Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: QH6cwVcd1WJH/H4g6UFjZ6pQpgTPnZx473YExb6NE3w=
Subject key identifier: A5:38:9A:8A:58:1E:4A:3C:E8:DC:66:E9:36:22:7A:EF:E5:37:EF:B3
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 019923A085FA7DFCBA237950400D02897AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:02:26 +0000
Manifest this update: Sun 07 Sep 2025 10:02:26 +0000
Manifest next update: Mon 08 Sep 2025 10:02:26 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: ifw5ad3XQXheafVRtpymtiHSx6ESNR2vqWN74Y841MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:85:fa:7d:fc:ba:23:79:50:40:0d:02:89:7a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Sep 7 10:02:26 2025 GMT
Not After : Sep 8 10:02:26 2025 GMT
Subject: CN=a5389a8a581e4a3ce8dc66e936227aefe537efb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:be:9a:a8:36:f2:11:4c:80:71:55:30:e5:
5d:ae:33:24:5e:63:d7:a1:87:7a:5c:ed:fd:08:87:
b0:86:8f:56:5c:23:d4:34:1d:19:7c:43:27:47:a9:
df:8e:77:06:a1:f7:4a:9d:ea:23:30:d1:a0:ca:e2:
42:eb:a8:db:9d:e5:df:54:d3:e0:61:ad:fe:69:7c:
cc:7e:02:8d:87:7e:fc:62:09:01:63:6c:6d:42:42:
42:9c:fd:d1:9c:56:57:65:62:a4:b1:1b:b0:54:bc:
6b:ba:b2:a1:d0:9b:b6:8f:e2:8f:cb:64:83:9b:16:
dd:ea:ec:82:57:d8:e6:25:77:18:04:ea:19:fa:61:
59:47:31:32:81:65:f4:c6:7c:f5:87:5c:97:a5:73:
ea:3a:49:e6:48:70:75:cd:d3:5d:a6:f7:f7:5f:5a:
ca:d4:41:7a:dc:03:e0:f5:3f:21:34:fb:e4:a8:8d:
5f:1e:b3:40:49:58:2d:ce:d6:1f:b7:06:91:a4:31:
ba:35:f3:55:29:76:e2:8f:a9:7e:f8:8a:d6:2b:20:
84:0c:a6:b8:1f:67:ad:65:b2:19:49:9c:12:63:6d:
f7:0a:79:0c:4c:ed:e8:ab:d1:33:64:86:ae:1b:2b:
13:5f:15:d3:60:8f:2d:a9:4b:6e:a3:3a:c0:c1:61:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:9A:8A:58:1E:4A:3C:E8:DC:66:E9:36:22:7A:EF:E5:37:EF:B3
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:24:35:ca:5e:a0:c2:4a:b3:d1:74:06:36:22:57:e1:ea:76:
a4:71:00:8e:5b:06:93:37:f8:b3:ff:dd:24:14:a7:6f:27:45:
37:7d:5f:5e:72:4a:0a:bd:50:e5:c7:89:34:30:15:bd:f4:b2:
2e:83:ca:91:fb:8e:98:ba:ba:f2:e3:1e:d0:d2:c7:5e:bc:34:
b3:54:35:77:20:1c:72:ce:d3:e2:ec:e9:f1:fd:92:14:9e:b7:
5f:5d:e4:d4:77:5b:91:c8:ea:fa:ff:8a:1f:e2:92:1d:57:96:
72:15:4b:ee:82:03:0b:28:d9:2c:6d:dd:75:7d:1a:e6:b4:20:
0e:76:c2:16:ef:3a:eb:33:ee:33:37:cf:6d:79:7d:76:5c:86:
20:07:36:a6:d2:86:66:b0:bf:c3:88:4c:eb:3a:41:2d:37:c4:
b3:93:88:37:65:ac:2d:54:82:98:90:db:33:86:af:d1:59:3f:
9d:c3:4a:90:63:99:d6:a9:57:76:08:35:63:a9:b0:b7:65:a4:
ec:90:76:dc:51:f6:2c:93:9f:97:e2:16:12:6b:d6:14:ad:84:
ce:d8:09:6e:4b:39:22:d5:e8:05:09:c6:61:09:7f:7c:5a:f9:
81:02:0a:ab:44:f4:11:7c:30:2c:ff:e2:64:07:f3:53:8a:7f:
62:94:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:56 2025 by rpki-client