Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier: SsiLVl3IobyyCFRxyqaBCyf0v4p2UaoVtyPOyBrr3uw=
Subject key identifier: 98:5F:C6:45:04:8A:E0:97:96:9E:80:2F:57:55:C3:12:39:5B:0B:97
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 0197B6D7AEF260ED0C61FCFD82F3C0E33E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (hash: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=)
2: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (hash: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=)
3: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: ftSigW5NKUQZ/eWLCs72tepsblJDaJ4mI6po0H3qMJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ae:f2:60:ed:0c:61:fc:fd:82:f3:c0:e3:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=985fc645048ae097969e802f5755c312395b0b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:fe:17:37:b3:bf:dd:da:7b:72:9a:14:1a:
2b:9d:b4:93:e5:a1:d6:36:a4:82:a4:f6:fb:f8:c1:
2f:8b:38:e9:72:5a:74:42:59:08:44:b2:ff:15:28:
fd:f3:e2:2e:d6:1b:f5:a5:bf:1a:fd:d8:61:21:0d:
4c:bc:d1:74:cd:b4:30:db:6e:d7:b7:5c:57:62:1c:
8a:fb:e4:a8:b6:7a:83:36:24:b2:3a:c3:db:18:b9:
fa:d6:02:b7:05:12:b6:f0:68:5f:77:d7:e8:d0:e4:
8a:b1:f3:58:47:a5:26:74:cc:ab:59:5a:47:8c:37:
6b:fa:80:bc:67:5c:45:5b:60:20:a6:a0:c9:2a:45:
0e:9a:a9:b1:06:f7:3c:69:ea:a9:cf:5e:df:21:9e:
8a:ea:9a:76:04:f6:49:bc:28:16:a2:aa:83:fc:09:
79:21:8d:0a:1d:b5:bc:ec:2f:d4:ba:de:70:4d:b3:
b4:30:8e:c4:44:3a:56:a1:c0:be:a1:36:98:c6:f8:
af:60:37:d8:4a:8c:ab:3b:d6:be:53:5f:ca:91:88:
e6:d2:20:64:93:46:a3:9c:4e:d4:cb:61:27:f3:58:
ac:04:93:a4:7a:10:ec:02:74:36:8e:08:57:0b:ce:
c5:0e:b9:15:48:b0:3e:c5:4d:80:e0:c9:9a:88:d5:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5F:C6:45:04:8A:E0:97:96:9E:80:2F:57:55:C3:12:39:5B:0B:97
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0c:5c:39:55:51:3b:4d:b9:e6:13:1f:6c:60:75:a8:0a:78:
80:f3:f2:00:5a:b7:3a:b1:bc:11:7d:85:88:09:8b:1d:38:95:
13:34:55:77:66:3f:23:c6:01:ad:0e:8d:9d:57:ec:0a:14:e5:
82:af:82:40:05:ca:a9:ed:e1:86:b4:62:e8:c4:e7:93:9a:c9:
73:19:af:e0:35:b2:4f:3b:84:7a:ce:4f:7b:5c:af:49:81:a1:
61:53:1c:eb:48:f7:dd:8a:47:de:8f:15:87:fc:04:94:95:36:
b7:24:bb:e6:8c:f5:e9:64:ba:94:11:c8:82:00:18:16:52:83:
ab:fe:4a:34:34:dc:f6:33:d2:e3:c5:58:f9:1c:d3:0a:a8:d4:
9b:c6:c6:08:f1:64:da:a7:e3:48:5f:b5:47:97:84:77:9e:c2:
9b:f2:8e:e5:6d:5a:46:fa:09:e4:f1:e4:e8:11:53:89:36:50:
91:7d:4e:9c:13:9d:b2:f4:36:c9:07:ea:5d:b1:d6:08:74:cb:
f2:31:72:55:69:db:b8:05:6f:b1:3a:af:25:94:c0:f0:0d:e7:
f4:32:df:3a:a0:fc:cb:5b:65:ea:e7:4b:53:e9:44:3b:a8:20:
a9:58:17:dc:87:fc:3d:de:aa:e6:f0:16:b4:01:5c:96:3d:d4:
8a:1d:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:33 2025 by rpki-client