Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: qYu1HM6wMZHiiXxBuQQJl9c5lOcoeE2vPfKOBxr/0Og=
Subject key identifier: 93:75:93:BA:18:79:7B:32:15:EE:86:E2:78:D8:D4:A2:24:7E:B8:CD
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 0197B6A174DD68E67C0BF3D36CEC47A399DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: chAVXTDU92HM/Ltwz44xva9aCQpq0mEUufGqcvOiDtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:74:dd:68:e6:7c:0b:f3:d3:6c:ec:47:a3:99:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=937593ba18797b3215ee86e278d8d4a2247eb8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:26:c4:94:a1:a0:50:87:5e:f2:f1:d4:7b:
3f:ae:9f:8a:e0:99:0e:0f:2a:59:85:0b:7a:49:1e:
af:8a:1a:b1:22:d5:43:6f:af:fd:9f:e7:3e:57:ee:
35:45:ef:15:22:18:99:a7:b8:d4:7f:be:36:9c:9f:
c2:ae:a4:9c:2b:bf:4b:53:81:7a:7d:26:28:6c:20:
24:0a:1f:ae:49:dc:fb:55:2b:4b:d4:ae:06:3d:19:
16:d2:e2:0a:a0:4c:8b:fe:6c:4d:a6:0c:6f:81:06:
c4:1b:5b:31:a1:d5:df:18:27:c7:29:67:49:08:76:
2f:33:77:c0:46:00:df:66:79:39:76:d7:2e:88:a9:
92:54:68:92:b1:2f:a0:ae:dc:34:54:96:43:ba:e5:
48:04:2a:e0:db:7c:f7:ea:6a:c3:ee:ac:66:52:a6:
23:11:4c:b0:50:67:0f:fa:69:32:e1:0d:8a:92:85:
26:88:a2:fd:2e:3d:67:81:c2:1c:7f:14:57:fd:96:
6d:5b:5e:10:f5:7e:21:7e:bf:e2:08:48:fc:77:28:
2e:51:40:c1:ef:75:94:67:f1:a1:de:b4:08:a7:55:
08:ca:df:ea:19:d2:cd:60:c1:ab:54:7a:84:b4:98:
17:26:cf:05:ba:9d:09:56:5b:f9:ff:7a:59:b0:5f:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:93:BA:18:79:7B:32:15:EE:86:E2:78:D8:D4:A2:24:7E:B8:CD
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:43:20:48:3d:b3:76:96:ef:94:04:78:7b:23:fd:c1:2e:0b:
6e:35:f4:c7:aa:72:d6:9a:a5:eb:3a:f4:28:51:83:d0:4f:dc:
57:f6:a9:97:bd:de:04:c0:31:7a:03:e6:20:c6:9c:c5:74:16:
24:1e:21:5c:98:61:38:ca:f2:33:e6:48:e7:b2:53:04:9d:88:
aa:c1:2f:c9:ef:07:b5:61:3b:b8:cd:16:a5:c5:54:16:70:e2:
8f:22:ab:fc:b8:59:71:0d:8f:bc:17:54:64:e2:35:db:3a:4c:
45:e6:0b:db:32:ff:ea:f2:b3:30:a5:7e:70:34:50:e1:b8:2a:
be:c0:1c:fc:d4:c7:dd:bd:74:69:39:a5:1c:ef:00:fc:21:d3:
03:46:1f:ca:99:fc:4e:bf:16:43:6b:e6:8e:c5:9e:0f:11:fc:
20:b6:5b:2d:4d:1f:32:f2:d8:03:ef:52:f5:8a:05:4a:a4:1e:
a4:12:e7:bc:b1:4d:b2:8f:5b:db:ae:1e:aa:67:41:3d:bf:a8:
fa:58:21:fd:d0:91:a4:3d:a4:1f:03:cd:f0:e6:f7:8d:62:01:
cb:29:d9:36:6b:d1:c2:d9:d9:b9:23:75:72:db:cf:e0:b2:4a:
8e:f2:f2:57:ce:3e:b5:52:44:d6:48:19:ee:4e:12:78:22:aa:
fc:a0:35:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:26 2025 by rpki-client