Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
File: Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft (raw, json)
Hash identifier: tItodMduHA5x4UfOrFlxjlUg8dHxR+knoZ89VGOtezw=
Subject key identifier: 89:60:04:86:30:8D:AF:C7:3F:CB:3B:20:87:91:28:B7:02:B4:D8:28
Authority key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Certificate issuer: /CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Certificate serial: 0198D473D73B1E7EE386655D808934B6C40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
Manifest number: 0329
Signing time: Sat 23 Aug 2025 01:03:38 +0000
Manifest this update: Sat 23 Aug 2025 01:03:38 +0000
Manifest next update: Sun 24 Aug 2025 01:03:38 +0000
Files and hashes: 1: Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl (hash: 4EaX0aWu+VC0UDjD2FKZ9OPUuUYowz7Riq/dmnbfBi0=)
2: ZyPIESuaSWPIuQmq_le4sKOKISE.roa (hash: ZskQdIcp36rlr+2ORbgrG1PrwisAu9ueRcvHTkIY4YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d7:3b:1e:7e:e3:86:65:5d:80:89:34:b6:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Validity
Not Before: Aug 23 01:03:38 2025 GMT
Not After : Aug 24 01:03:38 2025 GMT
Subject: CN=89600486308dafc73fcb3b20879128b702b4d828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:45:5a:55:61:12:6b:1f:1d:44:1c:8e:7c:
e7:c6:08:c3:4d:e5:7c:77:dc:e4:24:27:7e:cb:c5:
8a:a8:57:8d:89:26:e5:9f:fa:d6:1a:68:10:7c:d9:
fe:65:b8:03:7d:a2:80:a6:e1:b0:fe:64:da:21:77:
02:d8:31:24:fd:fa:75:0f:4e:5f:17:09:ec:18:f1:
61:04:47:2c:33:79:a9:74:25:42:7d:3e:57:4c:bc:
9c:29:fc:bb:47:a9:a6:53:8d:d3:65:94:58:0e:53:
cb:d4:11:61:a3:f6:68:b4:01:f4:b2:a5:f3:0b:99:
f0:75:f1:ae:de:6c:26:06:20:22:f8:c0:48:45:87:
52:9d:8d:f6:3f:6c:9f:7d:25:02:ed:ad:c6:ea:70:
41:6e:22:e7:80:a7:18:60:6c:d7:8e:e0:59:af:5d:
88:b8:08:09:78:9a:31:0e:27:6b:5a:24:c3:59:62:
cc:68:16:2f:fa:3b:89:5a:b3:06:74:c8:ff:fb:f9:
a1:df:51:85:94:69:6f:8e:20:62:56:63:d5:44:2e:
a4:1c:5f:ed:b9:81:6c:61:f0:36:b3:8a:f2:cd:b3:
69:d8:9c:79:82:3f:9c:6a:0b:93:0b:a0:5c:7d:ad:
4e:89:01:b0:cd:be:86:ee:e6:25:65:10:ad:89:78:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:04:86:30:8D:AF:C7:3F:CB:3B:20:87:91:28:B7:02:B4:D8:28
X509v3 Authority Key Identifier:
keyid:32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f1:2c:03:85:57:46:bd:f7:1c:fc:25:16:ab:b9:4d:60:a1:
81:2c:3a:80:b8:05:ec:97:af:28:b2:68:96:1f:e9:4c:89:65:
93:a3:d9:dc:f3:ec:12:32:97:45:30:72:62:aa:a6:b7:19:f1:
18:7a:9f:8a:7f:98:69:e5:bb:f9:2a:03:6d:aa:05:cd:3a:57:
ee:c1:5b:d7:0d:3e:50:88:83:a5:cf:0c:a6:c0:2a:fc:03:71:
41:34:44:8e:02:99:cc:31:64:e3:d4:51:c0:c0:88:f3:cc:74:
67:31:7f:c6:ba:21:ea:21:75:bd:93:9f:4e:e2:5b:11:bb:e7:
da:7c:5e:c6:ae:8b:8c:17:cd:c4:ba:c4:d0:6a:c3:9a:03:c4:
3c:0c:c2:cb:8c:26:e8:ac:4a:c1:78:f5:7e:38:34:f4:a3:69:
90:9a:93:f5:d4:fa:b3:fe:07:6f:17:99:fa:d8:e9:0d:17:17:
bc:9b:16:f7:31:bb:33:39:81:d6:a3:27:00:10:68:b5:b2:a0:
be:f2:04:42:79:47:7f:a0:c3:b7:88:f6:ac:76:16:b5:06:34:
6c:50:79:f3:1a:a3:e5:61:d4:96:45:91:03:0b:24:e5:2b:25:
2c:63:7b:e0:a2:1b:59:aa:62:5c:80:4c:09:a7:9e:35:44:c5:
98:67:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:28 2025 by rpki-client