Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: xvRsMp+Xn78v2uCtNew61ZCDff6tbnus+OoftGADUiw=
Subject key identifier: 12:FD:FC:B8:DB:1B:5A:CA:86:69:89:D6:CB:C2:04:B5:92:51:C6:06
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 0197BA0F2D23187D80FC3F1B77D27709FA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 032C
Signing time: Sun 29 Jun 2025 05:00:46 +0000
Manifest this update: Sun 29 Jun 2025 05:00:46 +0000
Manifest next update: Mon 30 Jun 2025 05:00:46 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: CEHmh+SlkyfQfhgJnsSE61nLF+h3rtHkdLZVaxuitBc=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:2d:23:18:7d:80:fc:3f:1b:77:d2:77:09:fa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Jun 29 05:00:46 2025 GMT
Not After : Jun 30 05:00:46 2025 GMT
Subject: CN=12fdfcb8db1b5aca866989d6cbc204b59251c606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:24:76:bf:1e:29:af:d9:33:45:af:32:35:
16:60:9e:52:db:39:9d:97:d2:db:4c:7f:49:20:bf:
54:a9:b0:e9:ac:ee:5f:3f:cb:4c:0e:4f:b2:e7:9b:
35:a9:2d:9d:02:0e:af:77:6a:15:e7:f4:13:4e:51:
87:a0:41:4b:1b:e9:f1:41:2a:41:b2:e8:e2:03:f3:
8d:cc:f7:16:73:1c:43:79:8e:f5:29:8d:ca:11:7b:
84:2a:74:8a:77:55:f5:b8:8b:97:dd:8a:a4:bb:14:
50:34:eb:2f:57:d6:f7:4b:38:eb:eb:5f:93:56:5c:
b9:80:bc:41:22:fe:67:8d:cf:29:a4:e7:58:f2:1e:
39:7a:c8:5d:6d:14:46:7f:31:96:ef:ec:42:f6:18:
ad:7c:79:b2:6b:c9:21:7d:f5:5a:e3:95:56:db:f9:
0f:ae:d3:89:45:af:71:81:65:7a:64:48:87:e8:b1:
63:1d:ab:12:b4:cf:eb:90:97:b9:60:fb:a7:45:b8:
96:ed:ea:36:af:a6:df:03:6b:a3:dc:43:cf:f7:e2:
1a:58:cb:6f:b2:64:87:03:98:d1:54:24:eb:60:31:
86:de:93:64:a8:72:3f:26:77:44:38:56:b3:b2:a1:
fc:f9:0a:1e:11:2c:5c:67:35:e6:f7:60:1b:8a:6e:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FD:FC:B8:DB:1B:5A:CA:86:69:89:D6:CB:C2:04:B5:92:51:C6:06
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c7:ab:72:f4:43:b2:d3:61:d8:fd:60:b0:a6:79:2e:91:23:
c5:02:e1:67:2c:cb:79:db:26:b0:ad:af:45:f9:ba:e2:1f:94:
5d:36:f9:89:d3:1b:44:7e:4b:c6:ec:fe:79:a7:00:28:24:fe:
3e:67:d8:1c:c4:a3:1e:ed:eb:38:ae:f3:47:ea:5f:09:8d:ad:
50:b0:cf:15:c8:fd:39:68:ba:f2:12:1e:10:b2:ab:09:8c:1a:
e8:1b:98:8a:d4:d1:9d:7c:5e:e0:2b:9b:b7:3f:95:b0:a4:65:
63:1a:a5:9c:79:7f:b0:83:66:b9:54:fb:a6:67:9f:85:19:fa:
cd:c4:25:e6:df:47:41:57:2d:6d:d3:ab:0a:aa:a2:72:77:d1:
f6:64:f4:99:70:7e:35:dc:09:09:90:95:e5:cd:41:18:44:42:
bf:26:5b:66:52:b7:c9:d1:8b:0d:f3:fe:aa:a5:1a:8b:96:50:
55:2c:3b:f3:fd:b5:d5:2a:1e:6b:b5:a7:a1:02:61:0d:05:42:
1b:40:45:df:63:f7:52:85:7c:7a:51:45:aa:23:a2:ac:55:d7:
a6:9e:85:55:8d:e1:23:ec:13:ca:2f:3c:bd:62:7f:97:85:cc:
39:13:a2:f2:de:96:f6:e9:e0:0f:96:84:7a:ad:7b:c7:bf:59:
53:34:b8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:31:57 2025 by rpki-client