Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: QMdkBMlsYnPBS1pdI56NNN24WoO8MSkza1LH5+4kgfc=
Subject key identifier: EE:43:EA:BC:66:AF:6A:05:D1:6E:44:91:92:58:60:F8:00:A2:D3:E7
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 0198D66023EE345DBE0EE52937C892C6B709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: kS/5D/I3YRnXqfMnRBmPFlbykrisk7wP7WrXP/FnZ8c=)
3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:23:ee:34:5d:be:0e:e5:29:37:c8:92:c6:b7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=ee43eabc66af6a05d16e4491925860f800a2d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:79:ef:fd:3c:0a:8d:86:15:9d:c6:ce:63:e0:
75:9e:71:80:1a:58:ca:8e:9e:05:cf:41:c2:a8:c0:
a3:5b:fc:97:8e:bc:b4:e2:69:8f:de:3d:6e:1a:98:
ab:a7:31:d8:68:65:56:50:10:43:6f:e9:a7:00:cc:
51:a6:6b:d5:bb:3d:36:83:3d:9e:84:69:98:e9:28:
bd:31:10:b9:e2:4a:ed:9c:6d:26:ee:df:6c:21:ee:
32:6f:6e:44:9f:f8:4c:b1:f2:fd:3c:fc:9b:bc:07:
70:05:60:a5:bd:7a:49:ac:d6:4b:59:9a:71:1c:34:
5d:b3:b8:59:07:57:3c:cb:86:99:38:e4:3d:cd:93:
aa:11:e4:0a:ab:6a:c3:86:c4:03:33:f3:8a:61:14:
5e:b9:b8:4f:64:07:fc:0c:92:17:42:bb:8c:2d:75:
0c:fa:be:50:35:7c:a8:8e:06:a4:9f:a6:ea:df:20:
8a:42:91:55:36:d1:d6:3a:3e:1b:02:c9:99:5d:18:
53:61:76:c4:33:a1:9a:97:ce:25:cf:7e:ab:28:9b:
28:04:f8:97:ad:32:29:11:c8:bd:97:d9:c5:c5:e3:
c0:f5:16:01:a5:77:b4:0d:23:0f:15:3a:6c:3a:2d:
d6:0f:d9:42:9d:ed:54:38:00:b1:1a:b9:62:76:44:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:EA:BC:66:AF:6A:05:D1:6E:44:91:92:58:60:F8:00:A2:D3:E7
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0e:db:a0:19:29:41:1e:a8:80:d8:af:07:97:64:82:69:84:
63:e7:f6:05:1e:18:bf:8f:ff:71:1c:24:24:18:4d:26:9e:02:
66:81:a0:05:d4:af:f0:1b:cf:4d:33:7e:c2:ad:9a:9b:b9:dd:
5f:38:bb:98:33:aa:ff:b1:af:bd:25:30:95:f0:8a:a8:ea:35:
e1:11:8f:26:0f:14:f2:f2:d5:2b:05:1b:0f:2f:b5:d4:30:ed:
ac:bd:31:be:e4:9a:2d:f6:f7:9e:6b:dd:c7:7e:27:a5:9a:26:
29:a6:28:41:40:00:15:69:7a:09:ff:64:29:dd:de:2d:e2:0d:
eb:cb:1a:42:47:16:85:8c:24:78:d9:f4:b3:4b:0c:84:9c:87:
e7:03:f1:2f:a4:a8:ae:33:1e:51:bd:ec:8d:77:e8:9d:3e:ae:
36:5a:64:30:20:91:f6:c9:6b:8a:47:95:3b:28:11:be:1b:50:
54:bc:51:dc:b7:24:74:f9:16:5c:f7:c2:3e:92:4f:d7:ff:aa:
ba:76:68:ac:ea:8d:3b:e5:4c:81:6e:bb:cb:87:7e:48:52:a0:
8a:b4:b0:9f:62:78:b5:3f:ac:67:9f:5f:7f:f6:4f:75:6a:a5:
ba:d2:2c:75:21:f9:d5:fa:1e:25:ee:49:59:57:5a:1f:bb:61:
52:27:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:58 2025 by rpki-client