
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier: ogSppLknr392xq4mALr2fQZGvLGCl/+Ec32aj0Ri9zY=
Subject key identifier: 53:7A:5C:80:2D:44:6D:EC:10:7B:6C:EC:27:4B:16:B3:03:3D:BD:3A
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial: 0198D6609A4F30398488507CFA798A4B88FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number: 077A
Signing time: Sat 23 Aug 2025 10:01:51 +0000
Manifest this update: Sat 23 Aug 2025 10:01:51 +0000
Manifest next update: Sun 24 Aug 2025 10:01:51 +0000
Files and hashes: 1: Keu4ORQGNbpvqRyHyCkLTUO_lOA.roa (hash: 8AaJ0cxF0N1CmP6IwiLLt/ItfrvG5f97UQsDx1F7lhM=)
2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: V/Zru/ocaQ8gj1WDOtnT7GsdwSVeyw/uJDNhpvuWL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9a:4f:30:39:84:88:50:7c:fa:79:8a:4b:88:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Validity
Not Before: Aug 23 10:01:51 2025 GMT
Not After : Aug 24 10:01:51 2025 GMT
Subject: CN=537a5c802d446dec107b6cec274b16b3033dbd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:14:06:99:2d:fc:b9:3c:54:2d:d1:a0:b7:
a8:4a:95:88:ee:c8:9f:c5:d8:14:bd:30:26:59:47:
2b:38:f8:42:ec:c4:35:68:de:6c:62:6f:13:0f:d6:
f5:08:e8:f5:ed:0f:4d:71:26:8e:bf:92:de:d5:de:
d9:19:1f:f1:e6:61:85:fc:48:af:2e:7c:50:e5:cf:
24:45:5a:db:69:a7:55:65:a3:83:b5:ac:39:62:ab:
90:5c:a6:41:37:d2:45:ff:a8:e0:b6:7b:a9:3c:59:
e7:e6:c3:5a:6c:73:bb:ed:4a:37:3a:fc:95:2a:cc:
f2:fa:55:9f:2f:09:b7:08:15:d5:76:8d:e9:83:23:
90:92:81:15:89:1f:50:9e:e9:3e:3f:63:19:e8:aa:
a9:9c:b0:e0:89:ac:76:68:65:72:b4:ec:64:5b:19:
03:03:2e:28:32:77:a7:68:48:ec:72:3a:a7:53:2b:
02:a0:74:8f:75:23:f1:a9:59:5b:b3:01:7d:1b:ef:
8b:d0:1f:5d:70:87:55:f1:55:5e:be:b7:f0:4c:9f:
67:71:47:86:95:d9:a0:39:79:12:ea:99:30:bb:29:
37:b9:c2:b3:73:95:27:16:cd:ef:c8:74:8d:1d:1e:
4c:78:c1:75:1b:bb:0c:0a:97:30:69:45:97:56:f2:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:5C:80:2D:44:6D:EC:10:7B:6C:EC:27:4B:16:B3:03:3D:BD:3A
X509v3 Authority Key Identifier:
keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:88:44:2c:75:6c:59:d9:ac:e6:32:d9:8a:50:01:4e:f1:fd:
4e:45:0b:dc:bd:bf:d3:80:2d:54:3d:63:9a:97:1f:4c:92:64:
b4:7f:75:ff:98:4f:a8:05:82:80:3e:a9:4c:87:9a:bf:e4:26:
98:cf:96:bd:48:04:1d:26:0d:9d:ea:aa:38:15:0b:16:e9:7d:
48:5b:c0:fd:8b:cc:be:cd:f7:21:7b:f4:d3:bb:9b:53:3d:1a:
53:d4:b7:d6:0c:33:41:67:39:08:cc:33:e0:10:3e:fe:ab:65:
94:a8:79:49:7e:d1:c5:9b:f6:29:41:e0:fc:c6:b9:74:09:4a:
b8:56:19:7b:d1:2c:e2:29:c4:94:22:98:d1:d6:fa:2b:17:43:
41:98:3c:a7:fc:c6:49:7c:84:5c:a8:c6:a6:0d:fc:e9:6d:f6:
42:19:77:50:ee:d0:2f:30:6c:71:65:c7:91:3e:b3:9b:36:98:
0f:79:b8:85:9c:db:7a:d5:87:92:b2:0b:d8:87:31:fc:e9:fc:
99:f7:44:61:25:f2:03:45:9b:02:2d:e1:4a:59:a3:b9:e4:ae:
5c:ef:1c:2e:d1:f3:9e:9e:df:9f:bc:0c:e1:99:67:0f:99:d5:
29:0a:7d:5f:37:31:62:45:de:3d:db:d8:11:d9:25:82:59:2e:
2a:cd:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:42 2025 by rpki-client