Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: sFS8qPSrwh43CnryKTWQ2ca2vbf/RIV00oicFMiWxWI=
Subject key identifier: 2F:1C:6D:4A:8E:E6:EE:24:7A:97:89:8B:E4:92:F3:45:62:D9:7A:D5
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 0198D65F74503CEE02DE0052982A7CF03E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: n7/nyr3L7jycVNpsCtOdVnJeQ2TWsndobzEQV39Thuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:74:50:3c:ee:02:de:00:52:98:2a:7c:f0:3e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=2f1c6d4a8ee6ee247a97898be492f34562d97ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:25:bb:f8:c9:05:a9:80:d8:d2:8a:80:d2:
93:7a:f4:c9:fa:37:61:84:ec:07:06:33:f3:ab:7c:
2b:79:95:b0:80:4b:58:48:3c:4e:33:36:ff:a6:a7:
1a:81:41:31:eb:80:9c:27:37:4f:14:c7:0c:8e:e2:
02:92:6a:ce:58:7b:50:5f:1e:f6:de:e1:7d:e8:3f:
71:50:7c:82:5c:de:d3:20:65:72:a0:9f:ed:96:5e:
9a:6c:1c:9a:5e:39:96:c7:fb:75:ee:6e:6b:9a:4a:
b1:03:15:40:bd:e5:f7:e2:cf:ea:ed:e4:c4:8b:a7:
0b:50:9f:c0:0b:70:14:47:01:4f:1e:59:3f:08:d8:
a4:72:ad:5b:d4:43:09:3c:83:b6:db:36:bb:2c:d2:
55:bb:e5:c7:fb:9f:03:71:e4:f0:4d:5b:c2:eb:3d:
b2:26:33:17:3d:94:d2:73:38:f5:a7:93:4a:52:08:
0a:ae:33:62:5e:e4:df:fd:0d:69:7f:18:3a:ef:62:
d8:90:26:aa:6d:89:d9:c0:b5:33:12:58:1e:b6:b4:
10:ce:45:10:5d:8e:51:56:04:22:c8:1e:31:f2:76:
73:2f:d6:65:b0:b3:a2:a4:a8:38:4c:70:09:09:95:
07:57:c2:a1:86:88:ab:1f:f7:b1:75:cd:1f:92:52:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:6D:4A:8E:E6:EE:24:7A:97:89:8B:E4:92:F3:45:62:D9:7A:D5
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:65:51:21:38:48:34:69:c5:77:17:cc:79:3f:a5:31:50:ca:
79:9c:61:f6:d1:f7:1d:6c:f2:cb:64:a8:3e:92:80:23:f0:76:
e0:2a:c1:18:5d:21:c4:1f:2e:f2:0c:b4:df:51:35:89:76:d7:
6a:e7:36:37:b3:d3:0e:ec:25:16:5b:3e:78:af:72:1d:e8:29:
8d:b3:15:86:51:93:28:cb:12:30:26:d8:e9:ee:53:32:66:db:
55:70:33:c7:bc:f8:96:cf:c2:a8:96:b4:62:ff:4b:24:20:fd:
87:52:80:0f:60:32:6d:64:d0:5b:f4:1f:fd:eb:1c:0e:55:cf:
13:a2:ec:b1:c4:77:e0:f2:c3:3b:d8:13:3f:dc:e4:20:f7:61:
aa:f4:50:58:9f:15:b4:5a:9c:df:bc:71:c0:08:d3:f6:08:34:
d9:18:89:6b:31:ef:cf:74:0f:0b:ac:34:b1:67:d6:a7:00:9b:
43:a3:fc:b9:aa:ab:e2:f4:de:4d:29:16:90:2f:3c:54:f0:d3:
38:92:a0:4c:d1:a1:e0:64:97:d4:d3:3b:e5:8b:25:f1:67:08:
ff:9a:58:e1:eb:d5:64:cd:83:dd:57:64:ef:60:49:2b:62:91:
9f:b2:7c:72:cb:1d:c5:38:b0:1e:55:80:b3:de:78:6b:50:9f:
41:00:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:33 2025 by rpki-client