Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: BWK4fSLA5xopSDpUvDfPGTxukYFf46XDudvYCFLwI2g=
Subject key identifier: 61:35:B7:B0:67:49:40:CB:E5:13:CF:00:D0:9B:7A:F0:43:9B:85:C4
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 0198D66102DE5FE5860A26F4A22974387ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: 6lb+bsp4Nl1Hxc3FFNFDjMOXN9E2sg6p9d94uZ+WFnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:02:de:5f:e5:86:0a:26:f4:a2:29:74:38:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=6135b7b0674940cbe513cf00d09b7af0439b85c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:6e:63:c3:18:a6:72:1f:bf:f6:e3:15:c2:
62:a7:54:cb:0b:af:70:8c:35:ba:d5:78:77:15:ac:
30:7a:16:42:3a:8c:e8:c5:22:f3:93:e2:fd:01:c2:
fd:17:9b:45:fc:c7:9a:2c:ca:f7:7d:42:81:84:c4:
62:30:4b:fa:0f:8f:ad:60:6b:c1:ad:62:74:55:34:
de:ec:82:91:c5:68:83:c0:72:8c:45:5d:22:52:76:
b7:b3:08:76:fa:49:b2:06:a2:ab:27:68:8c:37:fb:
0c:d3:b5:b4:49:0e:69:5b:c0:a5:78:d0:b3:c9:05:
d1:72:6d:2b:96:89:2d:16:f1:08:f2:3e:da:c0:8a:
aa:aa:25:88:b4:c6:fb:00:55:e2:87:56:32:5e:c6:
fe:cf:d4:3e:56:8b:22:ee:28:f0:30:1c:64:38:4f:
70:9b:42:a8:50:fc:da:90:56:dc:2a:7c:68:80:7d:
f2:83:15:5c:5f:a0:65:c9:94:dd:5a:c2:b9:8c:aa:
36:8a:b9:9e:ea:b9:29:f3:a3:46:7d:0e:ee:a4:c0:
7e:8f:e1:14:0e:82:00:2a:b6:1a:e7:63:c4:db:52:
7a:26:c8:8e:2f:69:1f:fe:17:e9:88:aa:05:62:96:
19:60:60:f5:d8:c9:fe:97:53:db:66:64:5c:de:61:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:35:B7:B0:67:49:40:CB:E5:13:CF:00:D0:9B:7A:F0:43:9B:85:C4
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:67:31:85:a1:0d:95:72:97:31:fe:2c:36:34:0a:80:41:70:
2a:fc:1d:3b:85:94:eb:6e:27:c8:7a:83:e5:56:d3:11:ef:21:
1a:04:7b:94:73:10:6e:6f:2a:6b:78:56:8e:3f:74:19:a3:ca:
3e:f0:bd:b9:02:f2:b2:9f:09:38:89:f6:c1:30:05:be:bd:87:
5e:d3:b8:18:99:22:cc:71:28:58:10:77:c3:55:9d:4f:3f:88:
46:21:36:3e:eb:b2:31:94:7d:bc:c2:0f:29:be:17:58:75:13:
22:d0:da:51:4d:2d:04:d2:d9:df:c8:3e:90:46:e4:62:11:f9:
33:54:aa:f8:d9:c2:ab:9b:c7:97:b1:71:02:e4:b2:1a:51:f2:
0d:5a:8f:82:ca:88:62:26:1c:6d:c6:18:c5:93:83:4a:17:6a:
b7:77:08:15:88:e7:72:83:0b:1f:bc:43:e6:e1:22:d5:fb:b9:
d9:76:6e:cc:f6:07:3f:a4:de:b9:5a:38:b7:5e:10:a5:bb:e1:
b7:63:a7:4d:01:39:b5:ab:39:27:5a:bf:d0:ef:a6:44:a5:97:
07:cc:e8:75:0d:65:a1:63:7e:4b:84:d8:83:fd:8e:cd:7b:5c:
73:79:85:97:e2:eb:06:82:98:b5:50:bf:bb:e8:30:c0:64:62:
39:30:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:52 2025 by rpki-client