Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: Edms0UTeW238PQVlX1EY9HjDPs8XfVSoLTr10Mwm6os=
Subject key identifier: 98:B0:2D:21:DF:81:B4:8C:6B:CA:D0:37:3C:69:EB:5C:F0:CC:DF:C5
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 0198D54E91A6BA29774FAC579F6142249076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 03ED
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: lRZzw4BGKador1qOOkdbJ/UXnXuMwv8qSHki6nEjSds=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:91:a6:ba:29:77:4f:ac:57:9f:61:42:24:90:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=98b02d21df81b48c6bcad0373c69eb5cf0ccdfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:76:c9:84:50:8a:b5:90:9c:c2:be:11:85:
8d:e4:e0:72:41:95:47:e5:9c:05:1a:a9:65:fc:e8:
ff:50:0f:89:3a:56:d8:b6:d2:4f:0f:58:90:29:c4:
de:36:51:80:40:8d:71:d9:61:63:2b:95:56:01:05:
fd:38:f9:b1:5a:2d:91:52:0f:76:1d:b4:91:d1:07:
2f:e4:7e:bd:97:31:3b:35:c4:4d:da:87:42:df:22:
e6:01:ac:5e:ed:29:84:dd:58:2a:93:58:73:9f:17:
67:94:7d:82:2a:b9:36:5b:6a:be:b3:4e:c0:52:c4:
50:e2:d5:a4:6a:21:ab:01:99:3a:7a:7c:a9:76:12:
16:73:a8:42:9b:7b:97:23:20:f6:97:d5:e5:f2:45:
9d:d9:6f:57:8b:43:e8:3f:78:97:65:47:67:5e:7d:
36:8e:8f:3e:33:e9:07:b4:ff:7f:0b:a1:ca:5e:cf:
82:be:8d:5d:4e:e2:1f:51:2e:08:ab:c8:84:e7:8d:
2a:3a:09:5a:b7:7e:c6:a6:14:48:10:5f:83:e9:67:
c5:96:82:01:a5:d2:35:29:85:74:e3:eb:c7:5b:56:
71:7d:73:a8:16:c9:00:30:03:ef:7c:b0:54:ae:3f:
ea:94:95:0a:c5:55:9a:6a:ad:6f:c6:c1:4c:e3:b7:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B0:2D:21:DF:81:B4:8C:6B:CA:D0:37:3C:69:EB:5C:F0:CC:DF:C5
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:96:4e:d9:01:ca:cb:de:b3:e7:f4:c1:57:47:5e:81:12:50:
d7:ff:46:c2:a8:53:4c:c5:73:91:49:fd:b5:9a:52:36:2f:10:
cc:cc:82:5d:5f:4a:d1:f9:9f:ff:81:d7:30:90:8f:2f:29:8e:
28:49:ef:3b:db:86:02:e5:c9:74:8c:ce:1a:64:f5:e0:f5:5e:
82:3f:6a:9f:44:16:53:8d:80:01:eb:37:b6:1d:0e:aa:6c:5b:
70:78:e8:99:dc:f0:ad:04:de:4f:ad:6e:60:80:2a:b1:09:44:
04:f1:0a:89:ff:14:ed:6d:1f:08:8e:f5:13:93:00:79:d9:bf:
aa:e1:64:b6:a5:96:62:cf:9e:4f:8f:9a:ac:f9:81:6e:0d:50:
58:3b:54:5b:9c:4d:d1:94:85:31:c9:49:37:9b:91:f7:a1:1b:
24:bd:a7:de:47:3e:ab:37:2c:55:ec:28:10:85:aa:77:3c:50:
56:41:e3:18:09:37:ef:43:10:9f:04:90:60:bb:fd:79:b5:73:
a0:57:de:f1:c5:aa:d1:51:de:1d:96:36:d6:51:4e:b4:61:d9:
ec:82:bb:b5:ed:50:02:39:62:6d:b9:e5:f0:fa:2d:63:91:b1:
bb:e6:55:9c:03:2c:12:45:73:60:35:53:77:0e:fb:e8:ad:7d:
89:27:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:11 2025 by rpki-client