Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: n9MJuzqfPKFduHMkPkzHHjvIECJ1dKnr9JTUb5gukKo=
Subject key identifier: 89:4B:EB:FA:BF:FF:05:40:28:1E:A2:49:E6:13:AC:E8:75:EB:75:E8
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 0197C838AB5602B10E8124BD526AE6CA397B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 15C1
Signing time: Tue 01 Jul 2025 23:00:46 +0000
Manifest this update: Tue 01 Jul 2025 23:00:46 +0000
Manifest next update: Wed 02 Jul 2025 23:00:46 +0000
Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: G9NHwLiCn9p1UGsWiJYVPxqvcULy8qk3FD0SCJQWeZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:38:ab:56:02:b1:0e:81:24:bd:52:6a:e6:ca:39:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Jul 1 23:00:46 2025 GMT
Not After : Jul 2 23:00:46 2025 GMT
Subject: CN=894bebfabfff0540281ea249e613ace875eb75e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:cf:d0:af:96:37:56:90:8f:77:0f:79:cb:
64:26:1e:56:b3:15:fd:76:88:30:1b:2d:a8:f1:3d:
b6:e2:7e:6e:f4:be:d0:d7:72:83:a7:00:77:cf:ca:
03:03:eb:00:8f:b0:dd:e0:0c:e0:12:23:37:e9:45:
07:99:83:2b:85:d6:86:cd:c6:f7:d7:07:ba:d2:dc:
82:a2:2a:51:ec:68:84:b4:f5:c9:62:cd:fa:32:7e:
bf:01:cc:f7:aa:34:73:85:46:cf:c8:2c:2f:4c:10:
76:ed:5e:ca:20:66:7f:bc:67:e1:71:ba:56:43:ea:
f6:22:64:8d:f4:21:32:dc:28:e7:3b:fb:6f:b5:cc:
31:c3:44:30:0b:30:4e:06:ad:20:ce:b8:47:8a:20:
6f:5b:ce:7d:9b:77:3f:d3:64:85:9a:f0:52:7c:68:
0b:4e:7b:ef:87:57:c1:8e:95:67:08:77:d7:e7:7c:
38:b1:9e:d4:b0:e9:65:1c:14:3b:d8:e4:f4:ac:c4:
14:f3:81:df:d3:86:d8:02:3f:46:76:da:6d:05:ca:
85:b3:fd:f0:aa:95:db:06:bf:68:55:20:f9:28:a8:
a4:62:fb:dc:30:62:f5:06:77:b9:21:12:98:26:63:
cf:73:57:4b:89:93:b9:dd:9b:29:f2:ea:97:a6:90:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:EB:FA:BF:FF:05:40:28:1E:A2:49:E6:13:AC:E8:75:EB:75:E8
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0c:3b:63:67:16:81:dd:a6:aa:cb:a7:3d:0b:4c:7a:11:57:
17:7a:58:1f:9e:17:7a:b4:c1:e3:9b:0c:20:2f:f0:82:f3:22:
fa:82:45:f6:77:1e:aa:59:8f:5b:a2:5d:79:8d:a2:d0:e8:9c:
d3:3d:e0:cd:d7:ed:2a:af:66:26:41:b2:a5:b9:ff:8d:e6:44:
88:d9:18:7b:db:ba:5e:bb:ff:6a:44:ad:63:a0:93:85:2a:00:
6b:7b:bc:21:45:c8:be:41:37:d0:1a:61:09:1f:fc:c1:58:ac:
f7:0e:f8:7e:ba:e3:1f:b2:57:63:e4:bf:9e:2b:9e:ac:85:00:
45:0b:95:7f:e8:6f:54:24:2d:ba:22:84:52:9e:62:69:88:3a:
8a:0b:b8:6a:be:55:4f:da:ae:1a:e2:a6:04:50:a4:8a:b5:bf:
94:67:8d:30:62:57:51:a6:7e:1a:09:f1:65:ec:e9:92:6d:67:
aa:03:d1:d0:7b:c6:60:a0:0b:e1:c5:89:19:50:90:6a:0d:38:
f2:27:97:d7:7b:57:1d:07:13:c8:d6:14:23:44:81:ed:ac:fd:
29:32:a9:ae:a1:23:17:7c:cd:7a:1f:09:1d:68:c9:09:c9:50:
dd:58:c4:0e:2e:5c:57:31:16:2e:d9:0c:16:1c:6e:77:31:ab:
5e:0d:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:26:16 2025 by rpki-client