Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
File: my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft (raw, json)
Hash identifier: 4ySYuVbZ1YoS7ZE52u8M37c7xvIq42U85kBq9i4m4W8=
Subject key identifier: 75:C5:DB:69:3E:38:84:81:0A:D0:07:13:0B:DC:AB:C4:C8:1B:05:F0
Authority key identifier: 9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
Certificate issuer: /CN=9b2e80a141c974f6da8f40274338fdacee42a770
Certificate serial: 019849660FF91494434988A0314AD7539B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
Manifest number: 0DB2
Signing time: Sun 27 Jul 2025 01:01:22 +0000
Manifest this update: Sun 27 Jul 2025 01:01:22 +0000
Manifest next update: Mon 28 Jul 2025 01:01:22 +0000
Files and hashes: 1: my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl (hash: Gh0JtxCQmKfUUNHvd0AlBDmTeTSsXTT4qnDnsMY7PME=)
2: qDQj2i79pZYtwis1stkVmdhu_cA.roa (hash: OPq9BdTsvn5TcHmuSl2ovdvwcrawOIn1d+BihcQt66M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:0f:f9:14:94:43:49:88:a0:31:4a:d7:53:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e80a141c974f6da8f40274338fdacee42a770
Validity
Not Before: Jul 27 01:01:22 2025 GMT
Not After : Jul 28 01:01:22 2025 GMT
Subject: CN=75c5db693e3884810ad007130bdcabc4c81b05f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:13:da:1f:46:0d:25:8b:bd:f3:0c:c1:dc:
81:70:5e:ac:ac:6d:a8:35:b8:c8:72:a1:20:ac:04:
49:d5:74:eb:1d:e0:73:47:4e:4d:64:65:be:4c:d7:
50:94:6c:b1:51:21:dc:7b:f0:4e:5d:3d:28:5c:63:
74:a0:d1:11:09:e2:ed:e3:34:73:ef:60:8d:13:fc:
7b:df:1d:d8:6c:bc:d4:a8:96:2c:7b:83:ef:59:cc:
92:0d:b9:38:9e:1b:ba:29:a0:3a:b4:ce:83:36:b6:
1c:1d:b8:8d:0d:c9:fa:77:36:35:71:71:ae:da:3d:
c4:6c:f1:a6:f0:23:4c:62:83:94:b1:17:d0:8c:c9:
1f:25:a5:18:d2:ec:6f:e3:ea:00:dc:49:e2:e0:2b:
2d:f7:1c:c2:25:a6:38:8f:fc:a2:14:c1:49:15:8b:
b8:4a:7d:4d:df:11:ab:82:bd:89:57:e7:68:d3:95:
b2:97:d0:b8:f5:08:ca:51:2b:16:a9:af:a1:15:05:
32:e3:5b:c3:4b:3a:72:80:17:cd:28:72:77:64:90:
01:ac:80:fe:1a:bc:5d:fe:ac:78:73:53:ee:8d:82:
d5:1c:44:9f:b0:f6:d0:a5:2a:2e:85:42:f2:bb:16:
a7:7f:0b:3a:d1:19:47:31:08:e2:89:3f:75:0d:a1:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C5:DB:69:3E:38:84:81:0A:D0:07:13:0B:DC:AB:C4:C8:1B:05:F0
X509v3 Authority Key Identifier:
keyid:9B:2E:80:A1:41:C9:74:F6:DA:8F:40:27:43:38:FD:AC:EE:42:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my6AoUHJdPbaj0AnQzj9rO5Cp3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/faabbc-81ba-4977-8923-cc93b1050de7/1/my6AoUHJdPbaj0AnQzj9rO5Cp3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:2b:5c:b3:1d:f8:47:e4:f4:cc:b7:fe:2d:68:10:2d:14:
86:ec:02:b1:8f:13:56:7d:c9:6a:f3:7a:c0:3d:83:96:ae:a1:
0b:b0:8a:d3:11:e1:21:3e:58:94:9c:23:d2:03:52:0d:fa:4c:
02:a3:0a:bb:0e:c3:bf:c1:80:48:ce:36:a5:e5:42:15:02:d9:
c8:2a:7c:69:5c:88:20:06:0b:8b:68:d4:95:62:50:2c:bf:61:
fa:24:f9:8c:d9:cc:88:86:8a:68:5c:41:5e:05:55:68:30:ba:
43:55:eb:c2:fc:07:47:a0:a0:b1:93:db:50:07:dc:41:fa:73:
54:7b:43:58:26:c4:c0:3a:8a:70:88:87:bf:eb:62:78:8b:f0:
97:5a:de:bc:b1:0b:f8:7e:e3:29:0e:6c:82:4f:64:a1:3c:a2:
57:90:5c:0f:04:64:81:71:e3:f3:d3:ad:fb:1c:3a:7e:c8:8c:
4f:c7:41:ff:07:b8:3b:7f:97:da:a7:53:66:2e:76:f0:a2:7b:
06:d3:00:44:d6:a3:b9:38:65:71:4e:96:e8:a9:57:e7:81:c9:
45:ea:98:6f:a7:27:b1:1e:c7:b3:e2:e5:07:2f:40:8e:ad:ac:
4d:8d:bf:2a:b4:be:db:79:a4:f7:87:3a:fa:72:ee:af:a3:03:
2f:da:bc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:21 2025 by rpki-client