Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: F5gQjmd9KFJ7oZyi9B3LSRn8oSLZ7gBQy33KSHAS3vU=
Subject key identifier: DB:73:92:4A:E2:9E:04:81:05:75:4F:71:90:B9:88:A5:2E:B6:9A:CD
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 0198D66098BB063141D3E6D2BB2EFF69EB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 11F6
Signing time: Sat 23 Aug 2025 10:01:51 +0000
Manifest this update: Sat 23 Aug 2025 10:01:51 +0000
Manifest next update: Sun 24 Aug 2025 10:01:51 +0000
Files and hashes: 1: ZGrcpUqsEOsf7o6fu8OWpNq4gNY.roa (hash: wpQNPwvek3Rp2M6cV1DD/Iu66bw6RcokC6IaW3yHq/w=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: sL0Ebuztl/lARWv6s0uFKRWcyKuNiB4HFcrekpZ+nGg=)
3: gdtLNhs1JQCPzai-VNs9JYZHoWI.roa (hash: ZjSEtnU3HKrgHwmUc/jOdFVfQULcq2id5Yk1K05ZWWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:98:bb:06:31:41:d3:e6:d2:bb:2e:ff:69:eb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Aug 23 10:01:51 2025 GMT
Not After : Aug 24 10:01:51 2025 GMT
Subject: CN=db73924ae29e048105754f7190b988a52eb69acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:cf:59:ee:df:78:50:af:20:7e:9f:76:8a:
79:3d:dd:27:c2:8c:a9:2a:0e:1a:e9:0d:a8:16:95:
c8:7c:7e:2e:e1:32:17:11:42:1f:2c:09:0e:da:5e:
cd:80:97:c0:03:cd:a6:4c:ad:a6:a1:2a:b1:d2:f0:
c8:9a:56:da:9b:98:b9:22:3c:78:0b:26:28:21:b5:
ce:cd:52:c7:93:a8:ba:42:28:da:1b:09:eb:5a:21:
17:6e:a2:2c:a8:af:17:6f:72:8c:27:26:bd:78:0f:
f5:89:13:b0:8e:82:0d:d4:55:73:93:e0:1e:bf:c2:
22:dd:9f:6d:a2:13:db:0c:1a:5d:20:55:b0:7e:72:
b3:f6:eb:cb:76:41:ab:9a:e0:fe:ae:30:cf:b6:87:
c3:c8:a6:d9:3c:0a:6c:f9:8a:84:d9:eb:df:42:ab:
74:6b:f6:4f:e6:dc:c4:23:ae:a0:58:16:4e:50:6c:
15:ff:85:14:5b:c6:7e:a8:0e:b0:e2:24:04:bf:e4:
fe:92:d9:11:8a:0c:e6:9f:82:33:68:c9:3b:f5:39:
da:f0:31:3b:40:1a:3b:fa:17:91:f5:be:11:ae:50:
ae:08:c1:e4:f7:05:dc:c9:12:17:74:19:74:1f:f4:
47:95:5f:ef:67:74:3c:6d:fd:04:e5:c7:c8:88:32:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:92:4A:E2:9E:04:81:05:75:4F:71:90:B9:88:A5:2E:B6:9A:CD
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e5:75:eb:3d:29:5b:cf:4e:07:fc:43:0e:54:d8:7b:ce:fc:
49:ad:a8:a8:ba:0f:2d:2f:94:47:aa:6e:38:f7:c4:8c:43:89:
c1:8b:34:c7:4d:a4:5f:51:ef:7f:b3:b0:54:34:4b:3f:a1:74:
84:e0:9a:6e:5d:6f:87:1b:57:62:63:a6:2e:65:85:fe:c2:a0:
64:49:76:17:d5:1d:b5:bb:45:9d:00:7b:9a:79:b1:97:6d:4b:
d9:59:17:8f:d0:38:68:73:65:f0:59:10:16:42:c3:bd:45:b9:
01:54:3b:b3:31:54:4d:cd:cb:9a:49:82:51:24:5a:00:f7:57:
b0:4e:d1:a4:b3:6b:ef:00:c8:91:b7:20:b7:40:78:b9:af:e3:
6f:7d:dd:70:7c:49:ea:25:1e:4e:8f:12:f9:c8:94:ad:8f:78:
06:29:66:1e:e0:64:4d:88:0c:1e:18:b2:8d:ff:aa:43:bb:27:
d5:45:06:a8:7d:93:94:9e:29:c4:89:8a:6c:62:a3:45:fa:79:
b5:03:56:bf:ea:e4:5c:fa:7e:62:24:e2:ad:8f:63:57:8b:4f:
4b:96:c2:91:94:bb:dd:86:77:2e:fb:17:16:2e:8d:ec:1b:e2:
18:66:79:95:e0:b7:03:63:db:26:c5:f6:7d:78:4a:c8:0a:91:
a1:d0:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:22 2025 by rpki-client