Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: Rvuzw9X4DBqFHwtehFY0D21X0PQoorceZ9K3elU82x0=
Subject key identifier: 21:1A:D2:DF:CD:78:12:8F:DF:C1:5C:B1:AE:8F:6D:96:FA:32:53:B7
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 0199FC21998A24924C9C017D01837969A428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 0AEF
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=)
2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: Ed5bWlHRnWpuHpFEenBSAvW0pn0VGUDzEx4sGUOYJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:99:8a:24:92:4c:9c:01:7d:01:83:79:69:a4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=211ad2dfcd78128fdfc15cb1ae8f6d96fa3253b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:72:23:2c:be:c5:c3:d8:97:1c:60:a1:82:
28:7f:09:24:53:94:fd:ef:01:19:8b:ad:92:3c:2b:
22:e6:b0:f2:2b:8d:97:86:14:18:31:ce:17:ee:73:
c6:c9:39:e4:e2:a5:f6:91:a6:32:92:03:fe:65:ac:
f3:38:e1:96:1b:5f:db:a3:b4:a6:cd:41:48:7d:3f:
99:4d:06:9c:1d:45:f7:4f:1b:c4:6f:09:51:88:5c:
52:8a:e7:94:0a:cd:bb:b5:f1:56:86:95:11:f3:05:
4c:ef:23:ed:ec:9d:32:c2:d5:a0:a9:c1:94:b3:93:
76:8a:6f:97:85:b4:c6:72:30:83:9f:0f:87:7e:72:
2d:05:81:a2:23:7a:67:a6:ff:38:87:e8:2e:9c:c4:
54:67:4c:1f:61:72:57:32:f5:7f:22:d9:39:cb:be:
e9:e4:75:08:c9:0a:8b:75:3f:4a:89:ed:34:bc:43:
8d:90:f2:ed:57:9f:a6:16:a2:bd:4a:71:0f:29:ec:
11:47:6d:56:d4:0f:c8:86:ea:9c:09:ce:0d:6a:6e:
f2:bc:30:9d:fd:11:18:31:fa:de:4b:bc:cd:cd:eb:
57:ac:c5:ad:7e:31:4a:98:ce:5c:67:09:40:a6:ce:
3a:7c:55:d7:10:9a:e8:30:ee:60:c9:a1:4c:46:de:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:D2:DF:CD:78:12:8F:DF:C1:5C:B1:AE:8F:6D:96:FA:32:53:B7
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:43:a4:10:99:21:56:a5:17:e9:b9:7d:ef:73:78:cf:94:
bc:2f:7c:1f:64:41:af:41:68:cb:63:21:c3:d7:b2:7f:83:8a:
f8:1a:81:4d:c5:22:c3:39:32:99:09:a7:8b:37:a4:0b:c5:44:
d1:85:34:07:01:88:65:9b:82:0c:c3:a2:7c:c2:62:5e:12:e9:
7e:46:38:0a:63:6c:d1:b8:bc:e8:72:c0:c3:69:fe:c7:1f:6f:
37:64:b9:ed:bf:a4:3e:60:73:2e:9c:e7:e6:e3:8b:46:04:57:
21:d8:3c:c8:b1:e7:c9:06:dc:42:c2:0c:b8:a4:3c:87:d9:05:
6b:96:71:20:4b:cb:d4:d4:21:2d:f2:5d:f8:ef:35:16:69:5e:
77:2a:94:bd:f8:32:2d:e5:3c:68:2d:d7:c0:9c:db:2c:6b:8d:
46:ae:ac:bb:d9:3e:7c:db:21:49:f9:1f:0f:d8:54:5a:5d:57:
ac:d0:39:5a:8d:2f:54:63:d2:11:b2:7b:90:2b:da:54:00:ad:
a5:22:ea:aa:59:12:21:fb:a0:14:96:bd:ea:fc:42:3a:37:1e:
50:9e:fb:81:40:da:c1:91:b2:82:fe:0a:26:2d:a8:6e:1b:ef:
d8:10:e4:31:74:46:24:ee:93:77:ea:a8:60:cc:d6:86:81:ed:
03:9e:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:43 2025 by rpki-client