Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
File: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft (raw, json)
Hash identifier: HKWF1MW+6b3kN2yZjDuzl1Vf1dvs5twJP0FaUsWqe54=
Subject key identifier: 5F:AF:4D:79:65:66:FB:5D:DA:E1:2E:CA:42:E6:D8:78:9B:6D:A9:2D
Authority key identifier: 9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
Certificate issuer: /CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Certificate serial: 0198D4A7F3B1BADED882F0823F7EBECCDCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
Manifest number: 144F
Signing time: Sat 23 Aug 2025 02:00:33 +0000
Manifest this update: Sat 23 Aug 2025 02:00:33 +0000
Manifest next update: Sun 24 Aug 2025 02:00:33 +0000
Files and hashes: 1: 1-gKSfvIN-nj0ZloNW8DzQVcPMUI.roa (hash: jjlcCOoXxhW/QhUDEGdmxYJMbYMGzmfukEFaEb16efs=)
2: Q5geBAbDdm6rceW2SdCihO9xnZc.roa (hash: qZEJzIP9JlpWgbCaDR3U8w6e1Yf/y2ElsSB5u5JRzoI=)
3: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl (hash: /0uIIe0dO4KgKTjiz1TmjUZOBFRDUwWMTnLz/VIUx9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f3:b1:ba:de:d8:82:f0:82:3f:7e:be:cc:dc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Validity
Not Before: Aug 23 02:00:33 2025 GMT
Not After : Aug 24 02:00:33 2025 GMT
Subject: CN=5faf4d796566fb5ddae12eca42e6d8789b6da92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:51:c0:d1:86:ad:e3:5f:5e:0d:3f:22:fd:
1e:4d:2b:84:dc:22:fd:67:0a:5b:f1:58:15:c2:b6:
b1:29:26:62:00:af:6c:f2:00:51:ed:fb:f3:f7:e7:
f0:96:b8:84:25:0a:58:74:7c:21:0b:6c:b5:b2:77:
2e:62:58:d0:a6:b2:05:ac:0c:ff:99:eb:15:64:bd:
fb:27:b2:75:99:6f:ae:ae:4f:e1:27:09:a7:6f:b3:
69:53:9d:d8:62:ce:19:1b:54:f1:56:36:f1:a7:7c:
f1:c2:ee:0d:ee:67:26:07:59:38:c5:2b:26:1a:8a:
17:af:29:1d:cb:cd:6f:30:70:8e:f2:97:17:d6:0b:
b1:93:42:bc:71:d4:c7:79:15:f9:d7:7c:dc:d0:be:
83:8c:fc:a4:aa:a8:7d:9b:a8:10:6d:cd:c5:e1:78:
e9:c2:e5:60:ee:19:69:78:5e:27:c1:bf:c1:80:ff:
cb:33:65:ba:5d:67:27:82:2c:83:01:2c:29:d6:fd:
fb:9f:32:2c:2c:8d:34:37:49:3d:16:c4:9d:82:f3:
4f:bb:d2:1d:04:29:2b:08:49:62:79:99:d5:01:73:
10:f7:7d:e5:4b:3d:c5:88:f5:8a:e0:3a:36:1e:77:
6e:bf:0e:c5:ae:69:8d:ed:42:09:7b:12:30:68:d5:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:4D:79:65:66:FB:5D:DA:E1:2E:CA:42:E6:D8:78:9B:6D:A9:2D
X509v3 Authority Key Identifier:
keyid:9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:17:ec:e7:3a:b7:7d:27:ff:8b:20:ec:66:3f:88:20:01:fe:
73:03:3a:a1:fb:1f:81:87:6f:d3:cf:ed:44:20:93:b1:a3:81:
53:8b:19:75:09:ad:f3:bc:c4:76:36:b3:e2:f3:9c:74:37:ee:
e2:e4:ab:a8:b2:12:3c:be:19:fd:50:48:90:a6:d0:18:d7:07:
74:f7:47:92:3e:23:f9:ae:13:e6:02:bc:97:7a:62:53:9d:4a:
8b:d8:a6:63:e1:dc:7c:0a:7b:fc:75:2d:be:d1:5f:4a:4e:77:
eb:f4:07:8c:5a:d8:51:8f:ba:a9:47:9e:b8:a2:39:ec:d1:19:
03:68:59:4a:44:49:23:53:2b:8c:75:17:f8:e3:b3:16:4f:fe:
db:d4:3a:7b:26:c0:ad:74:74:f5:a6:3e:dd:24:d9:58:28:30:
f3:86:a6:08:0f:69:6c:5b:c7:50:5f:24:6d:61:64:cc:e1:8d:
96:0c:0f:33:bb:e1:08:7d:53:2f:01:52:75:af:52:5f:26:3d:
a2:cd:d6:11:a4:f0:d3:ae:b5:cf:58:0a:eb:c5:b6:c5:e2:e9:
69:ba:f4:a2:8f:0a:36:92:5c:3c:d6:5c:12:4c:fe:3a:85:92:
3f:d0:fd:04:43:b8:b0:9b:69:a0:d5:71:d5:c5:6b:03:a0:ed:
81:82:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:21 2025 by rpki-client