Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: M0Sq4uLnUwU6zbx838tDsfpZNBeKcbPlpCzPSejdtrU=
Subject key identifier: 8B:5D:59:0B:72:84:B8:A6:F4:CA:F4:E2:AC:8C:C0:F1:0B:31:C3:A9
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 0198D7732970D59E6780206427F7CA57D934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0D5F
Signing time: Sat 23 Aug 2025 15:01:45 +0000
Manifest this update: Sat 23 Aug 2025 15:01:45 +0000
Manifest next update: Sun 24 Aug 2025 15:01:45 +0000
Files and hashes: 1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: VEdK8kot8Sd5jwJ7kBRQoU1l5CJ6YgExVNc9YKIvyhg=)
2: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (hash: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:29:70:d5:9e:67:80:20:64:27:f7:ca:57:d9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Aug 23 15:01:45 2025 GMT
Not After : Aug 24 15:01:45 2025 GMT
Subject: CN=8b5d590b7284b8a6f4caf4e2ac8cc0f10b31c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:b5:43:f4:9e:e9:76:25:dd:74:62:a5:4a:
10:68:63:75:56:fa:c6:92:26:b3:5b:d8:2b:db:79:
bd:be:92:d3:5f:8e:9f:43:bc:f7:6e:16:33:ce:ce:
cc:16:9a:9c:e4:ce:3c:4b:b4:21:29:7b:cf:a2:ea:
b8:f4:67:13:8e:9e:9c:94:ec:2a:84:35:e3:71:ef:
27:34:c6:93:ee:4b:3c:dd:23:cb:6c:59:9a:ef:87:
88:83:5a:b6:3f:c3:9e:22:55:36:f0:d7:1e:d1:80:
27:ac:b5:ca:8e:66:b2:f9:0a:9e:ce:e6:61:e3:50:
7a:91:df:8e:b1:4a:c1:22:14:59:95:7b:64:64:d6:
f3:75:db:8c:64:ad:30:44:0c:1c:1c:4b:93:02:2a:
6e:d2:f9:c2:46:0e:e7:ad:0f:d0:70:61:4e:96:72:
8b:ff:29:b8:f6:d5:44:3a:94:64:1e:55:4f:21:4b:
49:2e:8f:9d:6b:7c:27:7a:87:d0:78:b7:26:d3:02:
d3:cf:70:b8:46:35:11:93:7f:9c:c4:2e:91:14:11:
9e:fd:12:ba:77:68:6d:a4:42:b1:9c:de:92:d5:27:
ef:67:26:e3:5b:48:c9:5e:88:ef:d1:36:f5:19:e7:
29:be:dc:e3:77:f6:83:82:8a:7c:4e:8b:06:e8:ea:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:59:0B:72:84:B8:A6:F4:CA:F4:E2:AC:8C:C0:F1:0B:31:C3:A9
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a5:1e:6b:ec:59:e6:89:e3:3d:04:b6:18:32:47:4b:19:08:
5b:22:10:2f:c9:0e:0f:67:01:d5:b7:54:8d:39:da:8f:d2:ea:
0a:a0:8b:65:f9:20:1c:dc:09:d9:ed:0a:21:e3:9e:a9:96:80:
72:5d:85:e0:0d:14:cf:f6:2f:31:52:84:f5:08:38:07:42:b8:
89:6f:63:b6:65:dd:ec:70:73:9f:00:76:81:a6:8b:54:75:f0:
70:06:eb:37:a8:16:f5:46:93:d7:a9:f2:0c:e8:ab:20:d5:b3:
0e:f2:a9:c6:b2:21:3e:9f:02:2b:8e:26:f4:e6:52:aa:8a:c2:
71:cb:41:f3:15:a8:3d:d9:85:ac:05:70:c6:5d:ff:d4:09:f9:
ec:54:a3:30:01:31:0d:90:24:2d:b7:df:24:30:1a:c0:24:58:
85:7d:ef:d1:a6:37:81:c2:25:0a:82:0a:69:1d:46:17:57:a0:
23:7d:26:73:06:2d:43:e3:1a:4e:ea:20:d5:06:1c:d0:12:9d:
08:4c:12:63:7d:9b:ca:4e:23:5a:2e:ec:8e:60:fe:44:e2:83:
13:8b:4b:6e:f1:e4:b6:15:25:be:ad:17:79:6d:b0:02:78:a9:
43:59:17:fa:56:6c:a4:25:b6:f0:59:c5:7e:3c:f0:37:f1:4e:
52:d3:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:02:09 2025 by rpki-client