Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: m046FZfJ5wjuJ788gjKiELSd/29XAKUOb6dJc/Kvt+A=
Subject key identifier: A5:7C:15:DE:93:26:90:3A:68:54:73:0C:4D:FA:2D:42:20:2E:11:24
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0198D773B7EC1B01C610365B92F7EB6A0FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0BD4
Signing time: Sat 23 Aug 2025 15:02:21 +0000
Manifest this update: Sat 23 Aug 2025 15:02:21 +0000
Manifest next update: Sun 24 Aug 2025 15:02:21 +0000
Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: GlEAZ5jMMwVfcocKW/chp/i2Zkl+nH/IX39NmSKMtBo=)
3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:b7:ec:1b:01:c6:10:36:5b:92:f7:eb:6a:0f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Aug 23 15:02:21 2025 GMT
Not After : Aug 24 15:02:21 2025 GMT
Subject: CN=a57c15de9326903a6854730c4dfa2d42202e1124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:40:8e:7f:e4:29:d1:ab:aa:ca:96:db:dc:
62:5b:dd:d6:58:c8:95:2a:db:73:a4:11:d8:7e:d4:
92:66:5c:a4:29:f7:b0:9a:d6:46:fa:f4:bf:38:5d:
28:5e:91:0b:12:d7:00:6f:94:b2:1e:0e:e4:3c:ea:
1f:85:7f:d6:c7:9d:84:20:51:ad:ef:5b:5c:91:29:
1a:68:5d:f8:49:72:4c:0b:07:dd:9c:34:6f:a3:d5:
be:3e:7f:51:91:ae:99:8d:af:ea:ba:1e:96:ca:88:
66:58:32:db:95:6d:b9:88:ef:19:81:85:31:10:b8:
f7:fb:a0:47:77:eb:2d:b5:7b:b0:fa:4b:b0:46:47:
7f:d1:2a:98:aa:a0:60:e4:c7:26:aa:49:71:2e:c0:
c3:f7:28:b1:54:7f:bb:12:03:fc:02:e5:74:3b:18:
37:a0:3f:6b:6a:d0:4d:1e:89:e4:c9:00:e0:2a:2f:
57:bf:ae:54:4c:d3:97:f4:48:cb:ea:05:9f:61:20:
e2:44:b3:f6:40:b6:60:a8:c4:e5:83:8b:bf:e5:fc:
2f:c8:a0:ff:43:ba:d2:5f:ab:f0:46:6d:31:4d:ad:
ba:5e:06:68:22:85:9a:dd:7e:b7:8e:fe:90:e5:50:
15:d1:a5:b5:54:f1:1a:36:4b:9a:11:c3:4d:5d:73:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:15:DE:93:26:90:3A:68:54:73:0C:4D:FA:2D:42:20:2E:11:24
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:90:05:51:4e:4f:63:34:c3:60:52:66:cf:7f:b3:6c:f3:34:
eb:b5:dd:0f:5a:ca:6d:59:82:3e:53:73:5c:b1:c5:9f:b4:ae:
10:28:36:00:50:70:87:b3:a7:1c:3a:1e:fa:5c:a5:30:e2:93:
8e:86:78:f9:92:d8:b2:4b:69:3e:69:60:ec:aa:59:20:40:72:
27:a3:c7:88:9f:a2:f6:51:fb:ac:71:fd:0a:d2:dd:83:b7:6c:
9d:a9:dc:d2:c0:8c:fc:18:5e:27:52:bd:9d:19:90:03:8e:dd:
89:d3:d4:35:1f:e4:26:b5:a3:1b:48:8d:6b:55:3c:0d:32:fa:
62:51:ce:33:c1:f4:9e:56:77:bc:8c:17:93:8f:19:27:54:a0:
90:20:ef:59:a3:23:59:e0:d1:70:08:9f:c9:d3:51:f5:91:63:
34:e1:21:f9:db:cf:8e:b6:fb:43:6f:f4:00:b8:a7:86:cc:90:
09:11:ad:0d:f9:38:22:64:f5:1b:72:01:d3:ec:00:d9:26:e5:
3f:14:e7:c6:c9:41:27:c5:35:b0:55:80:88:3f:e4:7f:7a:1f:
32:36:26:ea:a8:95:50:e4:58:26:72:6a:2e:cd:c1:9c:be:f3:
ed:68:24:2a:2a:5d:7b:3c:cc:59:94:20:ab:3e:e4:76:66:e2:
c4:c6:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:39 2025 by rpki-client