Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: r+THp+PKzZr6ivAps1tqtHA8HqnzRTEYt3JbLWrscXo=
Subject key identifier: 09:6A:B9:AE:28:32:B1:CB:B3:30:AF:66:CB:70:05:04:D1:B9:6C:26
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 0197CF167991AFF276950B8DC0B05FD3B3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 15C3
Signing time: Thu 03 Jul 2025 07:00:45 +0000
Manifest this update: Thu 03 Jul 2025 07:00:45 +0000
Manifest next update: Fri 04 Jul 2025 07:00:45 +0000
Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=)
2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: dtPtRvoIWXLax85HVLZcfz7+DBADZLr0+mcDYDCARzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:16:79:91:af:f2:76:95:0b:8d:c0:b0:5f:d3:b3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jul 3 07:00:45 2025 GMT
Not After : Jul 4 07:00:45 2025 GMT
Subject: CN=096ab9ae2832b1cbb330af66cb700504d1b96c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:1f:e3:6e:b6:18:b3:15:d9:e8:1b:7a:97:
50:09:19:74:54:c2:dd:76:2b:73:fa:0e:77:c7:d4:
e5:fd:cb:7f:fb:33:1d:df:61:c1:9d:41:8a:23:62:
6f:38:a0:3b:5d:40:db:65:96:3d:02:ed:e3:4e:08:
16:17:3a:79:a2:ba:b4:32:c9:4d:bb:30:cc:68:ef:
6d:19:a3:15:a1:93:94:2c:b3:9d:77:26:c8:c6:48:
04:12:58:af:44:07:62:79:c5:db:a6:f4:55:9c:8a:
a1:a3:48:13:48:eb:4d:ec:e3:8d:13:ff:9e:98:98:
51:86:7d:81:b5:f8:c3:d6:24:b7:da:cc:b0:d0:65:
43:18:39:d6:24:96:f8:8e:11:ae:cf:66:0c:5e:57:
b1:86:7c:35:15:d5:0b:0b:dd:35:47:87:07:ba:ef:
8f:95:8f:39:1c:c8:2b:c0:4f:96:87:2b:81:30:7d:
29:6d:92:7d:22:3f:95:c4:30:22:3d:f9:f0:e4:29:
0a:20:2f:ab:60:bd:d1:ba:d1:1b:a9:3c:a6:57:68:
37:4e:27:94:05:51:89:71:ad:94:3a:e5:a5:f2:79:
f2:c4:bd:b8:f8:7f:21:8f:69:85:78:40:e9:51:51:
3f:7a:54:1c:a2:7b:d4:64:20:90:f5:be:f2:8e:7c:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6A:B9:AE:28:32:B1:CB:B3:30:AF:66:CB:70:05:04:D1:B9:6C:26
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:12:18:c6:92:05:87:60:6a:a6:81:ae:1f:0d:b8:27:23:54:
31:07:52:39:ac:b3:2a:06:93:07:36:bf:46:5c:2f:cb:87:a3:
7e:21:2b:71:d4:84:60:e6:e9:fa:49:31:41:62:62:1a:50:3b:
bb:21:5d:03:9e:ab:3c:b1:af:e8:b7:16:9b:f7:ba:7d:71:eb:
c7:8c:f9:ed:20:18:9b:18:f9:82:35:c9:18:5e:0f:65:bb:42:
c8:12:80:48:ab:fc:db:be:3c:2e:b9:1e:e3:74:78:48:93:14:
54:c2:66:9b:e9:02:ac:bb:bd:a9:3f:a0:b2:37:ac:25:17:fa:
25:fc:36:82:c0:ff:41:d0:74:af:35:91:d0:55:89:3c:28:9a:
c8:ea:72:35:f1:56:a7:b1:47:b2:a8:d0:bb:df:e6:4d:43:b0:
d2:34:3a:99:21:13:31:6a:0a:7f:49:da:6e:60:ec:fa:63:26:
e1:2a:0a:c0:4f:50:f7:49:1e:74:15:c0:c8:ff:be:56:30:3b:
ad:2d:3b:15:83:d1:2f:92:75:d5:5b:41:02:3d:b0:86:cd:5a:
cd:9e:fd:ea:27:07:99:bf:cc:74:cc:f3:7a:7c:6c:3e:c4:11:
a4:73:3c:e2:ac:da:eb:d0:28:19:11:01:28:e1:4c:b7:75:56:
d2:d1:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:12:19 2025 by rpki-client