Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
File: mSAfYJ56iT2obPDrvKS79HJ51hc.mft (raw, json)
Hash identifier: veFn2dYenhoQW/RSCjI5+oLhwNBt1sw2Qt5pfsA8C84=
Subject key identifier: 81:33:D6:B3:97:50:C1:7D:9B:C3:55:6A:98:76:A0:0F:91:72:14:BB
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 0197B7EA417B295D76D974D1315071ED0D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
Manifest number: 044D
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: 1tSheZow3C5eA6jOu_MWtrfHmEY.roa (hash: KFhShtQvmMD0Mr4HPxFeWZgSKSgyixhc5C8a67+FVZE=)
2: mSAfYJ56iT2obPDrvKS79HJ51hc.crl (hash: LavPES+XYr5Lnzxv51p+Ssco0jS5za7XUMyja+rKmqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:41:7b:29:5d:76:d9:74:d1:31:50:71:ed:0d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=8133d6b39750c17d9bc3556a9876a00f917214bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:b6:41:35:96:d9:b5:56:e6:00:bd:42:69:
f3:5a:6c:d2:5f:ab:16:7c:da:e5:73:c7:da:0d:b9:
e1:ce:c8:68:7f:71:1f:78:7d:dc:56:8e:a1:5f:eb:
86:6b:cb:8b:74:d5:72:23:32:00:c2:dc:97:d7:5c:
81:39:95:77:d0:6d:e5:9f:29:f5:d3:1d:f4:ec:d2:
d3:7e:24:cd:84:f5:38:6e:d4:9d:dc:4a:86:3f:50:
ba:c9:07:45:c5:9f:6a:f8:5b:2f:88:58:9a:12:bf:
eb:5e:f7:6c:2a:b4:25:6f:14:1c:ef:58:30:7d:12:
1d:df:ce:c6:d6:71:fd:88:2a:5c:bf:44:84:63:94:
71:22:3d:36:f2:5f:66:55:aa:a6:b5:05:c3:e6:6d:
91:1e:57:5a:1a:68:85:c7:86:56:e5:6c:3d:d7:56:
5a:9a:14:86:a1:00:5a:92:f5:5f:d6:1b:92:b7:b2:
53:15:ca:36:d7:4f:4d:a8:15:26:5c:62:b1:50:36:
b9:3f:8d:83:7f:85:99:1a:5f:57:b3:c0:fb:d5:32:
58:93:0f:b7:55:89:6e:7e:4e:25:20:5c:b7:8b:e2:
61:44:45:44:1c:e2:88:01:ed:fa:40:48:76:e6:79:
5c:43:2a:51:e4:94:91:48:b6:36:49:a2:7a:dd:9e:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:D6:B3:97:50:C1:7D:9B:C3:55:6A:98:76:A0:0F:91:72:14:BB
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bf:04:b3:71:d6:2e:95:15:87:e4:96:91:a1:8b:62:df:56:
55:35:da:65:9b:7e:0e:95:86:ff:8e:a0:b9:c7:ec:e0:89:ee:
c2:b4:3d:74:63:e1:ec:b8:d6:7b:63:02:99:85:54:bf:88:1a:
db:dc:53:94:77:06:46:91:34:12:56:90:8e:47:d9:03:b6:bd:
b8:be:37:2b:d4:07:36:b2:d3:ad:02:5b:f2:08:de:50:13:c1:
5b:ae:8f:7a:fc:bf:a8:91:b5:06:c3:81:f0:04:31:3a:b6:2c:
8b:de:bd:b8:eb:15:8a:05:45:9c:a8:9e:7b:cf:f2:8c:dd:f8:
2a:66:4c:b4:41:6b:b6:25:ba:61:e5:81:6c:8e:7a:b1:79:b8:
55:20:7b:cd:0a:7d:c8:fe:6c:00:1e:84:f7:64:85:09:5f:c7:
0f:ec:c6:c3:5c:20:c0:37:21:dc:3a:67:b4:a0:d7:8c:0a:e8:
95:77:39:35:20:6b:2e:5d:9f:9d:e3:b7:a6:79:7d:06:65:8b:
80:5c:a5:96:87:10:89:f4:41:ad:45:59:f8:5d:20:c3:9d:0b:
3d:e3:f1:76:4b:43:d8:ab:38:b8:44:4e:57:47:92:65:fb:2b:
e0:7b:01:19:57:d2:09:4d:8d:5f:81:5e:f1:a4:ed:79:46:bf:
6f:3d:b3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:38:34 2025 by rpki-client