Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: 8H6mVjlYuAxGQrNq82OfBEl60UWT8AXOLpUNFVUgrN4=
Subject key identifier: 25:54:E3:0F:18:86:EF:57:86:2A:6D:1C:01:EB:E8:33:B2:87:FD:91
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 0198D5BBC822C4822EC5D580867A19F6C064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0AA2
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: sS/yzzzAPnoYMsHpeA8b0HLJry0xDcWcNZDNX8T0Kfk=)
2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c8:22:c4:82:2e:c5:d5:80:86:7a:19:f6:c0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=2554e30f1886ef57862a6d1c01ebe833b287fd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:4b:ea:3a:bd:81:54:f4:ea:4b:9d:0f:de:
9a:4b:cc:dd:c1:0d:0c:4e:d1:d5:e0:9f:60:98:f1:
0a:39:ff:d3:b1:9c:71:0f:90:ce:bf:1f:f4:df:4b:
0e:dd:8a:37:23:58:54:e9:64:e8:17:e5:0a:4f:c0:
8d:7e:e3:13:93:2c:7c:29:f6:37:90:ea:1d:83:ac:
ee:c0:50:a1:18:3b:f7:21:c6:41:13:86:a6:ae:62:
4a:69:67:eb:ec:9f:f6:0c:05:29:56:37:6d:ac:56:
2f:b2:eb:d9:3a:f7:c2:17:7f:ad:37:a6:b0:00:39:
de:59:a0:29:a6:87:fd:e7:c7:22:5b:9a:f5:42:74:
3b:af:32:34:8a:85:bf:fd:f7:54:f4:b9:c7:9f:0a:
94:cc:37:99:ec:8b:82:ca:89:70:2a:10:48:96:3e:
25:ad:68:36:57:75:73:0c:50:37:bd:43:a7:cf:40:
7e:bf:5c:9a:87:e0:1b:00:0f:c1:c0:97:07:5f:5f:
a9:de:51:1f:4c:e0:6a:40:ad:95:4f:ad:5a:2d:43:
86:5c:64:a1:5f:cd:73:41:80:fe:57:4a:79:f2:ff:
67:c0:fe:69:3c:f7:c6:3b:60:cb:b2:8f:9e:21:dd:
d4:3f:ae:83:2b:ee:d2:3d:96:b9:49:c8:9a:97:04:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:E3:0F:18:86:EF:57:86:2A:6D:1C:01:EB:E8:33:B2:87:FD:91
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5c:9d:2d:9a:0c:d1:3f:94:8c:87:ba:dd:aa:52:ef:62:96:
f0:7f:99:81:0f:99:51:00:f9:98:89:10:5d:26:e8:a6:12:1d:
b6:16:0d:99:34:d2:b4:fb:df:99:89:0e:0c:9f:3a:3e:39:31:
19:bb:21:e7:a3:67:48:bd:7b:9c:e2:ac:bf:45:67:e0:01:3a:
33:b1:2a:c8:18:12:81:ee:06:95:27:13:28:20:11:0d:09:14:
cb:2d:3d:c1:67:e9:56:0f:50:75:c8:d1:b4:6f:75:5b:0c:98:
c6:3f:01:a7:a7:4e:fa:2d:a1:57:51:04:cd:ec:0c:fd:6f:da:
ae:17:d4:11:b0:56:1d:a0:79:1f:a0:db:65:26:24:61:4b:77:
ff:02:64:e7:5a:ae:0a:9a:74:eb:4f:8e:c9:01:a1:18:33:e6:
4e:4a:54:f2:a6:ab:10:e7:fe:d3:c5:bc:3a:bc:7e:58:56:84:
03:93:12:70:24:3b:de:eb:ee:ad:66:3d:4b:bb:3d:cf:63:c1:
89:44:ae:c1:23:cc:48:74:c0:28:f9:3b:45:02:46:37:09:fa:
f0:ac:6f:43:74:8e:e4:fd:79:04:24:b1:d2:9c:71:9f:2d:bc:
1c:bc:6a:16:5c:0d:5e:a3:b4:29:16:1f:3e:45:e9:c4:68:d3:
78:38:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:09 2025 by rpki-client