Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: iCIETkKOBh11hBLZruQTEigULAL94HEsP08dQJJPy7s=
Subject key identifier: 9D:AD:CA:6D:AC:F1:C4:FE:19:A3:29:F4:D1:3F:BD:C3:F4:08:3A:53
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 0198D6CD6BC60315B75D2E9E233C0F56BA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 121C
Signing time: Sat 23 Aug 2025 12:00:43 +0000
Manifest this update: Sat 23 Aug 2025 12:00:43 +0000
Manifest next update: Sun 24 Aug 2025 12:00:43 +0000
Files and hashes: 1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: BxH7hICxMs6ghfvJyj4pVj74c4SMtCZx2px88D0dgdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:6b:c6:03:15:b7:5d:2e:9e:23:3c:0f:56:ba:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Aug 23 12:00:43 2025 GMT
Not After : Aug 24 12:00:43 2025 GMT
Subject: CN=9dadca6dacf1c4fe19a329f4d13fbdc3f4083a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:69:d3:af:00:d1:5a:2b:58:9e:a1:6a:53:
08:c7:ae:a9:46:9d:35:a7:12:70:4f:75:46:57:9c:
19:cb:40:1a:bd:e0:5b:2d:f5:25:93:ae:6f:2b:07:
e8:4e:dc:03:49:df:77:59:5a:98:b9:f9:7f:f3:c8:
e7:ce:5f:4e:b0:4c:a7:a7:60:5c:c1:02:7f:8e:10:
d2:c1:0d:e5:da:9d:b9:88:9f:c4:44:85:13:32:5a:
8f:2c:86:77:c8:35:21:2c:57:5e:ea:89:6f:55:e5:
ff:76:3e:db:53:78:b9:ba:48:09:1b:6d:c9:0b:a2:
40:77:b6:7b:a0:43:23:79:32:86:1c:df:c3:5d:13:
ad:67:92:99:ef:92:28:9d:54:fd:bb:e2:7d:20:84:
67:23:d5:6a:12:55:97:63:b1:a3:85:c7:fe:7b:79:
be:dc:57:de:93:71:03:f9:f2:88:75:0d:eb:a6:d4:
97:32:78:fd:3d:e6:53:c8:fe:b7:4b:50:6a:90:ce:
3b:1f:53:2b:d1:a1:23:da:02:ca:6d:48:f2:f2:8f:
62:47:de:48:14:1b:a3:d8:ac:02:7b:93:02:0a:92:
08:af:ed:9d:e9:5c:65:8a:66:4f:24:cb:15:d9:c0:
83:d8:f2:24:57:f1:9b:6e:43:e6:2b:57:9a:7e:76:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:CA:6D:AC:F1:C4:FE:19:A3:29:F4:D1:3F:BD:C3:F4:08:3A:53
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c9:b5:03:b9:08:9f:4e:88:18:ba:b0:97:e4:d0:1b:16:58:
6c:97:e0:22:94:07:a4:ec:7d:55:35:60:d0:4c:19:09:a2:03:
7f:88:9f:38:c2:fa:1a:cd:c8:5c:7d:10:ee:bb:b4:e1:b6:1c:
dc:4b:4c:d0:5c:e0:67:8d:a9:da:4f:26:77:c5:0e:4a:cf:94:
8e:d8:d6:e9:4b:8a:3a:66:62:c3:ed:7d:0b:97:21:e6:e3:1e:
20:5c:99:56:79:71:c3:2a:1f:8b:42:69:65:c8:eb:6c:7b:d6:
e6:0d:bd:2d:fc:83:41:e8:19:7e:45:75:98:f4:84:78:dd:46:
bf:e1:4c:99:89:3a:8f:10:58:5e:3d:b6:33:10:00:2f:02:8a:
eb:79:2d:f3:4e:f8:ec:75:0f:74:cd:d1:2c:15:67:6f:e5:0b:
05:53:47:0e:82:1c:1b:4b:f7:ee:b7:be:c7:1d:0a:6d:72:00:
b1:aa:72:08:74:e3:03:9d:30:a0:1a:59:5b:cd:d9:75:91:57:
5a:2b:d8:a5:9e:4e:b0:3f:8c:7f:80:ab:be:44:b2:37:14:c7:
2c:a5:3f:94:75:20:e8:8c:d1:43:e5:88:c8:c7:00:4d:b2:b5:
53:b4:c4:0e:ad:2b:04:c6:03:ce:3a:ec:2b:cb:cd:a5:97:73:
5f:8b:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:49 2025 by rpki-client