Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: EM+C9G4TJcc3mQh1NlkGXJuOjVblhTsIGIelbKX89j8=
Subject key identifier: D5:88:A9:CE:21:E7:0E:87:46:5F:C3:83:F2:53:6C:CC:B5:61:4A:C6
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 0197B7458CE85C158D889D35D1307E986989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: 11EUti3lnSrvcME_sLAUVVEJCyA.roa (hash: zosfyuqqMAp/geMMw6u9z8/OyVXxmv9rqLq+GU2ia9c=)
2: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: C3b2SDzyThy5Zi+J73yJke+j0u54eWCcFMW/priH6No=)
3: pUNUzoKVem25Y_u6Wr9POh9WQoA.roa (hash: dUP9J5+eurE18pK8nZH6ohMEustwLaoHJPJpeZdkUDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8c:e8:5c:15:8d:88:9d:35:d1:30:7e:98:69:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=d588a9ce21e70e87465fc383f2536cccb5614ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:97:c2:a4:5e:6b:e3:95:8d:a1:e6:cb:6e:3f:
04:d5:e5:d9:21:8d:53:f1:3c:13:e3:e1:65:b8:1f:
16:6e:61:ad:77:27:04:83:bc:57:dd:44:dd:68:30:
4d:b6:8c:44:7e:c4:af:89:ed:90:00:8f:21:9d:66:
a5:47:fc:28:40:5a:eb:28:03:e3:16:a1:46:af:32:
34:28:ed:28:b5:53:3f:78:d2:4d:e8:e8:6b:aa:a5:
70:27:46:48:4e:39:93:1e:0a:76:8a:94:6b:79:cb:
4b:f1:2f:a9:9f:96:1f:19:52:85:76:46:b2:78:33:
4e:85:6b:4c:f3:c6:53:31:bf:91:84:c8:2f:c2:0c:
1e:eb:e7:d5:95:f8:56:e5:b2:16:fe:92:38:d4:fa:
2e:02:44:33:5a:ad:ed:18:a7:79:79:14:48:aa:f9:
cf:6a:a1:95:fc:38:dc:b4:e4:b1:7f:e2:95:bf:5b:
98:8b:47:06:3b:5b:a6:d3:a3:68:f8:cd:97:f3:56:
e7:ae:77:7e:b4:1d:48:78:26:5e:50:e5:50:d9:84:
5f:58:6d:9f:e3:2a:55:6c:8d:de:c3:18:6a:12:f8:
9a:10:6e:11:59:96:e3:eb:60:17:9c:11:2b:b1:27:
10:23:82:69:06:66:d9:25:32:e7:f2:df:ea:bd:00:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:88:A9:CE:21:E7:0E:87:46:5F:C3:83:F2:53:6C:CC:B5:61:4A:C6
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d1:20:01:13:13:d7:e5:12:35:76:74:2a:8a:5a:f7:d9:76:
60:49:31:db:71:1c:f2:b2:1c:3b:b6:88:e0:33:9a:a8:75:45:
f6:e2:e0:57:b7:98:17:ef:9e:71:26:ee:5e:7c:20:c2:29:dd:
ad:94:d2:0f:75:d7:3b:51:76:c7:cf:c2:1f:1b:49:3e:00:1c:
f2:f2:f3:81:aa:a1:4f:ef:2d:16:b7:46:e1:d2:29:39:1e:10:
44:33:7a:22:92:c0:b3:99:c1:47:33:9d:4a:97:59:6c:14:cc:
0d:da:18:f1:a1:61:f1:9d:69:ef:f6:69:cd:89:95:ae:a4:3e:
db:a4:08:50:7c:34:21:83:26:bb:c8:09:d9:48:ed:81:94:97:
6f:33:ac:40:fc:8a:c3:7d:c6:87:0c:b3:1a:3f:98:0b:a0:ef:
84:c4:16:a0:ae:63:ef:42:fa:c5:c6:df:41:55:a2:0f:d1:5a:
0c:ee:80:25:cb:e4:17:80:82:44:a7:85:fe:b5:c9:f3:e8:9e:
0c:bd:31:13:93:d6:3b:e6:16:5c:fc:a3:c3:12:6f:94:26:ab:
84:c4:e3:bb:36:9e:ef:d4:3e:ea:36:d3:7f:45:57:a6:df:be:
5e:2b:7a:bc:ef:5a:cd:0f:85:25:cd:e9:d1:c0:d1:50:d5:7c:
51:10:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:15 2025 by rpki-client