Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier: 4Jfl0W9yy/ozQooUKNJ98coHn8ozRrDE1APraDX5dnY=
Subject key identifier: 08:5F:7A:91:AB:CA:B4:31:7A:F7:5A:04:7E:6D:47:EF:32:FC:48:7B
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial: 0198D439BA5D67FCD51B339141AE61D6DB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number: 19
Signing time: Sat 23 Aug 2025 00:00:09 +0000
Manifest this update: Sat 23 Aug 2025 00:00:09 +0000
Manifest next update: Sun 24 Aug 2025 00:00:09 +0000
Files and hashes: 1: LNE0MuZMavkklT_2pqrHqhF84rY.roa (hash: ZYqhRbVzdQKSF9ZEirdkyB29pkjWB2pzYX8b2N86rj0=)
2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: +ZAVeAwk1W+7mPc1KLeJVokC4Pz+WXskaE0SZ/F9U+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:ba:5d:67:fc:d5:1b:33:91:41:ae:61:d6:db:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Validity
Not Before: Aug 23 00:00:09 2025 GMT
Not After : Aug 24 00:00:09 2025 GMT
Subject: CN=085f7a91abcab4317af75a047e6d47ef32fc487b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:d0:97:1a:5a:33:33:70:b0:e0:f9:47:a1:
82:3d:8d:c6:34:fa:87:e7:07:eb:20:b0:62:9d:5f:
33:0b:e5:ad:a3:3a:36:5e:50:62:35:62:71:a8:cf:
92:68:af:a0:93:a1:a7:69:00:88:59:0c:f5:a5:6d:
10:b7:9f:eb:e6:f0:c2:03:4c:9b:0e:08:70:5d:f5:
84:4c:97:70:29:ee:7e:c1:01:3f:76:b4:d7:6f:16:
1a:ec:03:29:68:35:75:13:c4:b8:98:a9:45:9e:ec:
44:f5:60:cd:9f:e7:19:13:00:3e:c1:6f:a0:8c:77:
06:bc:6d:4a:9c:f0:28:23:ea:b9:6c:6f:86:d1:df:
b2:78:ba:9f:2c:3d:c0:c7:f9:3e:92:b2:4e:4e:31:
ca:fc:32:09:09:0c:61:2d:38:3a:a5:28:ae:04:2d:
87:b2:8a:17:16:9e:0c:c6:75:97:df:79:52:cd:c3:
0e:d7:ad:6a:19:7c:0a:0c:a4:91:2e:64:99:af:78:
21:d5:ba:97:c6:00:39:18:50:06:10:45:9b:cf:a5:
0e:52:5b:a5:b4:2b:9a:a0:2e:9c:34:61:37:4d:cb:
42:34:1d:03:6d:ab:39:62:d8:d8:09:88:45:b1:fe:
3d:1e:56:d4:da:fe:e2:c2:5d:0b:37:0d:17:af:9f:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:7A:91:AB:CA:B4:31:7A:F7:5A:04:7E:6D:47:EF:32:FC:48:7B
X509v3 Authority Key Identifier:
keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e9:79:fe:5c:48:ab:72:47:81:37:96:86:9a:0d:a3:5f:13:
22:1e:24:3e:36:4b:16:b5:21:91:b9:80:f2:3f:16:fa:77:2b:
0d:8e:5f:42:81:4b:18:0a:d3:6b:f3:6f:4c:58:9b:7a:6c:98:
24:a2:22:ea:09:60:c8:d7:21:51:14:d7:18:b3:2a:04:77:f5:
48:65:99:5c:40:29:dc:63:fd:9e:49:ea:81:95:96:54:67:03:
96:7a:9a:1a:a6:34:e8:89:cb:47:53:ef:52:ec:91:50:95:87:
98:82:e8:a9:da:cb:30:6c:4f:37:6f:a7:a3:b0:e8:c3:7a:fa:
0f:63:10:c1:bd:ca:96:fa:ce:74:e5:fc:fe:0b:63:ea:8b:be:
fe:eb:be:45:43:7f:83:2a:6d:05:b9:1c:3c:90:bb:3d:3f:1a:
f7:f1:4a:db:92:d1:d9:bc:c1:c5:24:e7:0d:b0:24:54:06:9a:
8f:71:d1:cd:7f:53:fe:e6:55:af:45:a4:64:0f:bf:84:1a:d6:
06:c5:10:14:0a:32:54:4b:a4:17:8d:b6:86:86:b4:9a:2c:47:
ed:86:13:e0:7a:9f:ab:75:8c:b9:f0:a0:1f:17:1a:ef:8f:9d:
10:46:bf:45:00:2a:29:61:d5:17:6a:b3:a9:a9:82:e7:fc:76:
6e:3f:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:19 2025 by rpki-client