Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: ZNI/0HthHOVcGFuGEJ78Prny/JdTq/up3gL/tV3ZAuk=
Subject key identifier: C2:76:32:33:AE:CF:75:74:53:C8:8C:64:38:66:27:4D:A7:9C:34:E4
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 0197CB3A02912AE162B487F9A4337C3C233F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 28
Signing time: Wed 02 Jul 2025 13:01:05 +0000
Manifest this update: Wed 02 Jul 2025 13:01:05 +0000
Manifest next update: Thu 03 Jul 2025 13:01:05 +0000
Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: Mi1LCN/KmcLagKv/36i3k0czS/TgwCcCdiQrWyp3EqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:02:91:2a:e1:62:b4:87:f9:a4:33:7c:3c:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Jul 2 13:01:05 2025 GMT
Not After : Jul 3 13:01:05 2025 GMT
Subject: CN=c2763233aecf757453c88c643866274da79c34e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:e4:76:12:7d:d1:13:e6:16:41:4a:58:3c:
70:75:60:d1:3e:e1:ff:75:cc:c4:d6:c1:ad:b5:f8:
52:19:67:17:0a:e2:17:e0:7d:12:2d:b9:21:12:48:
d9:1a:1f:7a:7c:21:1e:33:cb:57:91:31:d2:e7:13:
a5:c8:40:2a:4f:0e:89:bd:a2:ef:49:b0:36:0b:07:
a9:b2:1b:2a:f4:79:f8:d1:ad:28:b7:ee:1e:ba:30:
b2:59:2b:35:6c:bb:20:cb:f0:e4:2d:13:82:c3:d8:
a4:f3:6a:53:a9:08:41:bf:32:f4:c7:18:2b:40:14:
75:e1:06:d3:15:05:aa:63:53:85:3c:fc:73:f4:0a:
ed:a3:7f:fe:85:26:97:20:24:c9:3f:8e:9b:7b:cd:
f1:4e:22:93:4c:fa:07:6a:9e:e3:03:26:75:39:23:
6e:a8:ef:8e:a4:32:56:6c:10:fd:18:e4:32:e9:19:
93:51:e5:7d:88:73:ee:85:d9:12:0c:36:38:ac:a8:
71:ed:fc:63:3a:ed:21:bf:08:51:b6:c1:59:b6:16:
83:dd:39:a1:09:c4:d7:fe:9e:ab:90:a2:c7:34:6b:
26:e8:74:f9:1f:9f:62:b7:69:69:1c:46:22:32:e3:
c4:58:71:79:89:ce:3f:a9:2b:63:bf:63:49:22:5e:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:76:32:33:AE:CF:75:74:53:C8:8C:64:38:66:27:4D:A7:9C:34:E4
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cf:80:73:3c:43:78:bc:92:90:d6:74:46:1a:08:2f:8a:38:
47:f4:5a:3e:47:4c:39:ca:f4:f8:1d:0f:79:c7:ed:76:2d:3f:
b5:21:a3:7b:ae:8e:14:fc:27:00:9d:d8:e7:28:04:a1:49:55:
d5:c0:03:7f:3c:92:94:82:4a:a7:d3:e6:c5:75:19:d1:a6:a4:
7d:21:0d:e3:ef:8e:45:0f:8f:1a:ae:30:d9:69:18:5e:bc:4f:
2c:40:57:8f:d1:be:cd:8f:52:8e:21:03:e7:76:ee:8f:60:b6:
0f:ae:c6:5f:6e:55:2e:96:0f:07:77:14:51:d6:f0:36:b8:1d:
e0:97:a5:12:68:f3:6b:36:47:c3:93:e5:54:b1:9f:d4:f4:eb:
15:db:04:f6:73:8e:fb:cc:2f:ae:2d:fb:37:fb:5b:d6:95:81:
a3:65:f4:7c:4f:a2:06:4c:2a:5f:5f:bd:5d:c5:48:08:89:18:
6d:bc:ef:f3:8f:60:7b:a3:de:74:c7:9f:e9:b6:00:d0:4a:72:
fa:90:ea:44:82:d4:6c:da:b2:92:d2:9b:3f:4f:0d:26:76:cf:
af:9f:42:b4:bb:40:ef:2d:20:0e:ca:b2:3a:6b:a4:53:b5:b2:
8b:f0:2f:e6:e5:70:17:24:6e:0b:3b:aa:8a:84:f0:12:eb:6a:
3f:d5:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:32:59 2025 by rpki-client