Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: nPlkFddYzRhfRM0BDD2mIZ+aToEyzUJvEsn25mNPtW4=
Subject key identifier: F2:81:EF:4A:6B:5B:53:36:42:36:20:52:B4:6F:A7:EC:19:16:1F:59
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 0199172CF58083D754BB1E42CB1DAC489247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: E1
Signing time: Fri 05 Sep 2025 00:00:46 +0000
Manifest this update: Fri 05 Sep 2025 00:00:46 +0000
Manifest next update: Sat 06 Sep 2025 00:00:46 +0000
Files and hashes: 1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: 07Hw5WcgUnvp1uBsfUf89diJn7pMGVqJDc80oOGrtVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:f5:80:83:d7:54:bb:1e:42:cb:1d:ac:48:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Sep 5 00:00:46 2025 GMT
Not After : Sep 6 00:00:46 2025 GMT
Subject: CN=f281ef4a6b5b533642362052b46fa7ec19161f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:69:01:a2:dd:94:ec:e9:26:33:2c:d6:ab:
91:c3:7b:3c:bc:10:56:87:68:ef:d8:62:2b:55:de:
b2:ab:2a:93:9c:c2:dd:90:06:76:50:3e:e3:87:7b:
4d:52:a3:96:e3:6e:38:3e:3b:f2:41:1b:3e:32:01:
02:f3:66:d6:f4:4a:91:c6:a8:a8:aa:a0:4c:6b:0b:
c4:66:f8:c1:96:c4:a0:18:f9:c0:8f:53:6c:88:ac:
e2:10:cd:95:ec:0e:62:53:45:60:a2:65:31:58:5f:
51:62:74:11:b0:36:c9:90:99:de:a0:43:4c:cf:ac:
12:cc:48:78:bb:89:ff:69:a3:72:91:6d:26:99:51:
74:75:20:cb:0a:a1:39:a1:09:5e:f5:5c:6d:8b:fa:
f5:17:b1:9d:57:ec:69:96:39:15:09:9f:e8:6f:3d:
09:c3:3c:31:ec:2a:6f:43:33:50:a4:47:5d:16:10:
d5:3b:09:59:f6:be:c5:09:aa:f7:51:e1:58:a6:ef:
17:fa:24:15:b9:41:a5:49:1d:20:c7:02:be:49:4c:
a4:4c:5e:7e:f4:02:d7:10:43:bf:50:fe:6a:52:78:
c1:83:08:6a:71:be:40:ba:20:36:7c:e8:e9:8f:b2:
8e:b9:ff:43:4b:7c:82:d2:b8:83:b3:4a:8e:a3:21:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:81:EF:4A:6B:5B:53:36:42:36:20:52:B4:6F:A7:EC:19:16:1F:59
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:db:f2:4b:af:6f:eb:40:fa:8c:d4:82:27:53:83:c0:f1:17:
0e:c5:7c:76:45:5c:8a:a6:25:0e:bf:db:5f:a5:7b:c8:4e:76:
85:85:16:3a:f7:19:cb:a2:25:a1:05:0c:4e:6b:f6:20:09:70:
37:83:a1:25:fe:7e:3e:3a:c1:94:56:ba:59:50:26:ca:f6:df:
e7:34:b7:02:91:b1:71:16:63:a4:23:df:40:48:64:bb:8f:79:
0a:0a:6d:0e:6d:c3:d1:4f:9c:02:c3:1b:ff:37:16:0f:4d:1e:
1f:93:f7:10:4b:f3:22:6b:ba:ad:1a:1e:b8:49:80:af:a7:99:
14:6a:87:c3:9e:71:fe:9b:a7:2f:3f:0b:8c:a7:be:48:02:54:
e1:89:0b:92:1e:51:99:28:54:db:2e:45:e6:32:d4:28:92:e6:
25:d5:01:82:7b:fd:6a:db:b2:45:3f:72:76:55:a6:9a:95:e3:
80:3d:1e:de:44:5a:bc:8e:d9:64:be:eb:e8:41:43:a8:ab:8d:
07:ef:33:2c:bf:42:64:84:7f:0f:52:af:86:3b:cd:cd:90:27:
73:ed:79:91:7a:97:a6:99:47:3c:af:cd:4f:39:dc:44:67:a6:
c0:b7:9e:af:50:1a:e8:6e:a5:31:32:ba:65:14:4a:a5:dd:3d:
a5:c3:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:36:24 2025 by rpki-client