Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File: my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier: jpBdloUwrXQRJbYpyMjqEzmHs/RPEx6hpS6cTunlAdo=
Subject key identifier: 58:AF:2A:4C:FB:C0:24:40:FE:2B:3B:56:4B:3B:2E:F4:1C:DF:1A:66
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial: 0198D473519D6F7DC69BC0A5B371B4A2EAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number: 0DFA
Signing time: Sat 23 Aug 2025 01:03:03 +0000
Manifest this update: Sat 23 Aug 2025 01:03:03 +0000
Manifest next update: Sun 24 Aug 2025 01:03:03 +0000
Files and hashes: 1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: 5xZrSSsEXd1Cg6DtiZZHK+t8LPKw3TBIl4B/i2YLDtE=)
2: qDQj2i79pZYtwis1stkVmdhu_cA.roa (hash: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:51:9d:6f:7d:c6:9b:c0:a5:b3:71:b4:a2:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
Validity
Not Before: Aug 23 01:03:03 2025 GMT
Not After : Aug 24 01:03:03 2025 GMT
Subject: CN=58af2a4cfbc02440fe2b3b564b3b2ef41cdf1a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:3d:c9:e9:40:70:33:70:c6:ae:a0:b9:9e:
e0:2e:46:c1:64:91:a8:21:26:27:37:d2:2d:f6:4f:
e0:2f:0c:72:e3:5c:9f:32:37:4d:12:7a:3c:8a:ba:
64:4d:da:58:b8:96:85:9b:e5:7d:db:fe:71:61:f7:
8d:19:21:ca:ab:c2:ed:e8:dc:d6:37:b6:c7:5d:03:
c4:8b:f8:81:31:12:9f:bc:4f:38:aa:27:79:10:66:
23:85:70:4f:79:26:5d:60:64:b4:25:22:a6:8c:b3:
35:9c:fd:b2:c6:3c:ee:95:49:52:13:7d:da:9e:46:
49:63:fd:24:16:30:28:ca:42:72:46:43:0a:1f:23:
24:4d:6b:1d:b9:52:92:00:da:0c:45:a5:cb:3b:9f:
c6:7c:1c:25:35:c5:cb:5b:4a:c3:ec:cd:0d:ac:08:
ca:c0:9f:c9:0b:90:48:bc:3e:b2:0d:64:d0:ea:ea:
58:a5:cf:af:10:fe:00:fc:76:01:0f:dd:99:d9:4b:
29:8d:8a:17:71:dd:b9:dc:b3:d8:0e:8a:a2:00:04:
7d:39:b0:bf:3f:6b:1c:0b:74:89:a5:4f:8a:9d:4c:
d3:ad:3e:c0:eb:71:98:b6:ad:3e:f7:a7:88:0c:1b:
0c:b7:29:bd:f1:7e:71:46:28:f1:3c:9e:f6:19:af:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:2A:4C:FB:C0:24:40:FE:2B:3B:56:4B:3B:2E:F4:1C:DF:1A:66
X509v3 Authority Key Identifier:
keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b6:f9:dd:d5:d2:8b:a0:17:53:54:8d:1e:28:2c:a8:49:05:
36:57:8e:92:01:f5:73:40:bf:1b:cd:b3:5f:d0:76:db:6a:91:
ab:58:fc:14:8b:41:21:11:b0:47:f2:08:18:3b:94:4c:40:23:
fb:01:99:67:4b:48:8f:d5:84:2b:c2:05:9b:f4:3c:30:7e:da:
eb:b4:6f:b3:ea:50:78:7f:b2:f9:a9:97:dd:e3:f0:3d:29:74:
44:32:0c:a2:21:dc:6a:52:78:a7:b1:e0:30:ef:0b:1a:69:2b:
79:30:d1:d7:ca:6d:39:e6:28:aa:10:5c:71:16:3b:df:9f:49:
45:5e:b7:e7:b3:1b:26:7a:ca:c7:ca:a6:ac:84:f6:81:d8:e7:
91:17:8f:20:3f:85:cf:6b:03:75:61:ca:a4:d0:2c:df:06:75:
ae:e6:e6:a6:b5:f2:71:ab:bc:fb:2a:e4:8e:eb:f4:ae:94:32:
e2:54:12:0d:4f:47:21:97:d7:33:6e:0c:1f:e3:9a:8c:84:28:
b3:ea:96:40:0d:57:5c:09:38:59:18:50:86:0c:a9:75:a4:15:
fb:96:b5:f9:c2:4b:f1:e7:85:1f:3b:33:e3:93:76:c9:78:02:
68:f8:71:b3:cb:a8:fd:ba:86:c8:6e:4a:0b:ec:77:a5:76:1c:
71:bc:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:31 2025 by rpki-client