Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: pMV71vkLmYY47/IcPyZn8fqZp3wX6Eeax8G8g0GApKM=
Subject key identifier: 9F:6A:8C:11:9F:13:B3:DD:5A:4B:4A:04:71:69:EA:E8:7B:A3:20:94
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 0198D5F11E38D4FA960EADF0E74462B52F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0B10
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: YXvYedZ70yyaZMSr7ypVgOrb1BlK2KdinsHevcfcn00=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1e:38:d4:fa:96:0e:ad:f0:e7:44:62:b5:2f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=9f6a8c119f13b3dd5a4b4a047169eae87ba32094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:8c:f8:77:c2:8d:87:3c:cd:0c:1f:fb:a9:
64:00:7b:2d:62:4d:4b:a5:22:df:b4:91:00:93:f2:
c6:17:b6:a0:db:d1:e4:3c:00:2b:a3:be:b5:76:9f:
11:7a:db:cd:3a:e3:56:fa:ed:73:91:e8:86:4f:c3:
13:9d:ad:1f:aa:b9:f5:64:51:b2:06:b2:02:9d:ab:
0e:14:f2:59:5b:05:bd:4d:54:8b:78:c6:10:6f:25:
96:b6:c7:2a:96:16:4d:41:6e:41:a4:62:b4:aa:43:
db:51:7f:ca:3a:46:2c:38:14:34:f0:56:10:e4:cb:
6f:5b:aa:fb:db:3e:22:d0:4e:99:cb:3d:9f:36:57:
60:b1:49:ae:31:30:1c:78:4a:b3:ca:6b:e2:5f:e5:
0e:a1:86:65:74:2d:5a:9e:cb:57:d0:c2:6f:85:80:
5e:a3:8b:06:f7:58:c4:4e:f7:6d:a6:f1:8d:c2:70:
58:89:ab:09:be:27:21:4a:20:61:a8:fb:1f:4a:47:
9b:15:fa:95:14:5e:50:bd:8e:d9:22:cc:d8:40:f3:
87:f7:07:5c:62:06:c2:20:68:50:f3:8c:8d:54:70:
d1:e5:68:06:80:30:ff:b2:5d:5d:8f:eb:3f:18:c4:
59:0e:f5:f8:85:f0:de:72:4f:22:41:4c:65:3d:81:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:8C:11:9F:13:B3:DD:5A:4B:4A:04:71:69:EA:E8:7B:A3:20:94
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:99:7c:68:dc:f8:03:a5:eb:d6:02:9c:73:18:00:cb:0f:1b:
6f:73:9d:f5:2e:dd:2e:27:c2:a2:2d:9c:f8:b0:ac:b9:ca:ba:
38:6e:f9:7a:2b:e7:04:42:71:df:09:69:99:07:69:28:3a:12:
e1:ed:5e:79:ec:46:2b:c7:8f:0c:44:bc:48:13:75:c4:25:79:
f4:34:84:99:44:de:6b:ca:cf:05:8e:0c:4e:ba:2a:cb:6c:24:
d7:ca:5c:08:ca:a6:3d:86:29:f5:79:98:a8:3f:1b:44:b5:1b:
51:cf:47:31:3e:36:7e:e2:0b:d1:55:b4:27:9f:91:03:64:ba:
72:2e:bb:0f:33:4e:13:79:4b:81:c4:3a:b6:af:59:c0:f6:0d:
42:a3:a0:aa:82:be:b3:c6:e7:b5:1f:86:e8:41:e7:36:db:fd:
8a:17:dd:1f:ba:c8:8d:d1:d4:a2:79:76:92:d9:76:eb:dd:e2:
2a:65:a7:a2:95:ab:ff:4c:29:5e:25:f2:35:e2:58:04:40:fb:
0b:a2:9f:b8:6e:1b:7c:98:5b:bb:a3:35:bf:de:96:7b:04:a6:
eb:eb:27:86:d2:e4:66:e8:c4:93:38:07:07:39:e8:65:c1:fd:
c1:37:75:1b:6b:df:74:6a:ba:9c:3e:cd:d8:de:d6:73:87:65:
0f:37:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:01 2025 by rpki-client