Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: lM7ZwS9bO2pkwRgNgHCVB6zVf2XgqkDaLK1WZZFl4wQ=
Subject key identifier: 25:A1:6C:83:D9:D7:A1:B5:95:E8:E7:FC:7E:E7:15:F9:F6:7D:6D:BA
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 0198D5835572A2C295D56429D9D16166A88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 04B9
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: OzX1cYyR0FQjleEJlLLwL4TFXBClMSXM1i7mt2G2xVs=)
2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:55:72:a2:c2:95:d5:64:29:d9:d1:61:66:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=25a16c83d9d7a1b595e8e7fc7ee715f9f67d6dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:2c:61:98:bc:d6:50:f7:f2:80:c9:98:90:
39:bc:16:5a:e4:45:cc:4f:7c:da:ec:67:93:d3:e6:
64:71:58:30:9a:78:7c:61:7b:aa:85:1a:0c:b5:36:
db:0e:d2:f3:48:f3:8b:5a:af:1c:75:57:9c:53:a6:
6f:15:90:9e:95:7e:b6:b3:63:fa:1a:4a:e3:aa:d8:
67:61:e4:fc:56:b0:63:17:5b:33:f4:56:c1:11:12:
2f:20:be:53:c3:3b:77:31:bd:80:15:1e:27:f8:15:
db:94:21:cc:f0:91:7b:09:c4:5c:ea:13:b0:a3:66:
87:db:e2:8e:48:b2:c1:20:c8:9d:9f:89:7d:21:39:
ac:8f:b2:39:0e:af:9f:98:af:f3:3c:b2:60:f6:5a:
44:ef:5e:02:d5:b4:9d:49:8a:e8:69:e3:91:82:1a:
6c:08:c9:ac:2f:d8:3f:c9:00:7d:e2:e6:c7:3d:f8:
d3:e0:67:40:4b:c2:45:99:e6:08:a8:0c:7f:f5:18:
e9:8d:bd:fc:03:d1:bd:19:96:43:2c:2f:4d:52:40:
03:da:76:59:33:f3:59:d4:f0:63:50:2b:45:25:7f:
06:87:b9:a9:d6:17:fe:51:ee:8b:5e:3e:4a:d6:74:
eb:18:58:f1:ad:bd:f9:dc:4b:44:68:ec:ea:86:d4:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A1:6C:83:D9:D7:A1:B5:95:E8:E7:FC:7E:E7:15:F9:F6:7D:6D:BA
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bb:64:0c:df:bf:46:f4:4f:03:d0:06:50:16:18:29:51:9c:
ef:e7:dc:33:23:7e:75:e6:48:3e:45:84:c9:08:60:25:9f:a3:
91:0a:99:5f:ea:13:ed:39:80:19:a2:83:50:66:ad:1a:cd:e4:
bb:f4:d4:f9:09:d4:32:fd:23:e9:df:f6:ba:09:a3:32:13:dc:
ea:87:90:b6:3e:c0:2c:da:f6:2a:00:8f:bb:a3:0e:24:2c:dd:
2d:50:90:e7:0f:04:67:0e:aa:8f:9a:c3:04:cf:f4:cb:c7:f8:
65:44:b0:57:d4:01:50:8f:56:28:1e:be:b2:60:d3:68:1f:c7:
f2:d7:90:0a:9c:47:a5:35:18:d1:70:f3:81:5a:3f:20:ab:28:
eb:f7:fc:2c:25:2f:b4:8c:d0:67:95:4d:12:14:7c:d7:0a:77:
40:03:53:41:03:83:70:bb:a7:bc:36:4d:9b:d9:d4:53:fa:c5:
ce:1f:44:64:69:ec:ec:9c:b5:51:5d:9b:ff:ab:d8:45:0e:63:
9b:26:98:1c:ee:14:43:b0:03:13:3f:32:e1:5b:89:10:12:c1:
1a:24:07:0b:de:63:cb:44:46:51:47:3a:a0:15:f4:88:83:95:
22:8e:c4:df:7b:89:30:21:78:e1:6e:82:53:f7:2e:a2:8c:67:
19:ab:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:54 2025 by rpki-client