74
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 0198733D4CED5CC4256411C4004EE17D835F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 0544
Signing time: Mon 04 Aug 2025 04:00:53 +0000
Manifest this update: Mon 04 Aug 2025 04:00:53 +0000
Manifest next update: Tue 05 Aug 2025 04:00:53 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: ceRyqF2J3hATc6OAQbUFnVtzdyVOAQo3O91uX/gWZWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:4c:ed:5c:c4:25:64:11:c4:00:4e:e1:7d:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Aug 4 04:00:53 2025 GMT
Not After : Aug 5 04:00:53 2025 GMT
Subject: CN=8a20febaf0046d628fc5bc383f9bb002a1ecc774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:fd:0f:00:a7:d5:27:cc:e1:4a:6e:b2:86:
f3:7d:6a:cd:c0:41:10:8b:96:e0:8b:5e:32:5b:80:
5a:61:f6:85:ef:53:35:24:a1:fa:27:51:87:55:9a:
b6:02:b6:11:31:10:26:81:5b:62:0d:e4:a8:2f:23:
ea:10:9f:b9:69:fb:09:1b:ea:bf:9e:bd:59:78:9c:
46:72:26:25:c8:a9:68:27:47:cc:60:91:6e:31:43:
49:00:0a:4f:e6:d3:97:52:f6:24:1a:47:fb:b7:be:
9e:b5:a2:b9:06:08:3d:19:6d:8f:54:6e:f5:ae:3f:
ab:83:73:f8:77:28:72:89:2c:71:2f:d9:cd:82:ce:
6e:19:dc:1f:07:2c:64:8a:7e:38:05:3b:98:73:46:
c5:7d:d0:79:df:65:83:87:9b:3d:4e:c3:ad:7f:6e:
28:12:bb:8b:1b:d8:c5:52:a9:48:6f:69:58:ae:62:
8b:48:a7:94:f3:c0:df:23:23:81:ea:8e:e0:76:73:
f9:18:09:48:86:f8:c4:e0:d6:77:9c:ae:82:39:4c:
8d:42:da:29:87:ba:6d:dc:3a:8a:21:f2:12:6b:95:
4d:b2:dc:da:e0:f1:2b:95:06:3a:dc:f5:b5:96:65:
eb:30:7c:b7:35:55:75:ee:2d:2d:d0:67:9c:de:d8:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:20:FE:BA:F0:04:6D:62:8F:C5:BC:38:3F:9B:B0:02:A1:EC:C7:74
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:63:cf:2d:b7:60:9c:8d:d4:d0:74:7d:f0:98:fc:fc:d7:67:
a4:43:2b:32:49:9a:5c:2a:17:8d:47:f5:aa:e2:f0:f2:0b:e7:
ff:71:17:da:03:0a:68:2f:cf:7b:f1:45:db:c8:2c:32:ff:ca:
45:6b:11:c3:0c:2b:c1:03:08:05:7d:6b:ef:82:3b:08:43:27:
8b:66:f2:dd:5c:13:83:01:a2:2c:37:f6:72:fb:e9:a1:61:4d:
b3:7d:79:00:f5:c9:66:70:d2:1a:88:de:67:ef:8b:34:08:94:
68:98:90:4b:1c:42:cf:e8:5d:42:c6:0a:b8:55:91:33:34:02:
65:6b:5c:29:a3:27:36:95:9c:2b:28:59:5f:4b:e8:db:c5:6c:
e4:47:24:b8:6f:55:02:3d:83:78:25:5d:06:9e:30:b2:0f:b3:
0b:93:22:be:a5:d3:34:91:ca:e3:da:d0:33:03:91:0e:21:64:
b7:4f:51:9a:2f:8b:5b:b5:b7:7a:db:17:c3:b9:95:2a:11:d2:
7e:eb:05:e0:90:06:d9:c7:bd:49:a7:c3:d0:ba:34:ae:c2:d1:
f6:d6:d3:6e:95:8f:d8:b2:58:f1:f7:bd:26:08:86:c2:f0:9d:
25:1c:bd:b6:53:3b:c5:48:58:e9:b4:89:2d:c5:68:20:8d:7c:
8d:55:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:24 2025 by rpki-client