Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: acEhMtohZfKyZCoCAue/sbRnmiwRTNP7G3SGMmU3By8=
Subject key identifier: C4:68:82:99:8F:39:11:58:A1:CC:E4:4F:BA:9E:9D:1D:39:7E:21:78
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 0197B6A22D68AE66748678BE2D64FDEC7D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 14E3
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: eUC78a5iIDA3NnkTRgfvxwNqxjg.roa (hash: gOCTr9qoGQ7aucr1ozDn80KAKdoZpLb4iX/BnNIbZIY=)
2: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: 0iKDE7PxWoNCEhV/rD1QJ62FrZsHigqEY3Q7oGXE7zQ=)
3: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2d:68:ae:66:74:86:78:be:2d:64:fd:ec:7d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=c46882998f391158a1cce44fba9e9d1d397e2178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:bc:cc:15:a4:e3:fc:7c:3d:4c:ac:5f:5f:
75:12:e7:39:64:94:43:4e:4c:e6:f3:66:00:4e:e8:
8b:05:63:55:e9:6e:72:94:94:c3:09:0f:e1:40:9b:
43:07:bf:a7:3c:14:32:cd:46:20:62:85:c9:e6:6a:
e7:8f:9d:b8:92:13:41:92:b3:03:e8:e0:db:f9:f7:
bf:77:4d:12:1f:0e:5c:78:af:3b:3e:5f:31:93:94:
c2:04:04:19:ea:91:ce:1b:c8:f6:7c:9a:51:41:bc:
d0:44:80:c5:4a:9c:ca:98:99:99:7a:d2:b1:f5:56:
a7:21:71:47:2f:c6:d2:aa:5c:82:6b:d1:7b:c4:0e:
c5:a1:86:19:5a:9c:e3:24:63:61:29:09:2a:ab:b7:
bb:92:7a:22:b0:42:6e:0b:bb:43:51:23:8e:89:f1:
b8:3f:0c:a4:14:28:88:d7:7d:93:7d:75:5c:ce:2d:
26:76:ef:2a:b8:67:2e:f1:9c:bb:c7:57:d3:f7:7b:
1c:2d:9e:c7:5b:f0:1a:0c:61:a3:fe:c9:06:69:54:
1f:ff:f0:a5:6a:c0:91:c4:b3:7e:13:95:12:14:ca:
5f:a8:46:7e:1f:db:cb:92:14:94:6e:fe:78:11:65:
88:e0:c5:db:1e:b5:1e:17:ad:85:13:0a:7f:29:69:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:68:82:99:8F:39:11:58:A1:CC:E4:4F:BA:9E:9D:1D:39:7E:21:78
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:98:e8:24:e5:24:bf:3c:ee:13:92:2c:91:72:aa:21:b3:02:
79:5f:83:f2:83:17:95:65:b9:f8:3c:f3:99:43:81:2e:e4:c5:
df:04:69:df:69:06:f0:0a:b9:51:db:c0:88:aa:15:55:41:fe:
09:46:13:8a:4f:d5:36:29:9e:dc:40:44:6f:d7:48:20:cd:15:
25:c4:e8:95:5d:ff:70:9a:c4:c5:de:02:97:11:e9:6b:97:c5:
0d:82:de:d0:2f:c2:a2:06:c5:80:04:51:74:d1:0a:10:c6:65:
16:f5:b0:52:11:4d:77:df:16:a3:5b:70:18:38:dd:d9:1c:1c:
8f:3b:ac:69:3d:fb:0d:48:ff:3a:e9:db:b7:d6:d8:8f:1b:ce:
d6:90:b3:c1:37:ae:6c:b0:c5:6e:f4:ba:be:1f:8f:d9:b3:fe:
56:e7:53:7c:7a:f1:ae:fe:33:ff:30:5f:0b:8b:d7:2a:58:bf:
ac:19:69:2f:b8:d1:6c:9f:fc:1a:5f:c4:30:99:49:cc:7c:f9:
58:b5:9a:b1:d4:b9:67:3f:3f:99:b4:dd:f8:b3:12:eb:b9:b9:
23:bf:61:f1:b9:0c:e9:29:69:f9:73:09:e0:d2:86:21:96:d8:
55:db:9c:5b:38:9e:d3:73:30:c8:a7:2c:ff:ee:d0:85:09:5b:
db:8a:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:57 2025 by rpki-client