
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File: my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier: D7EcWjAIV6JYVU4rvPR23L9kgsi9Yb5Z8zgWigK/Lgc=
Subject key identifier: 10:A1:C8:F5:88:6F:17:4B:3E:DA:EE:29:8B:E4:A6:2B:E3:77:75:29
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 0197C4CA40D84B794885FACEFEAF9DFC5693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number: 13B3
Signing time: Tue 01 Jul 2025 07:01:18 +0000
Manifest this update: Tue 01 Jul 2025 07:01:18 +0000
Manifest next update: Wed 02 Jul 2025 07:01:18 +0000
Files and hashes: 1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: 9jxnSuPK2hutm1iQv3ocDjs5SEAxnmL6ypTznkN+TKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:40:d8:4b:79:48:85:fa:ce:fe:af:9d:fc:56:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Jul 1 07:01:18 2025 GMT
Not After : Jul 2 07:01:18 2025 GMT
Subject: CN=10a1c8f5886f174b3edaee298be4a62be3777529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:a0:8b:e0:1e:59:99:11:04:7d:f9:b0:dc:
87:71:4d:47:5f:45:1f:6c:7e:86:67:a0:b0:02:eb:
8e:00:a4:3e:03:a9:78:ba:04:88:e4:12:f2:b2:58:
38:c9:5e:b2:67:00:08:64:f3:2d:b5:b2:ea:cf:90:
0e:3e:a0:b1:cc:37:6d:28:f7:96:ef:b6:1b:2c:46:
3e:3b:72:6d:94:34:a1:b5:4f:4e:69:d4:90:e6:9f:
33:cc:09:5a:20:5d:fa:5b:6e:38:5a:5d:c2:14:ec:
06:9d:d1:95:6f:a8:1c:9c:8c:67:e0:81:37:f3:53:
a0:3e:47:3a:f4:e6:d7:13:65:6f:fd:37:33:1d:83:
86:fc:ea:c5:3e:66:c4:5f:eb:43:22:69:b1:96:44:
10:8b:ac:11:6a:f6:09:41:e6:58:1f:80:18:1f:8d:
44:fd:fc:69:06:63:11:15:3c:ca:b0:b0:82:5b:98:
6b:9b:4f:49:25:f7:b2:ff:fe:4a:ca:f8:1b:d3:55:
18:66:6e:2b:d0:78:ef:fe:49:d9:18:89:e8:77:87:
32:fa:55:bc:cb:7a:35:7d:ca:66:ea:15:31:dc:cc:
64:22:4f:56:d2:15:83:fc:5f:9f:79:f7:5d:29:77:
56:e6:cd:64:50:52:56:9c:04:3c:6c:ec:51:46:77:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A1:C8:F5:88:6F:17:4B:3E:DA:EE:29:8B:E4:A6:2B:E3:77:75:29
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a1:22:0b:01:cd:dd:19:d2:d5:65:ab:f2:df:92:85:a8:2d:
08:1e:59:69:32:04:88:37:6c:92:12:ec:22:f2:1c:df:b7:94:
cc:3f:7e:ef:c3:e8:b3:7b:82:2b:d6:c2:7b:82:21:a7:ed:53:
e1:bf:78:c4:62:37:e1:f7:ef:12:92:48:f0:e6:22:38:30:99:
c1:39:e3:5a:5b:6e:de:75:8f:34:51:8b:17:ba:bb:4e:7e:25:
44:57:71:25:8b:f1:09:b7:71:cd:4a:65:04:2f:68:cd:15:8b:
74:a2:1a:3c:1d:41:a9:68:1d:fc:5d:3e:86:97:45:1d:69:56:
a8:4e:0d:9f:03:bf:aa:f6:bc:8b:72:fa:3c:4d:56:41:2f:89:
37:4e:db:9c:b0:77:db:15:e9:cf:4d:a6:e8:52:1f:a4:89:cd:
bd:b0:71:0c:2c:38:6a:37:df:5b:ab:0b:31:19:73:b1:de:84:
0c:c1:6a:f1:46:46:35:63:42:86:0a:84:25:06:64:e1:20:f9:
f0:1d:f0:6c:94:06:89:f3:3b:5c:d3:57:4b:43:28:1f:04:f2:
00:46:2a:0d:55:d3:07:a7:90:47:53:24:bf:de:01:51:ea:4f:
08:65:6f:76:92:f0:b3:4e:1e:d6:54:96:c0:f5:ac:73:65:9a:
7a:f3:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:52:03 2025 by rpki-client