Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
File: mRyTTgj1egPvTro2taTaeYolIgc.mft (raw, json)
Hash identifier: ol9miooP9PdT7aYKVqQPyY4DVB/wD9UAq7QkjcWpYNw=
Subject key identifier: A6:B8:BB:45:3E:42:5F:66:2E:61:4B:92:DE:F4:7A:3F:BF:35:3B:44
Authority key identifier: 99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
Certificate issuer: /CN=991c934e08f57a03ef4eba36b5a4da798a252207
Certificate serial: 0197C4930C6B0B5315B0377B10E4447EF699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
Manifest number: 15B9
Signing time: Tue 01 Jul 2025 06:01:00 +0000
Manifest this update: Tue 01 Jul 2025 06:01:00 +0000
Manifest next update: Wed 02 Jul 2025 06:01:00 +0000
Files and hashes: 1: db9OeH46tzqgA4Lx9Y7WIwYTuDM.roa (hash: FuLyiACFaT6BITOZPeoXwp9XiYIYBsR3kP7HfHr2tYI=)
2: mRyTTgj1egPvTro2taTaeYolIgc.crl (hash: EfXS5XHqCBh9PRviS//EN7tlbWvc6wTLCZwDbobWij8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:0c:6b:0b:53:15:b0:37:7b:10:e4:44:7e:f6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991c934e08f57a03ef4eba36b5a4da798a252207
Validity
Not Before: Jul 1 06:01:00 2025 GMT
Not After : Jul 2 06:01:00 2025 GMT
Subject: CN=a6b8bb453e425f662e614b92def47a3fbf353b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:73:11:8d:ee:74:f7:8a:a3:d6:cd:c8:1a:
ac:1e:6a:1d:f5:fd:03:a6:9d:98:c8:2f:60:40:1c:
e1:86:7a:2e:02:02:98:b1:12:66:46:ef:d6:05:38:
a7:e8:fa:07:0a:43:b4:9f:ab:b8:9d:36:fa:e2:ef:
11:e1:c2:e4:f4:bd:95:f4:b3:9d:52:c5:eb:dd:78:
f1:84:a9:8e:25:7e:51:94:30:31:ef:e8:d7:37:27:
3f:27:d1:57:c4:e8:3a:87:f7:40:6f:5b:d7:3e:29:
23:45:68:cc:ea:4f:d9:1c:92:14:c2:13:90:1b:85:
bf:bd:6b:8f:6d:e2:ad:fc:96:34:4a:76:c1:0f:cb:
4b:f5:f3:4e:14:dd:c1:59:c8:56:d7:a3:d5:1a:2f:
ea:f0:96:91:d6:20:55:ec:04:43:84:42:f0:08:ec:
9a:38:ca:e8:32:2f:79:8c:81:84:6c:dd:23:e3:5c:
52:73:c9:1a:b0:58:c0:cb:54:21:23:1d:e3:3c:1f:
c7:99:d3:a4:7a:eb:2f:3a:0e:38:51:37:ce:87:18:
28:ae:1d:1b:64:28:4c:e1:61:92:7e:5a:4e:22:46:
e6:fb:45:54:58:41:f6:06:f5:49:0f:90:05:49:e2:
a9:32:c0:40:6d:63:2a:2b:8a:7a:4b:40:f4:1a:7b:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B8:BB:45:3E:42:5F:66:2E:61:4B:92:DE:F4:7A:3F:BF:35:3B:44
X509v3 Authority Key Identifier:
keyid:99:1C:93:4E:08:F5:7A:03:EF:4E:BA:36:B5:A4:DA:79:8A:25:22:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRyTTgj1egPvTro2taTaeYolIgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/04c239-8869-46e2-95b7-93b392525175/1/mRyTTgj1egPvTro2taTaeYolIgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:10:ac:5b:11:a4:c0:5f:47:15:cb:be:34:da:04:c3:7f:86:
9b:eb:9e:f0:59:76:93:6f:15:bd:3d:7b:00:06:02:ec:af:4c:
df:d5:77:eb:5a:e7:21:5a:78:80:85:39:14:b8:5c:f1:c2:58:
08:e1:9c:e1:9d:71:53:e9:61:6f:9b:e3:0e:cd:30:11:30:c1:
3d:36:2d:15:75:1b:d6:b4:3f:c6:2c:ef:70:86:47:35:e7:e0:
b1:53:48:88:02:e7:f1:9c:ba:1e:57:7e:77:6d:bc:2a:7a:0b:
69:96:40:69:c8:88:50:07:ba:84:0a:16:a4:48:3b:c8:d5:9b:
9e:db:0f:7b:fd:a3:9b:92:b1:1e:c4:9d:63:d6:91:f3:29:b2:
a2:bd:13:fc:c1:71:7b:e7:12:91:99:2d:a6:a4:2e:85:33:9c:
bd:8b:2b:4a:41:41:33:4a:e3:fd:fd:58:4d:d5:b9:23:a0:ad:
8c:7e:60:dd:42:68:5d:cd:82:f2:3f:af:9a:07:ce:72:b0:0e:
89:6f:ce:7d:74:a2:a8:51:bc:ab:72:30:f8:2f:76:1c:1e:73:
ce:21:c2:5d:a8:94:70:82:63:51:22:a8:38:30:5c:e8:57:b1:
55:2e:5d:16:34:b6:97:c5:e9:72:22:49:cf:56:b7:fa:1f:bd:
6d:bb:e4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:19:04 2025 by rpki-client