Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
File: mRyTTgj1egPvTro2taTaeYolIgc.mft (raw, json)
Hash identifier: VRuUTJRVYyqUF4aN/bebs28oN0T7WkkntcSCuL1Fw9E=
Subject key identifier: 71:27:4B:8B:93:28:45:C8:37:4E:F1:5C:0C:A4:7A:E7:9E:86:9A:35
Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Certificate issuer: /CN=991c934e08f57a03ef4eba36b5a4da798a252207
Certificate serial: 0198D8BD7789F11CAC0971F165544ED19857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 21:02:32 +0000
Manifest this update: Sat 23 Aug 2025 21:02:32 +0000
Manifest next update: Sun 24 Aug 2025 21:02:32 +0000
Files and hashes: 1: db9OeH46tzqgA4Lx9Y7WIwYTuDM.roa (hash: FuLyiACFaT6BITOZPeoXwp9XiYIYBsR3kP7HfHr2tYI=)
2: mRyTTgj1egPvTro2taTaeYolIgc.crl (hash: HuNrVTLDTOiBD1So5CaoPL3nh86O2mwcBibapGq3VL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:77:89:f1:1c:ac:09:71:f1:65:54:4e:d1:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207
Validity
Not Before: Aug 23 21:02:32 2025 GMT
Not After : Aug 24 21:02:32 2025 GMT
Subject: CN=71274b8b932845c8374ef15c0ca47ae79e869a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:ca:f4:6a:f9:d8:6a:f3:8c:a2:94:bf:05:
cd:6a:b9:4d:92:f6:e4:71:c1:66:04:5e:08:c4:5a:
c6:f5:ac:19:f3:c5:55:39:0a:2c:c1:90:4b:82:09:
52:ba:ca:6f:8e:19:86:51:49:b1:52:95:46:5f:5a:
41:85:84:9a:10:a9:e8:a2:84:9b:9d:7f:e7:da:dc:
6d:03:a0:bc:69:40:9d:22:fe:63:d2:2b:62:70:f5:
01:4a:51:53:fe:e4:68:89:f7:e1:ed:35:f5:50:c5:
fd:48:f6:ab:e2:b4:ce:62:13:be:ae:c8:bd:24:88:
ac:79:c2:cc:8f:ca:02:8c:17:ba:42:ff:d1:a6:d2:
e9:9e:ba:11:ee:8d:91:90:31:52:c4:2c:e6:52:36:
e5:9d:cd:90:5d:ce:e0:a4:b2:21:b9:62:55:9a:69:
b7:d7:a0:97:c8:c6:73:07:2e:99:3e:50:24:d8:bf:
8f:47:db:fa:f0:de:4d:39:7b:17:31:86:0c:b3:c5:
35:07:3d:d4:18:12:41:59:7a:25:a5:f7:3d:51:b1:
ac:17:19:16:fd:29:01:94:46:cd:f7:6d:cc:45:8d:
ad:71:a3:11:33:2e:56:0e:86:84:cf:57:19:4f:ef:
67:ac:b9:e5:b6:13:41:92:94:8b:52:80:b3:06:fd:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:4B:8B:93:28:45:C8:37:4E:F1:5C:0C:A4:7A:E7:9E:86:9A:35
X509v3 Authority Key Identifier:
keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:07:5d:be:b0:3b:89:f7:80:32:90:09:9d:39:e0:2c:67:55:
29:af:f5:d5:a8:37:29:39:fb:29:37:69:e9:7e:fd:cd:67:2c:
c1:a2:df:22:e5:a5:61:6e:06:4f:6a:12:11:15:dc:1b:88:2b:
3b:cf:9c:01:fb:58:62:e7:eb:1f:10:48:b8:46:68:a7:17:8b:
d2:77:c3:ce:44:1e:18:56:6e:ea:f0:df:24:7a:7b:1a:73:0e:
d7:9e:29:30:b0:0c:30:1a:98:0d:0b:56:52:77:d1:7c:4a:f0:
0c:96:f0:ab:fe:28:c2:18:f1:80:09:a4:b1:20:67:cd:40:0b:
60:ee:48:05:56:4b:30:62:35:f4:03:45:8e:f9:fe:1f:86:66:
c7:ed:1a:25:b2:0e:c8:7f:ff:28:d3:6d:01:90:e3:c1:80:26:
67:c3:0c:c1:2b:e3:79:c0:e1:9c:b4:0a:02:5d:6f:7f:6a:2f:
49:2d:f0:50:3c:20:55:b3:25:c6:20:01:26:39:09:aa:ba:8e:
64:1d:d2:41:42:7b:0f:7e:ff:f9:82:2d:90:13:b8:1c:b8:42:
75:9f:65:2c:66:7c:ab:9f:ed:6e:92:1e:8d:07:38:d7:88:33:
fa:69:75:54:93:1c:2b:d8:b4:53:cf:0b:8d:5b:8f:da:67:cb:
c8:32:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:54 2025 by rpki-client