Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
File: mLERYbntS7CKACbVz9H-yWh8GcM.mft (raw, json)
Hash identifier: k9kf38ENQEvqe+0SmPwvnfNmD6xTCqnC4jLZ/iBHkh8=
Subject key identifier: 48:62:86:DC:22:FC:C8:A9:0C:C5:CC:67:1A:C4:17:FB:55:7D:43:EA
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Certificate issuer: /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial: 0198D5F1DC9C9D6B52E43EA03D8638CE6A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
Manifest number: 0833
Signing time: Sat 23 Aug 2025 08:00:54 +0000
Manifest this update: Sat 23 Aug 2025 08:00:54 +0000
Manifest next update: Sun 24 Aug 2025 08:00:54 +0000
Files and hashes: 1: Cm8RCYhViL8QXogPawjCQz1KEOE.roa (hash: 0Bf8kPU+ifdON2kDga7X6CtCb4LJyzlqkerUdEy/siA=)
2: mLERYbntS7CKACbVz9H-yWh8GcM.crl (hash: jurfoeCVG6kSdBvFHnN+oLhxmR31lYV1jSUjz083SC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:dc:9c:9d:6b:52:e4:3e:a0:3d:86:38:ce:6a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Validity
Not Before: Aug 23 08:00:54 2025 GMT
Not After : Aug 24 08:00:54 2025 GMT
Subject: CN=486286dc22fcc8a90cc5cc671ac417fb557d43ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:c4:85:e2:4c:81:33:3e:16:5b:c7:14:8d:
5c:79:50:db:9e:b9:f7:ea:15:71:2f:ff:a3:56:9e:
c6:13:06:53:88:43:1a:27:b1:95:40:16:c5:fe:47:
ec:af:b6:c1:60:0b:1f:8a:5e:55:af:08:16:9c:c3:
e2:64:cc:b0:6b:9a:52:54:15:0e:1b:ed:d2:06:20:
7c:e6:d1:71:81:b2:f0:95:03:50:40:c3:20:d1:b6:
aa:0a:fe:2c:ef:6d:2a:72:bb:50:cd:bf:39:08:8c:
c9:0f:72:b3:ad:06:2a:93:24:d2:c0:8d:98:52:bc:
3e:79:72:de:cb:08:db:d5:08:33:78:66:3a:53:3f:
69:4d:62:f8:56:9b:74:27:34:d6:14:78:4a:4b:fb:
14:a4:a3:53:83:c3:d5:9a:26:a4:60:18:2d:ab:76:
24:de:c7:24:2a:aa:57:ad:fb:5e:a6:30:90:78:d2:
70:15:95:07:95:6e:d8:f5:89:6e:e2:57:8f:9a:5c:
d1:c6:58:85:07:39:ea:84:d8:a1:18:15:e1:e4:09:
5f:04:e4:98:9c:d4:8f:d2:17:77:ff:1d:b2:72:f5:
e7:16:f9:b1:03:0e:ef:8f:01:d9:02:1b:09:df:a3:
97:f2:d5:5c:cd:54:9b:1f:46:5e:a4:06:51:4f:6b:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:62:86:DC:22:FC:C8:A9:0C:C5:CC:67:1A:C4:17:FB:55:7D:43:EA
X509v3 Authority Key Identifier:
keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8b:4b:a7:90:0e:36:2c:96:6d:ca:89:a5:44:ac:d9:f7:36:
cb:35:4c:58:50:64:03:a9:21:e5:13:90:5b:db:4c:8a:1a:3a:
bd:c5:00:6b:ec:53:c0:25:c4:17:89:d8:4f:4b:1b:12:fd:4b:
73:80:c8:09:e8:43:bb:69:ce:c2:42:2e:e4:12:bc:3d:cb:74:
9b:7c:4c:75:27:4a:5d:53:df:64:aa:77:a1:f8:ff:89:be:ca:
72:79:38:57:8c:32:9f:62:24:82:12:e5:be:74:39:10:65:f9:
88:0d:2a:d1:64:54:4b:37:4f:9c:80:ca:8d:c9:76:37:26:f7:
a0:3d:41:4a:42:2a:88:6e:9d:b7:a9:fb:7e:46:84:66:4d:ed:
b0:31:71:c1:1b:9f:c0:95:4d:84:d2:1c:c4:b0:c7:e1:97:a0:
50:47:de:c5:88:84:56:40:1e:3c:c8:6d:b1:50:3d:6f:c1:97:
3d:cb:d7:a8:f7:f0:e2:12:8b:ec:6c:be:21:be:5c:27:35:75:
5d:dd:7c:43:2c:a4:58:01:c8:80:bb:3a:e2:81:07:24:59:de:
8e:ed:1b:7c:6a:05:db:f3:0d:d7:52:ae:71:78:71:5f:ce:b7:
46:b6:05:43:ce:a3:f4:fc:85:93:b1:e2:dd:a9:bf:19:07:2e:
a4:f9:8c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:56 2025 by rpki-client