Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: 6+m0VN/uAIjBraXpEyZGT7/xUnhYaBs4kz9OJLf+ZXY=
Subject key identifier: 98:C5:9A:9C:26:C4:BC:04:B7:DB:9A:8E:59:27:27:CB:24:25:D0:E6
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 0198D54E346E6642ECCCDA2D00895E9BB85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 101D
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: 5iywjdBZa4Y+ACg0K5rPdWUfPGWcMUQKBAezjM94pjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:34:6e:66:42:ec:cc:da:2d:00:89:5e:9b:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=98c59a9c26c4bc04b7db9a8e592727cb2425d0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:de:b1:5d:17:89:a2:35:7e:cb:cf:e4:d2:
2f:4a:7b:e2:57:af:8e:e1:cd:d9:2b:37:26:45:0c:
a3:e4:d8:1d:3f:a1:d7:fb:27:b2:6e:d3:13:bb:31:
81:1d:f9:be:e0:d7:9e:c7:71:b9:c8:e5:d8:6c:3f:
cf:b8:07:c4:ba:9f:f7:fb:9f:ed:34:02:c7:03:cc:
fc:0b:a1:86:37:57:d4:cb:64:b4:b3:1b:32:80:8e:
17:c2:0d:f6:e3:ef:e6:29:19:ff:0b:89:7b:b4:e3:
d2:58:d6:1f:fc:20:c3:34:f5:44:f1:fc:11:85:03:
c5:c8:49:49:42:0c:f7:57:90:b9:88:b7:0f:bb:48:
1e:ae:92:1a:e0:a6:61:62:ac:be:4b:7b:e2:4b:fd:
7d:7b:6e:8e:59:8c:e9:67:ca:45:11:f7:2e:15:47:
82:ca:65:85:eb:21:97:bc:de:90:bf:5b:7d:c2:ca:
9e:ac:3d:e0:66:23:0e:73:22:82:8f:cc:0f:81:4f:
d6:36:90:93:56:5f:18:b5:ba:20:b9:c3:55:2f:51:
cf:dd:8e:25:e5:f9:b9:c1:40:fb:86:14:3d:97:a2:
f0:a6:de:da:9b:be:b3:ef:ad:f8:cb:67:19:91:16:
ed:aa:10:20:d0:fd:c4:d7:9b:7d:49:91:7f:db:95:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C5:9A:9C:26:C4:BC:04:B7:DB:9A:8E:59:27:27:CB:24:25:D0:E6
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:4c:d9:fd:2e:df:ce:6f:7b:53:c8:fb:b6:c0:06:80:4f:
8f:ff:c7:1e:cb:01:5b:25:2a:37:88:69:89:19:91:1f:d0:a4:
5b:b7:4b:23:2d:bb:e4:bf:41:bb:d6:5f:57:9f:f5:44:c2:9e:
57:80:c9:4e:3b:1f:21:ae:bc:e4:b3:2f:83:85:27:47:cd:df:
2a:86:c7:93:df:3c:f5:f9:9a:b5:88:07:66:75:2b:79:7d:43:
eb:43:b0:0e:0d:d7:fa:fd:f3:1c:9a:0e:58:59:63:95:a8:d2:
19:5b:c4:8d:57:76:24:74:31:65:97:05:84:ca:6d:05:1e:15:
78:6e:0f:0f:05:71:e7:23:f1:34:07:5b:6a:f7:f5:a5:5a:e5:
9d:ea:ed:df:d9:86:66:69:e4:f1:7d:e5:df:79:eb:26:69:43:
7d:1d:51:ab:14:2c:e1:af:07:2b:08:24:43:e7:15:c2:f5:bc:
4b:dd:8e:cd:06:30:a2:2f:90:78:d5:fa:2d:37:09:d4:95:19:
f8:de:4d:d3:5b:dc:ed:59:a9:a1:ce:43:74:b0:38:e5:d1:a7:
8d:4e:d2:02:4f:04:a7:01:5b:62:0e:19:23:dd:21:16:20:08:
fb:05:81:f0:49:33:9b:17:1e:4d:93:33:58:3b:8a:0d:d9:0e:
3f:5e:32:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:50:47 2025 by rpki-client