Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
File: MtYmm4lSBJZffsl_Gdi12ckwt40.mft (raw, json)
Hash identifier: EI6OCapykBGzlbe7SriQgQsG5pnIen7H2CWxjkwcit4=
Subject key identifier: 2E:1B:79:28:3D:62:D4:98:19:45:C6:BF:0A:52:51:80:A2:55:CA:0B
Authority key identifier: 32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
Certificate issuer: /CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Certificate serial: 01991809F9BF63E51B0DC3BFDCC449BA7C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
Manifest number: 0120
Signing time: Fri 05 Sep 2025 04:02:10 +0000
Manifest this update: Fri 05 Sep 2025 04:02:10 +0000
Manifest next update: Sat 06 Sep 2025 04:02:10 +0000
Files and hashes: 1: MtYmm4lSBJZffsl_Gdi12ckwt40.crl (hash: 6O1VmpI2WuCA2q69iHlTClS0LjSB9zqDFR9wymqW2yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:f9:bf:63:e5:1b:0d:c3:bf:dc:c4:49:ba:7c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Validity
Not Before: Sep 5 04:02:10 2025 GMT
Not After : Sep 6 04:02:10 2025 GMT
Subject: CN=2e1b79283d62d4981945c6bf0a525180a255ca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ab:19:c1:7b:f5:6d:22:8a:f6:2e:7f:f1:0f:
3d:e7:be:48:7b:a5:f8:dd:32:30:55:c7:8b:db:24:
a1:a2:5e:93:38:4a:08:c0:7e:8f:45:6b:fe:7e:4f:
40:66:a7:97:63:b9:aa:39:b9:8e:3c:b1:b3:73:46:
2f:5b:20:cd:00:0a:6b:1e:24:88:4e:23:6c:9b:64:
2d:46:02:2a:67:26:7e:50:00:3b:bd:c9:87:17:7a:
4d:23:55:05:8c:6d:3d:2b:bb:d9:6d:51:ec:f4:0d:
c1:d2:50:9f:0e:a8:9a:f7:7f:c3:fa:ee:8f:fe:34:
02:71:fa:93:62:3d:69:4e:c1:26:d5:1d:7d:9c:e6:
37:15:d5:43:fb:48:6e:6d:fc:ff:d5:bd:b0:ad:a8:
67:02:0f:de:16:92:3b:a3:b9:98:a7:43:c8:0d:da:
d4:ba:82:a5:c5:a5:cd:32:c6:64:c3:dc:63:0e:73:
91:3b:ce:48:e8:a7:2a:2f:84:69:42:74:23:d3:82:
8e:a8:25:37:16:bb:3b:0e:37:69:5a:95:e9:33:97:
85:8e:b7:74:cd:5f:95:02:c6:ec:62:88:f8:94:ca:
bd:9a:52:7a:e2:8d:40:81:71:dd:72:0c:14:f4:6f:
f3:c5:cd:05:b8:a3:b7:1e:b8:1a:30:60:15:1d:dc:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:79:28:3D:62:D4:98:19:45:C6:BF:0A:52:51:80:A2:55:CA:0B
X509v3 Authority Key Identifier:
keyid:32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6c:43:3f:9a:29:58:b0:c5:16:63:ff:fa:8e:bf:c8:ac:48:
b6:74:c6:53:68:96:3c:c1:91:8b:a0:2e:ef:37:6b:53:bd:6f:
ff:7b:f4:36:c0:fd:c8:54:ff:52:c5:81:83:db:45:39:14:c0:
64:c5:0d:d9:9e:8b:4c:40:18:2d:ee:f0:f7:55:64:33:ba:f6:
06:74:72:e7:03:a1:e9:7e:3b:3e:e8:4c:24:52:90:b2:59:2f:
8b:98:df:bb:cd:31:f3:a2:78:b8:59:b6:11:2d:45:6d:6d:5b:
3d:a9:bf:f8:82:92:9c:6a:0e:eb:bc:8c:fb:6f:5e:93:6a:c1:
02:68:7c:51:ec:eb:26:41:3f:49:7c:a4:e2:34:c1:9c:d8:4c:
17:1b:78:ba:fd:ab:9c:41:6a:0c:9a:59:4e:89:73:f6:8d:74:
3d:21:5b:1f:4f:69:08:86:9d:1b:c7:21:83:7b:4d:2e:1b:56:
63:21:f7:7d:fb:da:75:e6:ec:d9:98:dd:b1:cc:ca:c7:55:3a:
72:cc:71:97:27:7a:dc:dd:c4:42:5c:33:26:c0:11:0f:42:d2:
a1:33:fd:87:dc:c9:38:3a:c0:bf:68:97:90:93:87:40:a6:8a:
d1:1e:86:49:7b:d6:d6:e3:50:db:10:9a:2d:b5:d5:33:18:f9:
de:de:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:36:22 2025 by rpki-client