Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: uozN3gcP6CIVloGEbzmJF7HkWACByZZvyF6nL2GsjbM=
Subject key identifier: 88:28:98:56:D4:53:4B:07:23:6B:C5:3D:C3:38:59:2F:84:D2:E8:3E
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 0198D4A787B761EABCDB55C0EB17B35F3AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0F0D
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: /T8YEIP/6YJdQqa0ui0/ijZco4NUqV+cTdDlAV02Ygk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:87:b7:61:ea:bc:db:55:c0:eb:17:b3:5f:3a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=88289856d4534b07236bc53dc338592f84d2e83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:d4:ea:ad:65:fd:0c:2f:4d:22:a8:3d:d6:
73:9f:de:0d:6b:1d:c4:54:96:ed:b3:42:73:5c:ce:
ba:39:62:f3:33:88:07:d9:e7:ca:ba:17:0a:9e:ce:
77:e5:f7:c4:9f:2e:70:88:7b:70:2d:ce:46:1c:e6:
aa:6f:86:ed:1e:3f:6b:30:cd:12:87:39:cd:59:7a:
28:bf:23:1d:d7:d3:c1:5a:88:22:76:ae:92:97:c7:
f6:83:ab:9a:c4:d1:00:87:55:08:f2:26:6d:ca:84:
15:28:8f:99:0d:04:56:d4:66:d6:01:45:f2:6e:de:
4c:45:c0:13:40:98:a5:19:5c:23:40:82:9a:dd:e7:
02:2f:a0:cb:f8:6c:70:7e:fb:8e:53:9f:75:05:ae:
ac:bd:ac:2e:3a:29:9d:4d:61:23:d4:d1:c5:98:2d:
ea:4c:91:2c:57:62:99:fd:8a:f8:ed:c5:34:c6:86:
fb:bb:31:4c:8f:2a:51:92:91:60:1e:13:4a:e4:21:
fc:94:6f:35:29:62:42:d1:8e:64:97:b4:18:26:68:
6b:e7:b8:24:bd:c3:92:26:ce:1b:2c:6e:38:00:46:
79:81:e7:52:a4:55:c8:f5:d1:08:42:95:65:bb:81:
fa:3f:9e:53:2b:78:15:e8:b4:a9:80:d1:4c:61:71:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:98:56:D4:53:4B:07:23:6B:C5:3D:C3:38:59:2F:84:D2:E8:3E
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2a:a4:4c:5a:61:ce:64:b5:b5:83:3e:bc:92:a2:24:dd:4c:
84:9b:d0:22:f5:2b:19:81:53:4e:11:98:ef:20:81:cf:a5:49:
6e:b0:51:16:59:43:3c:4b:1b:48:36:70:23:48:1e:47:23:8d:
f1:bf:67:06:62:ef:25:d2:bf:81:64:60:60:cc:28:03:86:32:
85:18:bb:8a:56:fc:73:34:92:0e:e7:e9:80:00:ac:37:13:06:
5b:66:d6:25:5a:f9:56:a5:75:0a:09:c0:1f:fe:14:a2:c6:db:
b6:2e:dd:ba:87:c0:a4:cb:2f:09:a2:6d:02:57:93:51:d1:21:
97:68:4f:37:47:cf:0d:0d:e2:22:2d:97:64:69:02:a1:03:c0:
b2:a9:63:3c:6e:4a:1d:03:c3:7e:2f:92:3c:25:f4:f9:f0:80:
ee:3f:0c:19:13:62:4c:59:b0:e6:ac:ae:66:6c:b3:ee:a6:16:
22:67:d0:ed:08:26:d3:0a:62:41:58:b6:fd:ef:f2:3d:6e:7d:
2d:22:7d:ea:db:56:8f:21:f6:24:75:0c:20:9b:87:37:ec:ef:
90:63:2d:3f:40:10:33:06:ff:35:a1:e3:e9:f0:b7:53:30:d0:
21:0d:a3:53:1e:0c:4f:df:cd:ad:dc:86:ea:0f:88:9e:32:a3:
c3:95:97:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:45 2025 by rpki-client