Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: uYWfCOqJ3VrGh2ycRsZkWYN/mvP86G7mLuZt/HsI/7c=
Subject key identifier: 7B:F8:70:40:FB:35:2E:7E:B3:66:70:1C:55:31:06:72:CE:48:B3:1E
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 0198D4A7A27716DE9A1B50E27C9C479E068A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 02:00:12 +0000
Manifest this update: Sat 23 Aug 2025 02:00:12 +0000
Manifest next update: Sun 24 Aug 2025 02:00:12 +0000
Files and hashes: 1: fnq47xvFlP3s88cw-L8mb-lvd_E.roa (hash: vyrDQTrTr3KQdje/xN9zgyCGRoZbi8NoM/Vu35juLyc=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: R+Q5sEzomqrwo/exa3NevF3yOoILbPAWWOUNU9enDOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a2:77:16:de:9a:1b:50:e2:7c:9c:47:9e:06:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Aug 23 02:00:12 2025 GMT
Not After : Aug 24 02:00:12 2025 GMT
Subject: CN=7bf87040fb352e7eb366701c55310672ce48b31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:3b:9e:3d:91:4b:fb:5c:78:c0:8e:7e:59:
cb:3a:7d:38:8a:d2:d9:22:a5:91:f8:09:e2:47:44:
8f:d6:0e:2e:c3:c5:0b:fd:a6:3d:a3:15:53:ab:dd:
db:b4:61:5c:84:2e:6c:1e:8d:48:0d:8e:ea:91:bb:
33:3a:70:16:3d:79:ca:70:4f:74:1a:c3:d7:57:ec:
62:b1:f3:f6:33:6d:40:8c:20:5d:4b:b8:16:2f:ac:
8f:33:b6:2a:07:41:f3:23:a0:b1:96:06:89:34:7c:
f3:7b:4f:2b:39:de:1c:7c:ae:15:ec:b4:41:ab:ff:
ce:f3:d7:59:9b:51:75:da:e7:be:bd:de:99:0c:12:
ed:bc:97:e2:59:e4:71:c1:ce:37:b9:b5:bf:a8:67:
f0:8e:c9:7a:a0:e1:ce:f0:70:42:cf:1d:63:94:2b:
10:ff:e2:d2:41:8d:13:1b:b8:08:a5:bb:f5:8a:e5:
a0:85:35:dc:a8:3b:5b:5e:6c:c8:6b:b7:06:f3:da:
61:ad:b8:c6:1f:f6:4d:9f:05:0b:63:39:42:e6:fa:
32:1c:ed:f4:b9:17:d7:64:0f:b4:1b:53:1f:e5:d8:
18:2b:8e:6b:18:b3:25:d4:02:69:3c:e0:42:2a:61:
3e:22:5f:c3:7e:82:27:4d:62:b0:9e:91:4f:d5:19:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:70:40:FB:35:2E:7E:B3:66:70:1C:55:31:06:72:CE:48:B3:1E
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f5:f9:4f:2f:0d:78:83:3d:40:1f:6d:0d:dc:9a:41:ed:74:
37:57:59:2d:4e:e5:53:ad:96:6d:4f:d8:38:ba:a0:f5:f8:a2:
4c:24:f1:fe:0f:5b:05:ed:59:d4:a7:bf:b8:5e:84:a8:19:0f:
b8:53:cf:e2:26:1d:5c:fb:ca:62:a5:df:9c:7f:23:41:f8:bf:
43:71:44:27:ba:e7:d8:a8:ba:56:ee:cc:65:cb:d5:9b:3d:69:
19:43:37:d0:54:d7:c7:ee:d2:c5:b5:ec:82:1f:c5:37:07:cf:
dd:0c:84:38:f1:e3:c0:43:c7:95:2a:97:b1:ec:86:97:39:e6:
da:43:ac:77:29:82:89:89:25:3f:fe:8e:86:be:0e:ef:d7:e7:
e7:b5:e0:0c:67:ec:a4:57:53:c7:d4:fb:e0:11:37:fa:50:46:
70:50:eb:88:c9:c0:fe:7a:ef:d7:b4:03:6e:64:1b:3c:3b:ef:
c0:18:e7:4f:a2:f6:69:96:43:f3:48:f1:84:fc:72:81:cf:8b:
a6:17:d8:08:9d:d6:3c:79:52:d7:e7:42:36:ba:a9:60:c1:06:
79:ff:7a:60:5d:42:cf:5b:a3:fe:6c:9d:a5:0e:80:a7:e2:3b:
99:48:b6:f7:57:c5:b9:76:48:0c:ec:99:95:8f:2d:4f:ca:44:
37:08:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:38:59 2025 by rpki-client