Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: RsXbUEzqCo8gDamQMXs9t4uNcpfTvnH4DrBTRZ4XKp4=
Subject key identifier: 8D:E9:F8:A3:DF:36:44:06:09:80:6C:BF:2F:C5:25:56:6D:9F:74:C3
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 01988B10516E97109F6E5F8F2F09C8BCD558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 1320
Signing time: Fri 08 Aug 2025 19:02:39 +0000
Manifest this update: Fri 08 Aug 2025 19:02:39 +0000
Manifest next update: Sat 09 Aug 2025 19:02:39 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: Bp2F46jU0+66pXNVhgBmX6UoM1E1OktgynRxASZf598=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:51:6e:97:10:9f:6e:5f:8f:2f:09:c8:bc:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Aug 8 19:02:39 2025 GMT
Not After : Aug 9 19:02:39 2025 GMT
Subject: CN=8de9f8a3df36440609806cbf2fc525566d9f74c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:f1:7a:ad:4f:c1:b0:4e:f0:58:1a:b8:13:
ba:f0:9f:6e:bf:df:bd:85:00:e7:b2:e8:fc:48:9c:
23:b7:d9:e9:ee:d8:32:26:bd:64:be:ca:70:87:1d:
01:b7:34:98:92:25:0e:93:c1:85:79:a2:22:6f:93:
1b:72:4e:a6:2f:e3:da:08:4d:66:a9:e3:6b:cc:33:
e2:89:c2:5d:cc:2e:60:d7:d4:dd:3a:85:35:c4:ff:
14:1a:2d:f3:24:08:1a:61:94:11:46:24:04:54:69:
78:96:5b:7f:d1:db:98:a0:2a:b7:d0:fd:75:c8:0c:
ba:a4:08:ea:f4:fe:29:85:6f:1a:14:06:60:74:9d:
03:34:33:63:15:ae:f4:ec:aa:3c:b7:be:94:22:13:
e8:13:af:be:1e:2f:ae:46:c8:80:04:ef:34:ca:b4:
47:ba:50:42:9e:44:5f:4d:7c:6f:48:69:d3:f1:00:
0b:04:bf:ab:c3:d0:e9:45:06:18:ed:19:6a:3d:3c:
2f:7a:9a:21:46:90:c8:32:59:3e:83:75:2d:38:8e:
9a:c6:3b:90:4e:b2:0b:2c:ea:67:1e:0e:a7:b2:b9:
4d:74:84:2b:57:d0:2b:d7:43:99:ca:73:2c:e3:09:
54:19:da:b7:af:2b:25:e2:93:93:39:ca:d1:9e:b3:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:F8:A3:DF:36:44:06:09:80:6C:BF:2F:C5:25:56:6D:9F:74:C3
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:32:8f:e4:06:f7:c8:7c:7f:0b:14:29:2d:31:dd:22:5b:61:
f3:f1:e7:57:42:8f:85:60:18:0e:a1:37:4f:74:7d:5d:4f:26:
38:d6:38:cd:11:ad:b9:3d:2f:c8:01:67:00:ed:76:ce:fd:94:
b0:48:7d:76:ee:a9:ba:c3:c1:25:22:37:45:a2:5d:0b:fb:23:
5e:1f:7a:bd:0a:cc:41:20:54:3a:18:c1:ee:a9:b4:80:6b:75:
82:3e:83:4b:2f:da:f6:3d:b5:6d:f6:3a:92:6f:75:e5:45:df:
78:c3:47:23:76:e3:ae:4c:f1:7d:14:7d:4b:8d:2c:3b:61:be:
f7:ab:5c:0b:2e:07:99:41:86:0f:c7:9c:32:51:97:26:b8:80:
a5:7c:0e:65:0a:be:0a:80:d3:0f:d7:37:7a:d7:43:da:df:2d:
4a:0b:51:6a:0d:fc:a9:d3:2b:3b:89:85:eb:0f:8e:51:b6:84:
75:30:81:8b:b4:ab:5c:ae:7f:9c:63:d4:6a:56:d0:f6:1a:cd:
25:62:cc:91:98:8f:ae:d4:85:f5:ac:fa:bb:1e:88:91:4d:88:
31:35:b4:cf:b9:a2:30:d3:a1:db:33:67:9f:1a:7a:6d:0b:cb:
0f:7f:da:37:07:a0:8c:a7:b5:ed:16:28:e2:10:84:54:96:5c:
ea:6e:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:45:38 2025 by rpki-client