
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: bndHhWbtsamzW0D9TSUsx7sbxdXxjPWmssPDORGM110=
Subject key identifier: 20:09:C5:18:34:01:97:06:6A:A7:16:DB:E9:40:B6:A8:9F:DB:AB:D9
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 019882E7A4D5A89F483075FDCF64FE3643D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 0394
Signing time: Thu 07 Aug 2025 05:01:15 +0000
Manifest this update: Thu 07 Aug 2025 05:01:15 +0000
Manifest next update: Fri 08 Aug 2025 05:01:15 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: UoTwOOpTgvGgcIBzlVyTqJ7eezm3pZgXbngwa7fdT6Q=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:a4:d5:a8:9f:48:30:75:fd:cf:64:fe:36:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Aug 7 05:01:15 2025 GMT
Not After : Aug 8 05:01:15 2025 GMT
Subject: CN=2009c518340197066aa716dbe940b6a89fdbabd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:94:65:74:88:56:11:ae:a5:3e:c1:af:a8:
48:9b:a5:78:7d:81:80:10:eb:74:33:71:2c:3d:df:
a0:a2:13:a7:fe:39:f1:a3:22:3a:f6:e5:cc:cc:5b:
27:76:31:86:2f:7b:92:d0:40:a4:79:65:60:de:8f:
8f:c7:25:67:50:f9:04:bf:9b:db:be:a0:a5:61:88:
88:2a:0d:79:a0:48:26:3e:b5:d1:46:f9:54:f0:a8:
d6:b8:b7:6f:57:d8:07:b2:50:e6:a6:f1:36:a2:db:
ac:31:39:d2:76:33:82:10:bd:db:ff:ff:46:c3:90:
d6:01:b5:58:46:d7:b9:f9:67:72:97:b1:ab:ef:56:
cf:d0:f6:11:de:6e:36:76:00:19:6e:f8:f1:de:9e:
62:7c:16:d4:79:0a:68:86:3e:21:63:1d:57:cc:91:
99:bf:2c:4f:76:81:22:df:0c:70:db:b5:72:d9:a4:
7c:e3:75:97:5b:b3:d0:e7:41:e2:99:71:c3:6a:2c:
99:3c:10:47:f6:c7:d7:45:a4:08:2c:63:43:44:ad:
31:09:d9:49:a7:d6:86:1b:d9:93:31:97:1a:e2:ef:
29:93:fc:15:1f:f1:fd:21:9a:b4:43:36:92:aa:3a:
4e:e1:3d:10:ef:c4:3f:b0:92:4d:9e:4a:ad:0d:59:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:09:C5:18:34:01:97:06:6A:A7:16:DB:E9:40:B6:A8:9F:DB:AB:D9
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b2:76:e8:4f:81:2f:f7:0c:64:72:00:d5:af:58:25:25:2c:
72:b5:51:5a:94:19:5d:37:e1:b7:8b:15:c6:82:ea:91:ee:a9:
48:a6:61:55:37:80:ae:91:92:3f:61:e6:f5:2a:1e:9b:8d:fe:
6a:88:9f:20:4d:a6:1e:11:6d:4b:9b:ff:84:28:5f:5f:9f:4b:
c1:97:8c:96:2b:9f:ed:e0:41:58:d3:f6:a9:bf:8e:e7:db:4c:
be:c9:6d:7a:a7:12:11:75:62:5c:43:3c:47:fd:83:02:d7:a0:
7e:72:b6:f2:5d:ab:93:a8:9f:52:33:e9:17:48:a4:39:a1:3e:
61:41:c4:12:cb:27:e7:31:d5:c8:b4:27:29:06:62:93:1c:cd:
e5:2e:f3:df:13:32:17:28:db:6c:c2:76:2b:50:bf:b7:12:f8:
b9:83:fb:b6:b2:e5:72:7d:cb:95:ee:d1:8e:f1:e5:0d:95:f4:
96:d0:45:87:16:95:f3:c4:b1:a6:2f:e8:1b:c6:55:d8:71:88:
0c:6d:65:f9:62:05:ef:f9:8a:da:b7:7f:b3:50:fe:95:41:f6:
79:55:a3:20:ab:86:f8:9f:18:9a:a4:d3:3d:e2:a5:2d:e6:c9:
fa:e5:91:ef:80:9c:0b:a1:ec:3e:10:bc:c1:0f:01:f0:dd:c9:
09:cf:38:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:48 2025 by rpki-client