Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
File: MpbYU2ObwBkplCk-veCYBdLWIqQ.mft (raw, json)
Hash identifier: CwVvh7S9h5azwyPujFaEgj6uB1ZzN1/PbIZCbDH3ZQo=
Subject key identifier: 64:C0:AE:50:95:E8:A0:CD:53:7A:8E:E3:CC:15:CA:E2:E6:E8:F7:B4
Authority key identifier: 32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
Certificate issuer: /CN=3296d853639bc0192994293ebde09805d2d622a4
Certificate serial: 019892C98CDFBA341AD93EDDB07D993DDE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 07:02:19 +0000
Manifest this update: Sun 10 Aug 2025 07:02:19 +0000
Manifest next update: Mon 11 Aug 2025 07:02:19 +0000
Files and hashes: 1: MpbYU2ObwBkplCk-veCYBdLWIqQ.crl (hash: WaPmQl6Kjyrqm0iwfKbiX4aFBYV8UPXNm5zPl+4+0Lw=)
2: hTnUv0N90doM0ZMOLyyFEOW9iK0.roa (hash: YJzqmH02+AW23mfkqCHZcxj82Owa829HDO8rFi0lEGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:8c:df:ba:34:1a:d9:3e:dd:b0:7d:99:3d:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3296d853639bc0192994293ebde09805d2d622a4
Validity
Not Before: Aug 10 07:02:19 2025 GMT
Not After : Aug 11 07:02:19 2025 GMT
Subject: CN=64c0ae5095e8a0cd537a8ee3cc15cae2e6e8f7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:74:b6:3b:bc:d8:be:11:bd:19:91:bb:24:bb:
72:78:9e:20:50:8b:e7:b9:3b:b3:a5:f7:eb:31:3d:
53:1b:cf:88:c9:4c:0b:a2:82:6d:66:34:06:80:5e:
da:8d:6d:a4:9e:2e:30:98:0d:25:a2:70:f3:e7:57:
99:3f:a0:88:4c:01:50:a7:b4:af:44:c9:88:54:c5:
b2:81:7b:c1:30:d4:bd:b0:97:3f:da:f0:90:a7:e6:
70:27:96:64:28:11:88:df:bd:d8:e6:dd:8b:67:6c:
6c:33:33:52:74:e3:ea:f4:e9:64:b1:4a:4d:92:64:
59:90:2b:28:40:54:bd:68:27:7e:51:2d:6c:bf:2a:
7f:ef:e1:8a:2e:61:2f:3e:8f:a5:0c:a1:60:60:9a:
5e:26:59:75:75:9a:4a:50:24:29:ba:90:83:9a:fc:
ef:ab:03:46:35:63:81:d9:5d:ed:5e:8d:d3:8d:50:
75:62:0e:71:c7:12:48:86:bb:57:70:d1:a9:96:7e:
3e:e5:66:56:b9:17:d8:2a:e2:4d:ad:b3:dc:c9:75:
59:03:aa:93:f8:ec:c7:6a:65:4d:be:40:02:e9:d5:
cb:31:35:2c:ca:f0:ff:a5:a1:7b:29:30:0c:55:4c:
1e:39:6d:97:a0:52:7e:83:05:d9:f4:7f:76:26:8b:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C0:AE:50:95:E8:A0:CD:53:7A:8E:E3:CC:15:CA:E2:E6:E8:F7:B4
X509v3 Authority Key Identifier:
keyid:32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:f4:a6:a8:51:e6:fa:a9:72:b5:89:84:35:75:75:2b:99:
9b:ec:e3:77:71:0e:1d:40:13:40:59:0b:5a:7d:53:ca:1f:65:
90:09:9a:5f:64:0c:05:a1:62:e4:81:80:ba:9b:2f:92:49:fb:
9b:d6:96:d3:18:e3:d7:ec:ba:03:61:09:b3:a6:30:3e:ea:27:
e8:55:e5:d7:ed:54:57:c5:bd:d2:e8:f2:43:71:40:34:df:a2:
5f:f4:63:2e:73:fd:e9:a0:01:1f:25:41:e2:f5:12:74:a0:29:
1f:dc:b0:f4:22:8a:1a:a3:95:46:8d:36:94:62:3d:e2:2c:be:
68:59:18:e2:ee:5e:c8:91:e5:86:86:f1:8b:00:e3:46:bd:99:
99:d3:20:c7:c6:92:91:7a:ce:fc:06:c0:b9:32:be:db:b1:99:
36:25:06:9c:61:16:33:fb:1f:8f:b0:da:63:b0:11:ac:d2:fb:
42:ed:9b:ac:ed:cf:d5:9f:58:55:1a:24:cf:73:f5:0c:e4:ef:
dc:a6:89:e5:fd:a0:a3:f4:23:f3:18:f5:e6:b2:13:6a:fc:e7:
04:fa:c9:0e:8a:bb:87:2c:93:3e:a8:f4:60:53:14:1a:86:df:
28:b3:d7:e9:6e:0e:80:08:f1:1e:90:cc:3a:bc:a7:e4:c2:84:
69:5e:80:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:57 2025 by rpki-client