Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File: mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier: KULtfEtNx+FM60Aul8o9ovUYJvNWXZixHRIDIN67NME=
Subject key identifier: EE:8A:0C:2F:C7:23:6C:16:F5:F6:9F:39:23:FB:3E:5F:09:B1:62:83
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 0197CBDF2DBA5CD9F8EF9475CF1006F0AD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 16:01:30 +0000
Manifest this update: Wed 02 Jul 2025 16:01:30 +0000
Manifest next update: Thu 03 Jul 2025 16:01:30 +0000
Files and hashes: 1: CxGOoBY5YoTyd6Nu8KyBbb6HwB4.roa (hash: W6T/EKpt1B07PivG7xwB9X1O2PEBzOLgzqiyKvlh3q4=)
2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: 3gbUE43it2/CjXgy4KMuMvTCWgiY5WD8QNE3wOrfRyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:2d:ba:5c:d9:f8:ef:94:75:cf:10:06:f0:ad:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Jul 2 16:01:30 2025 GMT
Not After : Jul 3 16:01:30 2025 GMT
Subject: CN=ee8a0c2fc7236c16f5f69f3923fb3e5f09b16283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:00:7b:a1:43:62:ff:8b:1c:dd:c7:1d:b7:
60:4a:38:34:c5:43:6f:88:1b:3a:de:2e:9e:f4:66:
1d:af:a2:57:20:df:0d:1b:4a:fb:84:4d:62:4d:c1:
91:12:49:7b:f8:6f:15:fb:66:ee:8a:20:62:ed:a0:
a9:b8:93:56:2b:3f:88:4f:dc:90:a0:96:c4:cd:ee:
9a:b8:af:a3:bb:f6:e5:79:3a:ca:1d:7b:0f:fd:90:
9d:ec:cd:41:b1:d3:1e:6d:52:91:9c:4c:3a:93:be:
88:05:31:e7:4b:fd:f3:8b:9e:7b:b5:50:46:5f:91:
7c:5e:fa:8c:52:b8:d2:24:5d:a8:85:66:bc:7b:17:
fe:c5:74:2d:a5:42:18:ff:36:3b:a3:e9:da:0f:11:
82:ca:2a:34:6d:d2:c4:70:ff:ab:ad:ec:3b:2b:5a:
a6:d1:64:4b:bf:b7:fc:11:85:36:cf:7e:73:7c:6e:
aa:2c:39:32:99:aa:0e:8d:22:c2:d6:f6:05:5a:dd:
77:2c:14:b5:97:65:82:a2:4a:70:76:0e:76:ce:30:
82:8b:1c:e3:18:55:5a:8a:8e:80:4f:2b:fa:ae:cc:
42:28:e8:74:af:8a:bf:f3:a9:dc:ed:5d:a8:3f:f8:
85:5c:06:b3:59:88:86:1f:0e:54:18:b3:e5:a7:cc:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:0C:2F:C7:23:6C:16:F5:F6:9F:39:23:FB:3E:5F:09:B1:62:83
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ad:27:d6:2f:4d:a2:ac:8e:d7:db:e9:e6:54:f9:f3:3f:25:
14:b3:f1:5d:25:e7:81:ab:37:a8:ee:29:90:88:0f:dd:9a:de:
5c:cf:18:c9:5c:fb:1a:cd:cc:77:17:34:70:1f:fe:44:61:0e:
a6:ca:83:a4:ea:09:ba:33:50:38:fa:78:c5:d2:10:c5:11:b5:
2f:b7:0c:14:db:a3:9d:36:6d:aa:57:4b:c7:f8:ad:27:12:fe:
f0:cb:25:5c:f3:5d:e7:8e:b5:60:b6:ef:a5:79:e2:9d:fe:cc:
67:cb:61:dc:c7:5b:6d:98:e2:82:ac:1a:d0:c1:8a:2d:55:c3:
b6:e8:c0:5d:15:aa:cc:dc:7d:20:6d:5c:aa:32:c1:45:06:cf:
77:b8:6b:21:6c:3b:70:1a:bc:2d:38:55:51:c6:00:dc:cb:e3:
48:18:eb:92:d1:6e:d7:b4:4d:aa:7b:58:ce:f1:26:25:94:69:
50:74:cf:d2:56:cd:20:f1:04:48:09:41:1d:d6:91:d7:5a:35:
9f:68:ff:f0:4a:07:59:46:4b:2b:bf:7a:c4:df:68:e2:8a:a2:
44:b4:c9:f3:30:fc:5c:f6:a2:89:a0:cb:e5:06:de:2c:f4:a6:
3d:72:29:b7:f7:fd:22:01:5d:3b:82:87:45:84:7d:88:cb:66:
17:8e:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:25:30 2025 by rpki-client