Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: HrSZfHb3Qh0R2uy/7Wg8UsTgVeXcu9ozE+MU/dWwIZ8=
Subject key identifier: 29:FF:4B:F8:41:F3:80:C1:CA:BE:C3:76:37:43:C0:5E:47:52:2A:46
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 019874BDA0D2976C188739C9B4ED4442CAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 1311
Signing time: Mon 04 Aug 2025 11:00:41 +0000
Manifest this update: Mon 04 Aug 2025 11:00:41 +0000
Manifest next update: Tue 05 Aug 2025 11:00:41 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: bLynyeSvZo4vyj30ZZdNM63QTTNX8kHwCT9UiryT7WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:a0:d2:97:6c:18:87:39:c9:b4:ed:44:42:ca:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Aug 4 11:00:41 2025 GMT
Not After : Aug 5 11:00:41 2025 GMT
Subject: CN=29ff4bf841f380c1cabec3763743c05e47522a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:93:84:21:4d:34:8e:56:ce:73:6a:8d:28:
f3:42:24:a6:f0:c1:15:06:67:e0:16:35:fa:bc:9f:
ae:a7:a1:e7:e1:26:62:b3:28:26:07:17:fc:a5:45:
67:73:4c:c9:d3:3b:5e:62:3d:fe:25:47:04:48:43:
5c:34:fa:88:81:ef:7a:0e:6f:e6:3d:ec:d7:c6:12:
85:0a:b1:2a:5f:1b:33:9f:e8:ca:5d:06:9c:d0:cf:
d4:6b:3c:37:78:4d:0e:07:1e:86:a2:f7:bc:3d:b7:
c2:bb:c9:9f:52:f3:d0:d7:dc:9e:8a:07:6d:43:29:
7f:20:97:0e:df:0e:2e:cd:c3:27:fe:d8:1d:86:75:
27:f8:05:3b:26:2a:f3:a1:a3:1a:cd:e9:a4:0c:71:
18:bc:de:05:7c:2b:e2:44:09:05:66:77:ac:8b:52:
e9:33:96:1a:50:3a:e7:a9:d3:bd:21:c7:b6:68:f7:
00:1e:83:51:8c:4f:61:ef:2f:bb:5a:90:5a:cf:c4:
b3:d9:05:2d:13:aa:22:2b:45:71:6c:4c:e1:24:9f:
da:50:0f:6f:37:46:9b:dc:da:f1:38:68:e5:4f:a4:
86:8d:3a:54:19:0e:74:98:cf:35:8b:d4:1a:ba:c9:
18:97:dd:7c:bf:c8:41:8f:39:63:0c:fb:8e:30:ba:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FF:4B:F8:41:F3:80:C1:CA:BE:C3:76:37:43:C0:5E:47:52:2A:46
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ab:9a:7f:35:55:d5:79:ae:84:05:7c:3c:46:30:83:34:5e:
22:3d:92:73:7a:92:ca:e7:36:57:cb:21:c1:a0:28:70:d5:ed:
2f:68:f9:30:94:6c:87:92:00:37:e1:9a:d2:1b:fe:96:d1:a0:
02:c2:08:6d:16:53:f5:e7:b4:01:91:ab:f1:cd:fe:0a:6d:67:
00:9f:3a:98:74:ea:eb:80:66:45:d6:a5:03:c9:f3:29:cd:e9:
86:07:8b:2f:1b:05:ab:52:3c:40:16:31:0f:b4:77:b9:8d:0d:
6c:53:d5:b8:e8:c7:2e:5a:3a:46:75:b9:d3:74:5f:35:46:03:
ce:8b:13:81:92:fd:63:6e:3a:b2:f5:d8:41:c5:c1:45:cd:4a:
a8:0a:76:a8:8f:c6:42:1d:30:bb:f9:9c:8a:8b:18:9d:3e:be:
3b:ef:1a:d2:e3:2b:b1:79:2d:90:d8:06:0a:59:fa:13:37:3e:
8b:fa:0d:fa:c9:a5:b9:72:a3:f7:cf:69:ef:2d:b1:a8:5a:18:
8a:09:cc:f0:d8:9f:f8:9b:26:3f:9d:56:11:9e:22:f3:b6:ac:
c0:08:76:6f:be:aa:c9:17:54:a7:96:08:c0:6b:7a:be:8e:96:
77:a8:f9:3a:a7:c9:ef:bf:ee:f6:4e:25:cc:4b:f0:d9:62:0a:
c7:97:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:25 2025 by rpki-client