Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: VuqXZBpQKXZjSVfaoh4hqW3uIFxVuzsYbcPTT9Na66E=
Subject key identifier: 1A:2D:1F:C0:D3:8D:26:97:BB:A1:AB:F2:FF:10:D5:2E:2F:1D:C4:D7
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 0198D6610FB1E9B941F854CDF14B57954054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 0F65
Signing time: Sat 23 Aug 2025 10:02:21 +0000
Manifest this update: Sat 23 Aug 2025 10:02:21 +0000
Manifest next update: Sun 24 Aug 2025 10:02:21 +0000
Files and hashes: 1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: hAyTZJIp+BDLEfArxMUIwTlBgJlXbjt5VBJLnSbBf2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0f:b1:e9:b9:41:f8:54:cd:f1:4b:57:95:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Aug 23 10:02:21 2025 GMT
Not After : Aug 24 10:02:21 2025 GMT
Subject: CN=1a2d1fc0d38d2697bba1abf2ff10d52e2f1dc4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:84:69:bd:4a:70:76:08:fc:bb:e4:91:55:
bd:ee:6d:f3:01:8c:28:49:a5:d0:ad:d5:e8:ae:d1:
21:91:6d:a3:49:2d:12:65:1b:48:06:4b:13:dd:d0:
32:23:32:90:b0:42:17:23:ec:d7:35:36:7a:35:ed:
4b:28:d4:8e:d6:40:8e:97:9c:a1:7b:43:dc:b4:b3:
cd:80:20:a7:a8:25:43:98:20:c0:4d:34:46:22:a8:
49:8d:2f:cf:66:9a:67:3e:0d:7f:a4:3d:82:ba:dd:
e5:6a:86:89:12:8a:d4:86:8f:55:8a:4f:b0:7f:b7:
82:df:9f:d1:ef:65:75:c2:2b:78:f8:28:8a:9c:a0:
f0:3d:c8:15:e7:1e:b4:6f:d7:29:1f:e4:74:7b:c8:
44:41:c6:9e:27:db:3d:80:bc:1a:f9:46:d3:31:8a:
70:b6:b0:19:10:8f:9f:1c:e7:ff:69:64:30:07:dc:
64:11:66:41:0a:6b:8a:2b:4b:7b:34:de:f8:51:bf:
2e:4f:a5:7a:16:a2:2b:46:cd:4f:84:87:36:97:5b:
75:7c:04:9f:d7:43:86:34:2c:bb:ed:c2:4f:3b:db:
dd:a0:e5:a1:3e:d9:55:bb:98:6f:12:86:86:77:aa:
ee:91:63:4a:37:1c:e1:e3:12:10:c3:84:2f:53:8d:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2D:1F:C0:D3:8D:26:97:BB:A1:AB:F2:FF:10:D5:2E:2F:1D:C4:D7
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:35:2a:bd:3e:29:6b:82:e2:c9:5a:cd:5f:80:f8:ba:32:28:
ba:2e:b3:59:bb:10:74:9f:9c:a8:d3:02:8f:4c:5b:ea:d9:b7:
31:f4:53:2f:2a:b5:d8:9e:5a:95:6b:8b:9c:e5:6e:92:c0:5c:
f3:31:93:2e:4e:5a:f6:c5:72:37:9d:7b:25:ab:08:4a:02:a0:
ea:d8:ad:8d:f3:ee:56:c1:7d:3b:fd:66:d5:4e:ac:5b:df:8b:
55:df:57:0d:5f:62:7f:06:98:ab:ae:de:92:2d:50:e5:a1:a5:
f0:15:76:69:9a:34:0a:9d:0b:57:67:f1:5e:96:cc:1c:c2:08:
82:26:f9:52:d1:78:4f:04:fc:b3:98:62:c6:fc:45:0d:3d:c8:
1e:39:f5:04:80:f3:31:31:5d:d2:ff:01:b4:1e:14:15:e2:17:
be:3f:e2:77:6a:37:9f:68:00:2f:09:34:7c:12:00:7e:08:f0:
a1:47:dd:53:4e:87:db:38:8c:0d:52:8e:22:af:cc:4b:4f:7f:
1b:86:39:00:73:c3:f9:14:a7:61:4f:1d:b7:a1:f1:b5:b9:c8:
88:5a:d1:a6:a7:2d:eb:b0:25:5c:7b:20:45:e6:65:82:fa:5d:
51:78:0c:9d:cf:45:4e:0b:24:f5:24:23:f4:44:e7:a6:89:61:
7e:9d:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:25:19 2025 by rpki-client