Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: 35+VCiaI9DbamiFOtdqcAWR+5tOgu8YJG7Nt/Slb80w=
Subject key identifier: B8:B4:F2:DF:7F:C4:7A:D8:E3:75:94:E2:75:A9:7C:0D:95:4E:87:27
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 0198D660131DA55C1F014E8FC8C44E178EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 1347
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: 7bZ5C1jteyHTnpklpHYAb2bp80PigM5hdtT7QwDc+kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:13:1d:a5:5c:1f:01:4e:8f:c8:c4:4e:17:8e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=b8b4f2df7fc47ad8e37594e275a97c0d954e8727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:1c:c6:80:27:32:91:66:af:c0:85:86:5e:
d1:08:b1:fd:ea:5c:dc:57:bb:43:a9:b3:c0:62:fa:
ab:ed:5b:d9:aa:c9:83:66:bb:93:31:51:d9:e6:40:
67:ef:47:2d:fc:19:9f:3d:d1:61:14:2a:96:97:60:
d0:02:dc:e4:a8:b8:7f:e6:e0:76:a6:30:c8:95:71:
56:a0:96:d2:66:9a:cb:4a:94:90:d8:40:19:da:1d:
03:62:2d:ed:20:ad:03:70:d4:1f:51:a5:ce:a6:73:
32:f2:6a:5f:5e:33:3f:d9:4c:1e:de:30:93:ef:3e:
66:86:44:bf:d1:60:f9:8a:5f:9a:64:27:59:3c:cf:
ab:3a:e6:73:27:56:8b:ec:26:ad:25:7a:8b:96:b8:
53:fc:d3:75:44:56:04:41:f7:1d:85:0d:ce:c1:4f:
bb:5a:6a:22:35:6f:94:a8:87:43:54:79:9f:ff:81:
60:7f:17:e8:54:d3:2e:5e:91:4e:cf:93:1f:2e:4a:
6e:e4:64:2a:f7:64:41:b5:35:89:c3:95:99:98:e9:
29:4e:6d:32:a3:eb:5b:3b:da:fa:f6:fc:85:7d:3a:
b8:8b:06:f1:30:42:d0:03:a7:75:80:70:cf:c0:a9:
cf:bf:37:90:5a:f2:9c:c6:61:07:43:30:df:54:ce:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B4:F2:DF:7F:C4:7A:D8:E3:75:94:E2:75:A9:7C:0D:95:4E:87:27
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:79:a2:f9:45:e9:08:39:94:8c:5b:19:37:a9:33:48:2f:0f:
bd:36:b3:1f:1c:c0:6c:bd:8e:c7:b0:5d:ca:ee:7f:1a:4e:30:
5b:02:a1:da:64:ee:d5:5a:2e:7f:3a:ad:e3:b2:3b:74:2b:89:
60:27:70:ab:44:d2:ea:c0:c4:d8:51:9e:56:30:65:c1:6d:b9:
b1:85:08:11:fa:07:ba:e6:ac:a1:56:4d:b1:b2:86:c5:22:0b:
a0:89:6a:e7:84:0e:9f:4d:16:cd:ec:42:e3:07:88:4b:86:a5:
d8:3c:31:15:0c:0b:42:1b:88:7c:51:a0:de:41:be:b6:02:a8:
69:28:85:1d:04:92:86:28:9d:ec:0f:d5:ff:6f:48:6b:ba:4a:
59:e4:2b:b4:b2:b8:1b:b0:f9:63:b7:1e:19:3a:ed:85:7f:5c:
47:72:f1:e0:39:f1:a4:24:b1:57:e8:31:8b:23:d5:1a:4a:17:
8a:c7:cb:19:c6:c9:9d:57:9b:58:df:7a:6a:40:2e:d4:6f:44:
1e:39:fe:28:d6:ec:be:21:40:21:b9:b8:6c:f0:ef:e2:22:8e:
84:20:b4:87:f7:9c:70:f3:2b:ed:81:34:d3:86:18:cb:61:c6:
27:61:a3:3e:d7:ad:14:65:84:d7:2b:55:2d:d4:1d:b9:d4:28:
da:fb:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:06 2025 by rpki-client