Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: MaajXEuWRGpPueD8GfAMgcU41DPPKqXzBq3kxm2EFGA=
Subject key identifier: 13:6A:CF:00:FB:9F:3D:A0:C9:EA:75:90:6A:BE:35:EA:76:01:F4:70
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 01987A1B41C46580E8ABDC8AB503CA1E5C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 12:01:03 +0000
Manifest this update: Tue 05 Aug 2025 12:01:03 +0000
Manifest next update: Wed 06 Aug 2025 12:01:03 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: Q9yJIpMPMP8Uw0yddAy+Fxkx0iCMTSlNz1vOZehWGpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:41:c4:65:80:e8:ab:dc:8a:b5:03:ca:1e:5c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Aug 5 12:01:03 2025 GMT
Not After : Aug 6 12:01:03 2025 GMT
Subject: CN=136acf00fb9f3da0c9ea75906abe35ea7601f470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:45:db:0a:9f:97:f9:ec:47:f5:3d:fa:07:
b6:08:a6:7c:62:7a:02:06:7f:a2:83:b3:7a:16:1a:
1a:85:41:fe:a9:03:ad:4e:40:a2:68:fa:dd:df:8e:
2d:b0:99:fa:99:e3:44:f9:77:0e:b4:79:f2:dd:92:
db:56:fb:3c:de:ff:4d:73:a2:b2:c9:dc:3f:23:18:
0a:41:33:72:b9:7d:0b:97:26:a3:f8:b3:cf:e9:50:
48:2a:54:e9:fa:08:bf:cc:23:28:7a:04:61:48:99:
9e:b9:f6:22:46:1a:03:60:8d:e6:4b:15:ca:b6:49:
93:36:a0:17:a3:ac:bd:67:9d:a4:6b:14:ee:35:d9:
84:02:9e:bf:5e:e2:bc:76:a1:0c:74:e5:6e:46:4a:
88:a6:0e:92:6b:d3:4d:58:ac:f1:95:35:6c:d2:b4:
b2:00:4c:a6:0a:06:84:f0:c3:57:61:43:e3:4c:e4:
a3:02:8c:87:06:c7:54:f8:20:43:21:8e:50:e0:66:
63:db:b6:71:8c:81:86:1d:74:77:8f:39:c0:fa:d6:
0d:3c:b6:87:c2:34:e7:c2:85:0b:86:54:8a:6d:ab:
02:49:28:6d:65:f1:a9:08:0c:74:d5:68:78:1e:c3:
ac:bb:c5:27:89:88:62:c8:60:28:32:d2:35:6a:d2:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:CF:00:FB:9F:3D:A0:C9:EA:75:90:6A:BE:35:EA:76:01:F4:70
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4c:a5:c6:33:7b:db:03:e6:44:af:f0:e9:c8:7c:e0:96:a4:
39:59:ae:f7:1c:69:2e:ef:ff:8d:8c:01:e7:e8:b8:65:24:48:
3b:85:f6:83:fa:cf:a7:be:9b:e2:8f:63:5d:61:c6:f5:58:c2:
bc:e4:53:b1:ee:a2:13:81:c3:1c:d3:a0:0e:ba:4c:dd:4e:2f:
34:d6:a5:3c:80:66:b5:e6:e0:9a:be:3f:ed:e1:7f:20:5b:8e:
34:1a:47:b0:d6:25:3f:68:dd:0a:ed:df:60:f3:98:82:8b:e9:
cd:a4:dc:75:07:8c:4f:5c:aa:a4:72:8a:57:dc:41:b1:9e:79:
77:18:08:25:fc:06:1e:99:ac:5b:7e:02:9c:72:6f:58:af:b6:
16:2d:82:89:c2:0d:5a:76:34:3c:05:c5:22:8a:db:2e:a0:fc:
7c:59:bb:ad:1c:53:54:11:eb:6b:63:25:5c:c0:16:00:07:7f:
cb:fb:46:6e:b3:d6:84:b9:33:a6:f2:3c:cf:a0:f7:d5:a7:87:
3f:a2:4c:a4:67:5d:68:d7:db:08:ee:d2:7d:b9:8d:c8:c1:d0:
86:f7:4a:30:77:12:71:54:67:e9:9b:5f:df:f4:68:37:dd:be:
e9:2a:b3:88:c7:8b:0d:86:00:40:8d:2a:90:a5:9e:69:f3:bc:
1b:41:1d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:18 2025 by rpki-client