Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
File: MpbYU2ObwBkplCk-veCYBdLWIqQ.mft (raw, json)
Hash identifier: p8GZNgE76IIcI1uZUuqy79g4dje44AKbNVYeemx38hc=
Subject key identifier: 99:B5:59:DE:D7:16:D1:80:27:49:E6:47:77:40:1D:37:D5:75:D2:65
Authority key identifier: 32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
Certificate issuer: /CN=3296d853639bc0192994293ebde09805d2d622a4
Certificate serial: 0198D6608B218494DAEB2B100027E1CDEE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:47 +0000
Manifest this update: Sat 23 Aug 2025 10:01:47 +0000
Manifest next update: Sun 24 Aug 2025 10:01:47 +0000
Files and hashes: 1: MpbYU2ObwBkplCk-veCYBdLWIqQ.crl (hash: V0YU99zTjvPpcrOpexHLjZmdwu4K740PcIeR9Ckq0ZM=)
2: hTnUv0N90doM0ZMOLyyFEOW9iK0.roa (hash: YJzqmH02+AW23mfkqCHZcxj82Owa829HDO8rFi0lEGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8b:21:84:94:da:eb:2b:10:00:27:e1:cd:ee:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3296d853639bc0192994293ebde09805d2d622a4
Validity
Not Before: Aug 23 10:01:47 2025 GMT
Not After : Aug 24 10:01:47 2025 GMT
Subject: CN=99b559ded716d1802749e64777401d37d575d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:ec:b0:dc:b6:41:f9:f5:a4:9b:a1:23:39:
d9:70:60:6f:2e:29:50:b7:21:90:25:ca:d7:c0:f7:
de:30:55:3f:08:b3:ee:cd:f4:5e:d7:6e:6e:d3:3c:
8b:06:28:3b:56:bc:0c:0e:ce:af:6a:f3:dd:d0:4c:
e3:52:b4:bf:0e:df:14:ab:00:d3:88:53:ca:fb:cb:
a4:3a:22:a9:76:90:26:93:08:c1:78:88:bf:a3:47:
64:2b:cd:e7:05:b4:9c:f4:28:da:8f:98:bb:0f:d6:
7d:98:62:2a:5f:d4:a0:39:9b:ff:e8:63:74:7f:0b:
34:b2:7b:0c:70:19:fb:9f:7a:80:4b:d2:07:5f:85:
e1:cb:02:2f:42:b7:92:7a:95:82:e0:3a:f3:0e:74:
95:74:60:ee:17:8e:f1:3e:27:15:61:82:2c:00:eb:
d4:45:7a:84:30:92:a4:5d:e6:3d:11:ae:7a:bd:04:
41:39:3d:d8:a2:13:a2:c2:12:fe:83:9f:72:0b:9f:
36:2f:b7:fa:3f:1e:e2:23:c5:32:bd:5a:96:3f:10:
29:aa:4f:d1:37:27:1d:4e:ad:45:b7:65:e1:77:cd:
3a:39:cf:eb:13:6a:46:f9:29:c8:5e:ff:87:65:9b:
cc:e2:38:c6:33:07:92:38:3e:36:7d:ea:9b:00:99:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B5:59:DE:D7:16:D1:80:27:49:E6:47:77:40:1D:37:D5:75:D2:65
X509v3 Authority Key Identifier:
keyid:32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9c:52:c4:f3:ac:e4:e9:52:68:d9:66:cf:99:24:5f:16:ad:
a3:89:4c:7d:fc:c8:e1:46:31:42:63:86:e4:a1:9d:39:35:be:
fa:56:61:59:ad:d0:03:37:ea:c6:5f:3e:8d:83:f6:d4:b5:61:
0c:0d:e6:a2:7a:a6:04:3b:31:38:eb:36:3f:2d:22:a2:d8:83:
60:ae:90:1d:f2:c0:15:ad:69:39:7c:a8:a5:e5:16:fb:c5:d1:
dc:ea:ad:40:ae:db:c7:58:d4:81:8b:aa:f2:6c:07:d5:f9:23:
d4:2d:2e:ed:b3:bd:e3:15:fc:94:e0:7a:90:09:98:3c:b3:d1:
f6:f3:70:d4:96:ab:0b:a8:3c:a1:42:ab:b2:0b:9d:9c:0e:4f:
12:60:3d:62:9a:e8:85:70:cd:e8:5d:31:b3:e7:0a:57:8c:0d:
3c:27:85:dd:8b:93:ea:f4:6c:a4:f9:23:cb:17:dc:18:6c:f4:
8c:6d:34:50:05:60:53:fa:b6:03:cb:df:d9:74:09:9d:37:00:
46:8d:a2:d0:5a:74:3d:91:cb:cf:d0:77:71:7d:a3:2e:0a:bd:
bb:f8:82:ed:2f:3c:0d:d2:e8:d7:b5:ac:e2:3c:b1:30:6f:58:
89:fa:0c:a7:b3:ad:1a:7b:12:25:11:40:5f:7a:a7:e9:91:30:
64:d8:c1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:43 2025 by rpki-client