Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: V5rDJFN2W1CHgSeVDaefFWQf929djLiwBbIsmZd2/6I=
Subject key identifier: ED:B8:22:9F:06:8D:85:4E:F4:F3:0F:00:3A:A7:8B:B1:F4:68:3B:F5
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 0197B7EA1E262DA3707284D9FA0BC7F58832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 04E3
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: LhqhyNKfPqPPcuoeKcJITUAQXI9SM5CQPx0T5XZkAf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1e:26:2d:a3:70:72:84:d9:fa:0b:c7:f5:88:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=edb8229f068d854ef4f30f003aa78bb1f4683bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fb:b4:f2:30:ee:6e:c6:de:dc:89:02:c4:86:
c1:d0:94:2f:c3:aa:6a:bb:f1:d7:af:51:fc:97:21:
72:8a:45:7f:c0:02:ce:f5:44:c5:bd:88:f6:32:52:
e3:22:61:66:c1:ed:01:ff:0c:c8:3f:f7:e8:d1:7e:
07:cb:98:7d:f5:73:37:e6:22:84:c1:df:e7:0a:58:
25:b3:6d:e0:1b:de:b3:c5:3a:e3:33:d2:db:1c:e6:
19:f1:7a:a9:e4:e8:4a:a4:1c:9a:aa:d0:34:4d:6a:
58:f9:7a:2b:14:8b:0e:23:54:ea:ed:ef:e7:63:e2:
57:6c:79:9f:ca:93:69:83:d9:57:ae:6d:50:25:6f:
89:f0:38:56:d5:74:ac:e8:62:0e:f9:c6:55:c9:47:
bb:dc:42:71:54:a6:32:a7:32:9d:56:74:3c:e4:80:
30:97:33:c2:15:e2:34:9d:8f:97:8a:07:88:7a:61:
41:73:c0:3b:26:72:d6:bc:8f:d0:15:1a:bf:86:f3:
3f:f2:02:f1:4e:a0:ee:1f:9e:d5:d6:b8:ed:31:74:
3c:3f:be:cc:43:4d:c9:a7:e5:f2:70:4a:05:d8:18:
83:b1:01:d3:88:5f:e0:54:9d:f6:00:42:3f:11:e7:
09:d9:80:49:ea:f9:5a:9e:83:a2:83:c4:ab:42:52:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:22:9F:06:8D:85:4E:F4:F3:0F:00:3A:A7:8B:B1:F4:68:3B:F5
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:38:64:1c:2c:b9:33:94:1a:56:fc:32:94:3a:ee:2f:79:f7:
f1:4c:e9:77:75:72:da:85:05:c4:b2:a1:fd:52:d0:e8:55:2a:
17:3b:61:d7:36:73:86:d9:0d:59:da:9f:01:83:02:53:f6:92:
3d:48:05:5d:81:96:94:01:f8:78:29:82:a7:5b:0e:f6:36:79:
85:2b:ed:4a:88:a5:86:24:cd:4d:9e:2b:2f:fb:2c:e8:5e:ed:
8d:40:f6:5b:43:e2:ff:c7:9e:dd:50:98:d4:39:1d:8d:8f:9b:
d5:80:b3:b0:c6:bf:10:e5:6b:88:19:04:6e:5e:f7:56:88:83:
60:53:ed:26:be:ca:24:92:a3:37:1f:bf:10:74:20:6d:b1:83:
37:f7:48:83:b8:bd:81:d9:50:12:6a:7f:80:42:02:4d:71:ce:
28:24:c4:f3:49:ed:23:6f:da:98:e7:5e:55:b5:ac:27:a7:eb:
b8:53:78:ed:f2:7a:29:3a:b5:b7:f2:1b:e5:16:02:7a:d4:c5:
68:fc:5e:e3:65:77:6c:da:cf:ff:8a:ea:fe:24:51:74:00:3e:
44:b6:9b:4e:bd:19:74:ad:91:9f:1f:fe:ce:f5:53:be:97:3c:
22:62:7a:b3:e6:3c:cb:3d:4b:40:c2:66:9f:aa:4c:7c:72:d6:
d7:bf:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:10 2025 by rpki-client