Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: gtrzfhI3c8YHozHTBIPL+YRQcspY0L2nOXWsihe7YqQ=
Subject key identifier: 9F:83:33:B5:9F:63:AF:86:82:D3:43:5E:08:7D:CE:EE:A1:84:A0:AA
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 0198D698883956CCEBA21139B186B4B99F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 0A57
Signing time: Sat 23 Aug 2025 11:02:57 +0000
Manifest this update: Sat 23 Aug 2025 11:02:57 +0000
Manifest next update: Sun 24 Aug 2025 11:02:57 +0000
Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=)
2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: CNIzWPqH/SFH/T8LbSgj8BUPfn39TJvc7W1SvNwyIEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:88:39:56:cc:eb:a2:11:39:b1:86:b4:b9:9f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Aug 23 11:02:57 2025 GMT
Not After : Aug 24 11:02:57 2025 GMT
Subject: CN=9f8333b59f63af8682d3435e087dceeea184a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:60:b8:4d:a4:e3:20:ac:1e:c0:42:1b:30:
66:dd:73:d3:22:47:7d:c7:96:3e:f7:f3:d3:03:6b:
51:ef:1d:b3:84:c3:93:ad:b3:57:8e:1f:4e:a2:b9:
35:fc:3b:24:77:3c:ca:b1:9b:80:4b:c5:c8:1d:4c:
b8:a1:7b:5a:fb:c8:9f:e3:51:b4:69:8d:ea:02:be:
b4:23:e3:85:1d:a8:b4:19:cf:9b:e4:3a:3d:c7:f3:
b0:d2:7e:33:d6:4a:09:36:fc:50:9d:d5:ff:f3:35:
be:c7:54:e4:91:b1:27:9b:ac:df:58:5a:f5:aa:ef:
a8:b3:b6:66:95:69:ef:d6:0a:3e:54:61:c8:cc:1a:
62:8c:51:5a:15:8e:94:8e:e2:a0:25:d8:1b:d0:9a:
01:c4:47:4f:e5:d6:83:17:db:18:29:1e:04:30:82:
5f:59:d1:36:c9:5a:20:9c:14:fc:13:a8:ee:7d:88:
cd:5c:b4:f5:62:94:62:f7:eb:b5:2c:c3:55:8f:75:
01:67:c4:9f:be:4d:75:f2:d0:51:e5:99:fe:e8:1e:
87:14:b2:2a:d0:4a:96:8e:d5:f5:ab:4c:eb:77:15:
52:64:e6:ba:e4:81:4a:80:ed:a0:fd:a1:e8:c5:cd:
a3:d8:0c:c1:99:1d:5c:41:c3:f2:4a:5e:42:6a:1e:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:33:B5:9F:63:AF:86:82:D3:43:5E:08:7D:CE:EE:A1:84:A0:AA
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:43:0c:04:fd:26:9f:06:2b:51:dc:0c:bc:4d:d0:0d:c4:95:
22:a1:76:4d:4b:26:e2:1f:54:d9:e3:3b:b5:81:5c:62:d4:e4:
9a:78:fa:c9:bf:71:bc:98:4c:38:bc:c0:06:01:b3:2f:28:a5:
62:d6:10:e6:d2:f2:0c:09:6a:4f:fe:f0:ad:65:b6:80:72:70:
85:16:6f:1f:54:e3:44:5d:d5:2b:73:25:77:5b:6c:df:b0:f4:
e2:09:96:ad:0f:ec:d2:bc:b0:32:77:7a:3d:2e:cd:23:ec:bc:
a5:74:73:4f:08:9b:d8:cd:9c:3e:db:fd:74:a4:ba:94:a5:af:
f9:ec:7a:ce:6d:1f:0e:43:63:54:9d:4e:34:62:79:a6:7d:db:
0f:29:4f:ac:30:d9:ea:55:dd:f3:f0:0d:56:25:fd:bf:9a:f4:
7d:f9:59:d8:5c:7f:1c:9e:44:4c:22:d9:0e:42:9e:bb:d1:de:
b7:c0:52:1f:a9:3a:f1:42:15:06:cd:98:9b:6d:0b:e2:cc:ac:
76:dd:cc:ba:b9:15:00:f6:cd:6e:13:4a:2d:34:da:a3:0d:e4:
0c:c1:30:e0:9a:14:e9:f1:7b:61:9d:af:b9:57:f1:fb:64:05:
d7:21:50:99:87:06:fc:8a:31:73:5b:15:4d:74:e7:eb:a0:97:
4b:18:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:24:12 2025 by rpki-client