Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: 4PbGZ+ehm16VQxmI8RajuHKkZx7LSsmAwazhkOIeJNc=
Subject key identifier: 0B:71:BC:93:EB:5C:2E:18:59:B4:57:75:CC:7C:A4:B7:F9:B0:60:4B
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 0197CBDF28F3024DE58B971C1365D45AB51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 0F60
Signing time: Wed 02 Jul 2025 16:01:29 +0000
Manifest this update: Wed 02 Jul 2025 16:01:29 +0000
Manifest next update: Thu 03 Jul 2025 16:01:29 +0000
Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: 5x10ZU9jnGpNtpc+90E/0VPdrmlOW+FGsdIt3aXl3fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:28:f3:02:4d:e5:8b:97:1c:13:65:d4:5a:b5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Jul 2 16:01:29 2025 GMT
Not After : Jul 3 16:01:29 2025 GMT
Subject: CN=0b71bc93eb5c2e1859b45775cc7ca4b7f9b0604b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:70:c5:63:b2:ff:30:38:8c:eb:10:5b:fa:
86:58:bd:57:9f:5e:7a:a4:13:f8:af:cd:dd:08:01:
3d:dc:6f:40:9f:ec:84:25:10:2e:c8:1d:39:c8:bc:
0c:bd:97:0d:04:55:93:0f:92:90:f7:36:d7:57:20:
0d:6d:9a:ff:4e:0c:e0:59:0b:66:0b:a7:67:c8:9e:
97:41:3b:a8:f3:13:e7:5d:31:25:b3:56:a0:79:45:
5d:04:72:f5:f2:ae:10:ff:1f:c0:b8:e5:3e:a7:2f:
e0:f0:70:49:4c:ab:4c:1c:48:80:b0:cb:aa:5b:32:
09:55:e7:58:f9:fb:dc:7e:bf:a4:00:dd:4e:81:4c:
c4:09:3e:62:f0:71:8f:e7:a7:dc:8c:6f:a3:41:cb:
40:dc:97:5d:d8:8a:04:c4:7e:00:d0:b8:9c:b8:6a:
44:76:be:53:d6:31:0c:4d:44:54:97:75:0c:62:d6:
4b:65:68:3f:15:45:b1:43:a9:67:a8:78:b5:6c:24:
51:4e:0c:ee:21:c2:39:53:d7:e3:87:19:64:13:03:
8e:3a:d7:8e:59:5a:42:6a:71:7b:67:cc:ed:4e:ea:
94:43:82:b7:b9:10:dd:8b:ec:d8:a2:97:0a:da:fd:
7d:97:84:47:03:1c:a0:87:5a:7a:0b:74:84:53:88:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:BC:93:EB:5C:2E:18:59:B4:57:75:CC:7C:A4:B7:F9:B0:60:4B
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:0a:56:63:46:e1:9b:52:30:1f:e9:90:3c:77:a6:c3:54:
f6:ef:98:5a:14:31:35:5e:4b:66:ca:2f:1d:d1:74:c1:b3:10:
e1:27:60:97:ff:e9:ef:1a:9e:1a:48:15:5a:ea:95:59:1d:04:
38:1b:d1:90:03:e1:71:47:de:26:95:d9:88:4d:86:9b:34:ca:
79:dd:7e:e0:25:76:61:67:d2:f3:f9:88:d9:b4:7a:a5:25:d1:
3a:73:35:57:87:cc:b5:6f:5c:7d:63:87:2b:fa:ed:fa:fe:9b:
05:32:2c:60:6e:d7:a0:bf:63:77:09:93:d2:10:87:dc:80:f7:
bc:1f:af:bd:1a:2e:cf:b0:53:cd:da:ad:f6:dd:c7:38:48:22:
c1:15:b4:0c:e6:9e:af:d9:76:61:01:bc:38:4b:3a:3d:ae:dc:
70:cb:12:4e:74:f7:00:37:f9:3a:f4:e6:6f:16:ca:a3:d5:c0:
d2:22:04:6b:b1:21:8e:a4:69:1c:12:62:37:fa:08:51:58:22:
03:42:63:24:9d:67:e9:17:69:96:ab:34:b2:2e:1b:6c:48:fe:
6f:dc:ad:05:d4:e8:63:82:ea:2c:a1:05:c3:d7:60:44:be:9c:
78:d1:67:de:99:f4:3f:48:74:c2:2b:61:f7:6b:ca:52:4c:48:
af:8b:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:36:28 2025 by rpki-client