Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: 3Vl+S7//BAwGTSREB0HWr9aSxNq8bWwwY3+XSChClrc=
Subject key identifier: 49:89:AF:40:D8:47:8F:23:C2:F9:4B:F3:C5:C4:20:68:2B:44:8B:83
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 0198D705CABA29101A27048154C8F9627CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 13:02:17 +0000
Manifest this update: Sat 23 Aug 2025 13:02:17 +0000
Manifest next update: Sun 24 Aug 2025 13:02:17 +0000
Files and hashes: 1: 7Q18JYmAuxaMa6IHufbofG2Nif4.roa (hash: SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=)
2: Z-qhy45K2zlM7WIh7yxwKFBjWYI.roa (hash: 23XRpBYe78gwQGj8rW9uI1A0myazk2hz/zj+cGkCS8s=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: rzQxYEncVBOAwXa3lxPukokJ1cqMzpXowU7M6DqIQxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ca:ba:29:10:1a:27:04:81:54:c8:f9:62:7c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Aug 23 13:02:17 2025 GMT
Not After : Aug 24 13:02:17 2025 GMT
Subject: CN=4989af40d8478f23c2f94bf3c5c420682b448b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:f6:2a:a8:fd:60:2a:02:51:60:22:51:a2:
6e:0f:de:00:fa:97:e7:0d:2a:29:5c:d0:fa:66:2e:
b1:92:64:4a:f8:5a:fd:1a:b2:0e:4c:7d:db:ea:6d:
a7:30:7b:ac:84:3a:5c:c5:2f:b8:f7:36:fc:4c:14:
0c:51:dd:6d:40:3c:a7:4e:0c:aa:8a:73:6b:6b:ed:
d4:e5:ee:5c:50:46:3b:2b:05:da:b4:e5:4b:12:e7:
e7:40:b9:42:d1:a1:44:89:64:9a:71:5f:8c:d0:d5:
f4:97:3c:96:07:d9:4e:45:fb:d6:aa:3d:48:94:45:
b0:15:7b:46:91:a5:55:99:f2:bd:bb:18:5c:42:6c:
a1:29:6e:dc:bc:d4:ca:93:7c:50:91:37:ed:3c:60:
fe:2d:cd:cc:e5:b4:fa:81:1f:be:b1:94:51:30:36:
1c:73:12:b9:59:7a:af:32:1b:f1:c7:4e:0b:2c:ee:
64:9d:ba:f9:bc:7f:ce:13:31:39:5b:38:51:1e:28:
8e:6d:a5:73:51:b2:ec:c2:da:a6:47:a4:31:22:89:
9c:6b:fc:d2:3f:34:ca:b3:ba:d4:40:a9:19:c8:fd:
b3:b7:20:fc:8a:a0:c1:93:da:63:d5:8a:6e:49:dd:
10:88:74:15:62:96:df:fc:81:57:b8:06:bf:d7:ca:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:89:AF:40:D8:47:8F:23:C2:F9:4B:F3:C5:C4:20:68:2B:44:8B:83
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:19:42:b4:f7:9b:b2:43:12:a1:8d:c9:ec:b5:d0:1c:03:
ee:a6:cb:f8:e4:22:bf:f7:54:11:6f:28:ad:27:93:15:b0:51:
4c:a5:ec:8a:0e:e2:88:60:ff:60:a7:28:f0:90:7e:0b:4b:a0:
85:11:70:50:69:8b:91:b3:04:9a:c4:5c:37:5c:38:6e:65:48:
67:67:82:68:a1:cb:fa:68:1e:d2:6c:17:0d:6d:65:f4:21:54:
9c:54:4f:84:e9:f1:e5:83:8f:15:bf:5d:c3:af:c0:cd:66:18:
43:05:52:2e:d2:4d:8f:ce:8c:c2:0a:4c:35:4d:6a:22:a8:6e:
f2:0b:97:7c:4c:28:6f:4b:dd:d0:35:55:31:64:6f:57:1c:b7:
3a:cb:35:9e:c7:d2:d1:2b:bb:83:e9:46:a9:d5:aa:1d:6b:93:
ce:39:7d:ea:9b:0d:fc:27:15:66:56:03:4c:1f:2d:95:9f:f0:
21:fa:e7:94:24:1b:bc:47:ee:fc:bb:7f:8f:31:be:e3:eb:4d:
b5:2f:28:2b:c9:fb:3f:ec:2f:f4:cc:63:42:79:d7:cd:ac:3b:
3c:d4:43:b4:fe:4d:57:e4:cb:da:17:f4:cf:2e:31:43:83:ad:
14:0e:5e:45:a6:dc:7a:be:f0:5c:8a:21:bf:04:03:a3:69:fa:
fd:e2:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:34 2025 by rpki-client