Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: 90snKDSXBKz/NojPfrarFYCdenF1fQlgvVcZkqmHhDs=
Subject key identifier: 42:7A:C7:5C:18:1B:BA:9D:86:4E:CB:45:C0:C6:DE:ED:A1:5B:F7:8C
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 0198499C1DE43321044B7443E6B3D407752C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 0A0E
Signing time: Sun 27 Jul 2025 02:00:24 +0000
Manifest this update: Sun 27 Jul 2025 02:00:24 +0000
Manifest next update: Mon 28 Jul 2025 02:00:24 +0000
Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=)
2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: JB5+kIzkuVp9b5bhjgKAuSsFGHEvf9+YE4amBnfyA/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:1d:e4:33:21:04:4b:74:43:e6:b3:d4:07:75:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Jul 27 02:00:24 2025 GMT
Not After : Jul 28 02:00:24 2025 GMT
Subject: CN=427ac75c181bba9d864ecb45c0c6deeda15bf78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:31:53:0a:27:0f:73:2a:12:94:ae:a9:16:
b0:2f:37:f9:9c:ad:19:0e:fc:b3:c5:db:42:47:29:
30:ec:69:18:06:40:34:83:76:47:95:c0:08:f3:a8:
eb:3f:ce:44:d3:e3:00:40:0d:00:d1:25:f7:60:9b:
e4:3c:a2:e1:f3:55:23:95:cd:b8:6a:4d:f6:35:6c:
58:4e:c7:d6:8a:ac:6a:00:b6:2e:e2:8b:24:e6:d4:
98:3e:04:ba:10:f2:4c:22:aa:3d:a9:cb:cc:94:1d:
65:88:7a:42:bb:81:fe:00:d9:5a:6f:85:ef:4b:80:
8b:9e:8c:3d:09:42:68:50:fa:a8:1a:41:93:2d:58:
dc:d3:50:8f:07:84:00:a3:06:0c:1c:33:4f:93:7c:
1a:03:29:f0:f6:45:b3:2a:8b:d5:84:97:c0:c8:08:
e2:eb:66:8a:01:b8:54:e7:8d:f6:95:a6:d9:ea:63:
b5:db:f1:c5:62:1c:fc:15:5a:69:78:a2:96:ed:ca:
b6:e7:0e:5f:02:71:7f:5c:7a:75:dc:2d:18:54:79:
63:d2:60:0b:07:5d:cb:37:bc:83:34:2e:69:6d:e2:
3c:f1:31:26:9d:df:e7:d3:a8:7a:ab:3b:62:c2:c4:
cf:5b:d6:12:20:a2:6c:9a:0b:c0:9c:e1:60:32:ac:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:C7:5C:18:1B:BA:9D:86:4E:CB:45:C0:C6:DE:ED:A1:5B:F7:8C
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a4:68:f7:9e:06:f0:29:f4:98:26:ed:da:18:0e:7d:54:c1:
64:58:46:14:2d:2a:20:8d:b6:f8:f9:78:b3:56:7e:ed:ec:b6:
e0:be:04:6f:67:7f:09:fe:03:cd:fa:56:48:4d:26:53:7e:0f:
a8:03:ed:56:be:58:97:95:8f:0f:06:67:03:3e:2d:e4:87:2a:
a5:5a:1e:53:ae:8a:62:e0:e6:67:b0:a5:32:af:59:3c:b8:14:
c9:48:56:12:c0:ea:25:de:55:17:35:98:d4:b2:c7:7b:16:8d:
3c:0d:a1:52:d2:98:43:b3:32:ce:e8:c1:d3:77:2b:0c:4b:9b:
46:20:a2:c4:02:89:75:0a:85:da:e1:02:39:1a:34:47:6c:92:
9d:aa:a8:1e:52:d7:55:0b:06:08:23:e9:b2:5c:75:c3:56:10:
bf:ee:3a:b9:0b:42:0b:a6:b9:8e:56:b7:e2:ff:49:8f:fa:b6:
2d:45:86:f3:f5:25:e3:d0:9f:b0:7e:81:3e:36:fc:d9:3e:6f:
31:1c:37:d6:73:94:d9:ad:6d:6b:08:e5:cb:6c:d9:45:64:a9:
41:76:69:f1:a0:91:03:61:d9:ec:2e:ac:8e:0e:10:03:7c:c5:
d7:7c:78:fc:dd:e8:1d:39:3a:3b:56:9c:7f:ba:d5:ce:c9:ee:
fc:17:4e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:49 2025 by rpki-client