Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: LvDyM71sBJD2CtRLgNHD1ufnG24bgA7rl6Gvo5hu9ic=
Subject key identifier: 10:CA:50:31:C3:C0:EB:30:82:53:04:23:4A:CD:BD:E1:A2:38:DE:22
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 0197B7EA34D65432377A573378F0BF9452EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 12ED
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: QYd+99KBy45gn+YVHuPFbGPkQ0oyXMK3nJO2EWChTzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:34:d6:54:32:37:7a:57:33:78:f0:bf:94:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=10ca5031c3c0eb30825304234acdbde1a238de22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:22:29:38:cf:97:04:8f:69:da:6c:f1:eb:
ce:b8:17:39:29:28:8d:ab:bc:2a:9f:12:00:55:21:
f1:a1:7c:c2:e3:62:6a:fd:f9:d2:8f:80:06:bb:f3:
70:04:53:45:8f:4d:94:20:cf:86:73:a0:53:0c:37:
b5:05:b2:77:9e:19:fe:c6:48:ce:ff:2e:7c:79:7f:
8a:cb:07:54:89:50:4a:ab:01:64:1a:69:6c:57:9d:
dd:23:cc:82:d7:73:da:a9:d6:81:24:46:47:6e:9d:
5b:c8:fe:aa:00:87:f1:64:e2:59:8e:77:d5:f7:9f:
17:b2:e1:37:59:8d:79:8d:98:7d:f4:73:af:3b:fc:
1c:9c:99:ca:20:f4:15:c1:61:ad:90:f0:e5:95:64:
4b:7a:53:c7:e0:76:aa:a9:0a:42:03:69:66:97:e6:
2a:6a:43:01:39:fc:52:1c:c8:72:fc:3a:91:7a:71:
03:c7:75:a5:2c:a1:cd:86:d3:23:82:94:45:a5:0d:
4f:d5:81:bd:74:cf:19:d1:39:57:59:7d:df:63:3f:
de:63:a5:83:bd:fd:10:ab:a2:18:26:47:47:3b:1b:
7a:44:fe:08:fe:01:d6:e3:03:0a:a9:b9:2f:7c:dc:
0d:58:d3:ec:58:3f:a9:b3:ca:8e:ff:b8:87:fc:6f:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:50:31:C3:C0:EB:30:82:53:04:23:4A:CD:BD:E1:A2:38:DE:22
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:42:17:a2:a1:00:cf:57:68:6e:db:2b:7b:39:8f:8e:ee:14:
50:f1:b0:b1:17:36:e9:8e:fd:a8:ca:ad:a3:e4:61:72:89:79:
63:8f:7f:eb:60:60:f7:64:fb:52:4d:25:f9:2f:ed:af:0e:4b:
c5:16:ab:fe:ed:ab:1a:c8:ba:ce:66:42:01:f4:9b:6a:59:7b:
57:7e:58:86:91:d1:d1:43:9b:f6:ae:b4:4c:47:28:88:dd:2f:
52:c5:bf:34:94:df:1c:58:1b:b5:97:08:f7:7d:ad:9c:12:29:
5d:f7:3b:b4:29:66:2e:86:8c:67:29:d0:b9:21:53:42:f2:65:
b8:db:a3:93:92:02:6e:94:f9:e1:88:d0:f6:85:09:a6:ff:47:
36:ee:68:a6:b3:a8:af:d5:d8:49:39:3d:da:a6:da:24:b2:c5:
d8:82:f4:c8:ea:ec:5a:90:59:33:95:5f:ba:16:d1:12:53:45:
28:d2:f2:4c:ca:6a:7d:fc:29:c8:35:d2:3c:71:3a:8a:37:ab:
b8:ba:52:05:84:b9:26:1e:a8:7b:fc:5c:96:53:01:f2:4f:3e:
6b:89:ed:17:07:8e:5d:b4:da:10:ad:12:5b:f9:15:91:e4:7f:
d9:90:db:c3:94:a1:95:96:df:3e:e7:d8:52:ae:1b:81:f3:86:
8b:c5:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:46 2025 by rpki-client