Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: TW9F3h4AlSQU0Gcoa8+eIx/fhU7usD2j3WucyM34Rc8=
Subject key identifier: B9:FD:0E:69:77:5A:04:2B:5A:A8:B3:ED:33:25:7F:C0:D1:EA:26:58
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 0197BC6DB1B9429A774C62760C7E06DB6549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 16:03:14 +0000
Manifest this update: Sun 29 Jun 2025 16:03:14 +0000
Manifest next update: Mon 30 Jun 2025 16:03:14 +0000
Files and hashes: 1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: sTLYdgGOe46HpDoYRtnI688V/jatgMJZtdNT8LZgoow=)
3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6d:b1:b9:42:9a:77:4c:62:76:0c:7e:06:db:65:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Jun 29 16:03:14 2025 GMT
Not After : Jun 30 16:03:14 2025 GMT
Subject: CN=b9fd0e69775a042b5aa8b3ed33257fc0d1ea2658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:a9:5f:68:26:36:0b:11:9b:67:52:0b:bb:
73:25:1f:56:70:b2:f6:7a:5f:6b:a9:1f:4b:3e:20:
9a:3c:44:03:9f:8c:dc:d0:95:0e:71:05:5e:76:65:
12:a7:44:09:d2:66:0e:3c:cb:b9:ae:5f:ab:54:27:
2d:54:e6:11:18:04:bf:69:19:2c:62:a6:fd:bc:2e:
8b:14:03:92:7c:3f:d0:eb:90:14:02:b7:5d:91:8a:
24:67:8a:cf:bb:13:2e:27:f0:07:c0:e4:72:46:39:
7f:d3:54:85:9a:82:ea:4b:e3:13:c8:d1:3c:97:25:
74:5e:e0:88:b2:5a:33:ed:6d:d3:41:1a:46:4c:c8:
e8:07:42:92:0e:74:ba:5e:42:35:88:73:3b:dd:84:
3d:40:ad:ea:96:09:ad:cb:2d:0b:60:c4:d1:80:1e:
4a:20:8a:43:50:8a:5f:73:9b:30:10:b2:19:68:2c:
63:e6:15:0c:cf:2f:5e:f8:c8:de:0c:00:46:bb:58:
4a:ec:25:80:f1:eb:4d:00:a7:1b:75:d2:c9:4d:cd:
ca:e3:4d:d2:b1:fa:df:4b:89:78:f6:0a:f8:f2:f7:
fb:99:54:c1:e5:54:c4:86:3d:82:15:70:11:18:4e:
a6:e0:e4:f6:32:9a:a1:68:ac:84:2d:6d:95:a9:12:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:0E:69:77:5A:04:2B:5A:A8:B3:ED:33:25:7F:C0:D1:EA:26:58
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:63:d6:e6:b6:4c:02:26:a1:d4:6a:8d:7a:5b:48:1a:68:22:
87:6d:cd:d3:b8:c0:d1:b9:83:8e:20:f7:0f:c1:8f:7b:a6:42:
4a:77:37:64:37:9f:a5:9b:a5:3a:db:7a:0f:56:78:6e:ba:cf:
d8:a8:79:56:f3:5c:ad:5c:b7:6f:91:9e:6a:65:f9:1e:a2:f1:
f4:42:7f:0c:0f:a2:29:1b:62:a8:f7:09:72:2a:e9:00:f6:b1:
16:c8:e0:b3:3a:b5:a4:18:60:54:b2:8f:d8:e7:13:1c:df:42:
72:59:35:04:6e:01:bd:58:4f:b0:9b:49:7e:24:89:03:be:8a:
18:8e:0e:ba:9e:29:99:0d:43:73:d0:5d:91:b0:ee:17:76:23:
2f:0e:10:f0:42:f7:1b:96:e4:92:6c:35:4b:2a:b7:bc:c5:01:
bf:47:cf:0b:b9:90:99:5b:6d:74:78:d5:54:a9:a7:0c:86:33:
49:f2:bf:11:e0:34:57:1b:b9:c1:c4:cd:af:4a:bf:ff:c3:99:
19:bd:98:50:47:53:5d:8d:ab:1b:b5:62:b6:7a:5b:f2:d0:b5:
d7:ef:e9:bc:71:34:4f:c8:54:75:8c:4a:a0:08:44:79:2d:11:
02:41:a4:82:11:07:a3:f6:ce:79:c0:c9:b0:3d:fc:62:a5:2e:
a7:86:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:05:55 2025 by rpki-client