Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: LJe/N+gq0c/BZZnyRxesPsYRBK5IEishsLzqMmAQlw8=
Subject key identifier: CE:86:F8:12:99:D0:CB:44:70:03:97:D0:86:56:F4:CE:74:46:B0:1B
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 0198560E909C5449D98DB081DF025E6814E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 11FE
Signing time: Tue 29 Jul 2025 12:00:51 +0000
Manifest this update: Tue 29 Jul 2025 12:00:51 +0000
Manifest next update: Wed 30 Jul 2025 12:00:51 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: 71nqFi5iQWcm1uzSF2FGg9TBEzKii81UFgk/jGxAk2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:90:9c:54:49:d9:8d:b0:81:df:02:5e:68:14:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Jul 29 12:00:51 2025 GMT
Not After : Jul 30 12:00:51 2025 GMT
Subject: CN=ce86f81299d0cb44700397d08656f4ce7446b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:e5:b5:49:ed:b1:07:fd:89:68:04:14:99:
aa:93:47:d3:59:24:98:90:83:98:fa:fc:ea:c1:f8:
be:3c:8a:28:a6:d7:4a:a0:1c:5b:ec:b6:25:ed:d5:
1b:89:5a:e2:e8:3d:2e:f8:7c:d0:07:62:50:9c:6e:
81:97:93:89:3f:a3:a8:cc:24:4f:7d:03:84:51:12:
47:2c:f4:fd:36:c2:3b:2e:20:10:5b:37:27:b2:aa:
ea:67:6e:e9:fe:26:0b:72:54:7a:90:8d:b8:69:5b:
20:13:1f:60:44:12:ac:3a:09:13:86:85:f8:b6:08:
e4:16:94:ae:ad:e4:d8:74:28:6d:09:66:dc:c4:5a:
62:62:b3:57:89:ba:50:8a:9c:ec:f1:c4:59:03:ef:
84:b8:ba:c4:26:e2:7b:71:0b:ae:d9:bd:ba:98:f7:
74:b2:8a:05:0f:93:e2:67:f5:80:86:97:14:65:fe:
1b:b6:1d:98:03:d6:ad:12:d2:9f:e0:99:b5:ac:48:
38:27:a2:af:e2:ed:6c:36:98:01:94:30:7a:7e:7b:
cc:b9:6e:66:44:91:17:48:3d:2a:54:7f:51:22:8d:
de:2e:f3:0b:0f:ab:1e:6b:52:e7:ef:7d:62:50:60:
81:b3:22:be:ba:4e:61:0c:ac:c6:48:53:62:5c:80:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:86:F8:12:99:D0:CB:44:70:03:97:D0:86:56:F4:CE:74:46:B0:1B
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:79:ba:e2:58:9e:64:e8:b5:12:95:ec:87:96:10:95:13:eb:
12:18:d3:74:a5:7a:ee:a3:8b:85:6e:5d:19:55:a8:88:4f:6b:
bf:8c:e7:a7:74:55:bc:da:db:2e:f5:cc:60:d1:37:ca:77:04:
97:72:e6:f7:e2:85:16:4a:51:ca:7e:6e:7d:bd:4f:ba:e0:29:
99:e3:40:b2:3b:77:44:86:1a:e4:c5:3b:3b:fc:ab:ec:23:ed:
71:01:a7:c7:27:e3:8a:53:77:85:14:7e:2d:dc:43:1a:f9:3d:
12:e2:c2:3d:3f:1e:df:1b:e2:05:1c:62:48:37:7b:48:1b:1a:
3c:f8:1b:9e:fa:35:8c:66:47:6b:50:c7:29:d4:f1:74:63:13:
16:05:a7:74:91:cf:7e:a2:20:ea:c8:dd:5d:d8:5d:c8:3e:51:
98:09:56:cc:2e:17:74:3e:71:47:b5:0f:fb:3f:a0:e1:79:09:
46:40:92:20:db:16:de:01:51:ca:f0:03:3c:84:5a:80:0a:92:
91:a0:d6:d3:1e:b4:25:36:6d:e3:9a:2d:1d:d3:cd:81:35:33:
68:a8:34:5a:29:0b:a2:29:31:37:a7:33:a4:78:34:22:98:c4:
09:57:31:1d:d3:f1:12:94:49:74:4d:59:9e:2d:79:96:f4:c2:
6e:62:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 20:59:42 2025 by rpki-client