Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: pcuSVLQg3G6lDzzF660CoIZ1CJSv3tFHaMLRhrvN0Os=
Subject key identifier: 4F:85:DE:57:55:D3:20:E8:B1:8B:BB:83:84:18:C9:20:C7:B1:04:92
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 0197B6D735A9AC2E2C162969A4A00E095CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 09C2
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=)
2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: tGJq3srGdrAUrRG+4IuCo3D3+9cwN6CADeJCTmT+K4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:35:a9:ac:2e:2c:16:29:69:a4:a0:0e:09:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=4f85de5755d320e8b18bbb838418c920c7b10492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:15:30:85:5f:28:33:85:e1:f2:26:c8:60:
8f:f1:4e:44:9c:06:95:e9:4e:e4:38:9a:a4:61:bd:
ec:96:fd:2e:08:55:ac:e0:ed:9a:f7:ee:5b:40:53:
ab:a0:3f:2f:45:46:70:58:41:0b:8b:71:84:b1:a0:
d7:d4:50:f4:8b:d3:77:7d:fa:86:24:e8:e6:1f:6b:
53:f9:a8:63:b8:e9:d7:45:60:2b:e5:5d:49:8f:a9:
8a:40:6c:fd:4e:e2:6c:35:b2:32:ce:26:71:75:22:
b1:49:8a:75:05:fa:b0:1c:72:c6:dc:b5:13:c6:e2:
95:20:8d:a1:53:e4:f5:cb:25:01:fc:06:42:5b:62:
25:e0:d0:08:58:f7:da:ea:ae:2a:1d:f7:24:26:3c:
06:49:bb:33:92:fb:11:f6:19:ed:e0:96:e5:e4:02:
78:ff:08:d6:41:9d:67:3f:bb:ec:1f:35:bf:63:5c:
65:38:5c:62:cb:cd:d1:8f:a1:42:52:6c:ea:34:36:
0e:2a:4c:a8:f3:41:14:84:ae:99:fa:89:40:36:5f:
70:32:8d:51:77:92:47:05:f8:c4:3b:5d:d1:11:83:
68:fb:3f:a9:60:fe:e3:bd:23:bf:d0:f7:aa:b5:ca:
44:a3:6b:11:30:86:d5:69:9e:96:b0:48:80:17:60:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:DE:57:55:D3:20:E8:B1:8B:BB:83:84:18:C9:20:C7:B1:04:92
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7a:18:ea:ab:b9:1b:75:ff:7c:39:6d:7e:bc:fa:bf:d5:03:
f2:59:b7:14:03:46:03:15:66:f0:cb:fd:d3:37:86:69:3d:36:
85:d7:2d:2e:30:44:e2:c1:f8:bc:a6:70:7e:36:4a:63:3b:a3:
23:f6:3e:11:be:28:50:48:87:a3:3e:78:b7:90:7c:ec:2c:00:
58:aa:a1:38:ca:d4:8c:d6:20:24:1b:a0:8f:17:4b:1a:ac:74:
18:2b:95:1e:06:39:ef:cd:dc:d2:ef:a2:79:49:96:bd:e0:4e:
e4:40:14:db:16:fb:c0:af:96:fb:30:89:30:85:72:5d:71:1a:
f4:6b:75:dc:95:d6:52:45:ad:96:f6:84:de:86:2a:9e:4e:3c:
b1:e8:bc:81:fb:68:19:77:03:0d:c3:e3:c5:df:73:d8:0b:42:
81:9f:91:3c:df:a8:c0:af:31:e9:1d:e5:4f:55:76:bf:37:fc:
2c:cd:33:22:2b:2f:0a:96:3c:b6:1c:a4:8a:d6:16:e0:87:03:
31:18:e0:fa:73:e1:e0:e5:d9:42:fa:f3:dd:cd:f5:de:02:8f:
b2:e5:71:01:99:46:62:a7:90:58:f2:1e:c1:56:6a:50:f2:76:
74:0f:80:85:24:ce:8c:bc:9f:49:41:64:ba:c8:85:94:c6:a4:
6e:ba:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:59 2025 by rpki-client