Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier: brCPnv5wAEGqhN9o+IPtPEyIyIRWUuH3WMu8bqwM7bs=
Subject key identifier: 87:11:D0:0A:FB:24:29:EC:6D:9D:27:B1:02:82:7E:27:BD:10:C1:37
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 0198D5F167DE20E9EEE5BC7E8BE92936E9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number: 15E6
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: 5wpBu9lqq6Eh5bxmApWBHSmv8rU.roa (hash: OWwgDNZvQnVhoKGxoJou3ziQhvyReIZ9m1NH7rz0BqA=)
2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: 1+innha92yg7lECpv06BQ3YC94Elvowkl02xFC8LXWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:67:de:20:e9:ee:e5:bc:7e:8b:e9:29:36:e9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=8711d00afb2429ec6d9d27b102827e27bd10c137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:6c:96:b9:25:40:a7:33:ae:c1:6e:b8:59:
0a:6c:65:54:89:1e:b8:ff:f1:62:2d:f1:d1:8b:82:
5d:bd:19:50:d5:2f:5b:0c:33:8e:da:fc:4e:a3:0a:
eb:f6:8d:73:9b:ab:cb:ef:9d:4b:00:bc:e0:17:c6:
fc:ad:0e:86:ce:04:a0:d0:8c:a0:cc:c5:df:e3:05:
1a:e6:24:c1:e4:f2:7d:e9:48:18:f8:50:9c:5b:ae:
07:b4:a0:38:bc:ca:90:b3:d1:ef:e5:56:aa:90:a4:
44:35:9e:c2:47:74:73:53:0a:be:1f:d2:57:72:49:
dd:1f:27:5b:2b:ac:1f:71:e2:c4:c2:f8:85:9b:81:
74:10:90:dd:73:db:df:60:f9:5f:c1:ac:2c:9e:f0:
dd:5a:ad:f5:90:8d:84:f3:88:a2:b8:ce:57:35:e8:
65:2d:3d:71:a3:23:46:ac:1d:85:86:f6:b1:51:f0:
40:6c:ad:94:b0:2c:82:c9:20:b4:09:91:95:61:3c:
f8:8d:7b:3a:d8:e8:a8:84:8a:fd:4d:83:94:ba:ba:
91:f6:b2:ad:73:9e:7c:f9:47:5b:da:8e:22:9a:20:
2d:70:d6:f8:45:5d:02:15:a9:e0:89:a5:81:b3:0c:
44:2a:f6:19:d9:f6:b0:92:94:1a:27:bd:40:af:ed:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:11:D0:0A:FB:24:29:EC:6D:9D:27:B1:02:82:7E:27:BD:10:C1:37
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d5:94:cc:01:90:ca:8b:1a:d8:bb:fe:da:d2:22:9d:8d:f1:
a9:fe:ac:42:f8:fa:6b:b5:ac:ca:8b:f6:c0:7a:d7:1b:30:43:
e3:89:38:cb:c9:02:25:4e:24:86:e6:04:56:e0:41:24:a9:fa:
28:5e:02:2b:ab:91:74:6c:60:cd:75:79:8a:a8:ed:bd:75:88:
f2:fc:c1:e9:5d:fd:5b:f8:a2:06:e2:24:42:53:1f:62:d6:f1:
e5:5e:17:d3:db:3c:b8:76:ef:f4:d5:ea:b4:03:2f:c9:a8:4f:
f0:81:fa:19:a4:4e:ad:aa:25:a1:e4:e2:cb:05:2d:17:48:d6:
56:a1:c4:56:6d:68:04:22:c1:16:be:be:36:1d:16:e0:19:85:
eb:01:06:b3:20:47:80:93:62:4e:73:f1:70:48:31:80:06:8b:
e6:ec:ec:bf:69:00:ec:b5:5c:a9:7e:d5:b6:a9:26:0c:1f:a4:
68:3f:3e:26:59:04:c5:f8:e5:a8:95:f2:13:7c:2c:26:f2:71:
99:be:5b:8b:33:15:75:68:99:97:22:42:72:62:c0:1e:d5:d7:
2a:62:0e:a8:e1:71:9e:e2:f9:e9:82:c0:be:c4:db:51:99:5b:
60:e3:c2:64:ac:d9:ac:f0:62:a2:11:f9:03:bc:fd:2a:29:59:
67:a2:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:38 2025 by rpki-client