Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: eLopcXAGQagVIDSuMgLMXdqcKlURhKZ++N8fdF5AJNA=
Subject key identifier: 1E:30:09:E3:DC:60:AC:A7:26:2D:D8:1A:52:19:1E:6D:9C:AD:7D:FA
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 0198D6CE05E7A5FDF47409C24BE8FD3A6C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 1336
Signing time: Sat 23 Aug 2025 12:01:22 +0000
Manifest this update: Sat 23 Aug 2025 12:01:22 +0000
Manifest next update: Sun 24 Aug 2025 12:01:22 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: ADO5gL2yQGg1EzMHTPN1/sRpVyEL8Gos+ID+kI1dVVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:05:e7:a5:fd:f4:74:09:c2:4b:e8:fd:3a:6c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Aug 23 12:01:22 2025 GMT
Not After : Aug 24 12:01:22 2025 GMT
Subject: CN=1e3009e3dc60aca7262dd81a52191e6d9cad7dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:df:f0:74:05:ed:da:50:88:4b:a7:78:8d:
5e:b8:12:51:f0:6b:80:c3:d3:9c:a6:5e:94:6b:46:
a3:64:f3:5f:52:a4:6f:8e:08:ee:b1:96:55:fc:5e:
08:46:4e:81:24:33:a6:b8:d2:f9:52:f0:8b:21:78:
05:a3:93:a0:c1:47:0e:55:3a:f0:58:91:c6:21:e7:
6e:a7:22:db:dd:ab:b0:44:6b:36:18:32:19:fb:1f:
ed:4d:48:95:dc:18:c1:0a:fe:42:11:fc:5a:33:c5:
e2:8e:c6:8d:85:37:62:33:0d:30:ae:92:30:31:0d:
55:eb:77:e0:80:39:ce:bb:f7:4d:6c:d2:5c:8f:b6:
73:71:38:5f:41:5a:f0:1f:87:e6:a6:90:43:b0:1e:
4f:09:76:a6:b5:b0:0a:48:25:cb:40:13:eb:35:76:
d2:53:0e:4d:4e:5b:ce:62:49:e2:14:e8:6a:8e:eb:
71:c4:57:7c:52:ac:5c:0a:6d:be:c6:65:07:18:a1:
87:ef:9f:f4:43:e5:6b:75:0b:30:01:77:b8:1b:ca:
17:ee:65:3f:b5:a0:e4:93:3d:f8:f1:41:ca:23:4f:
9d:0f:71:4a:5e:c0:30:b7:f7:bc:b7:6a:35:b8:bf:
17:c8:50:ed:11:3c:7f:c8:91:21:5f:a2:81:28:3d:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:30:09:E3:DC:60:AC:A7:26:2D:D8:1A:52:19:1E:6D:9C:AD:7D:FA
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:93:cc:2c:ba:74:88:38:ca:1b:c5:8c:86:7e:4c:b2:81:8e:
a8:61:73:b8:6a:27:db:be:25:18:16:6d:4c:02:28:2a:23:8b:
a3:50:e6:25:bd:22:80:b0:40:f9:19:16:61:c9:26:54:4c:a5:
39:4e:39:96:0f:31:5d:42:bc:b0:ca:f4:89:26:b5:fd:e8:ab:
68:3e:9e:24:ad:ad:02:d3:90:55:10:e0:83:e4:fd:e6:68:f9:
7c:b8:20:cb:3e:83:a2:66:b7:a6:2b:55:6a:f1:76:9b:7d:2a:
8a:6a:69:cd:40:cf:64:1a:8d:a3:7e:b9:a8:3c:e7:25:00:1d:
91:fe:6f:32:b1:8d:f0:ea:63:12:55:77:36:5f:26:7f:cf:13:
98:f2:dc:88:15:ad:49:d7:8e:7d:a4:63:df:aa:78:f9:b6:13:
39:d8:17:91:c0:57:cd:f9:75:cb:1c:d0:b0:92:23:b8:40:9c:
4f:73:29:c8:51:11:6f:73:44:0e:6a:c0:e1:6a:e6:02:54:25:
1e:1c:92:6b:21:f4:cd:e9:0d:aa:62:da:84:10:28:cd:67:5b:
72:e9:96:6a:4d:71:da:24:91:03:8e:46:ce:04:1b:7a:a0:48:
4d:8a:ba:d9:02:99:dd:5e:aa:4c:25:63:95:33:60:2e:bc:73:
f9:82:d7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:07:26 2025 by rpki-client