Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
File: 01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json)
Hash identifier: TcMcN0DSMYB3i2peoh1hTTckvY0EzRujKRiDEDs+8W4=
Subject key identifier: 67:E6:0D:15:C4:B9:60:F3:31:34:8F:0D:19:26:ED:62:5C:21:9B:4A
Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
Certificate issuer: /CN=d3530c144f592cfa891babf195a817900cd6d916
Certificate serial: 019923A0BBDB90F5E4C91488859454E65E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
Manifest number: 0127
Signing time: Sun 07 Sep 2025 10:02:40 +0000
Manifest this update: Sun 07 Sep 2025 10:02:40 +0000
Manifest next update: Mon 08 Sep 2025 10:02:40 +0000
Files and hashes: 1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: sV1QLYa9niKM1jm9GH0RNfFbVngzzSrO65ohE8IXC98=)
2: r_GfDo9ZWQ7myQ0iViJXzfWcph4.roa (hash: x8B6QTHVzWahPni+0i08daL7qF7EoN+d+/45THjKk0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:bb:db:90:f5:e4:c9:14:88:85:94:54:e6:5e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916
Validity
Not Before: Sep 7 10:02:40 2025 GMT
Not After : Sep 8 10:02:40 2025 GMT
Subject: CN=67e60d15c4b960f331348f0d1926ed625c219b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:ba:46:b1:1f:8c:cc:78:e5:9f:45:62:18:
02:dc:d9:22:ec:f5:f3:95:df:78:db:c0:66:68:3f:
27:94:d1:7f:4b:f3:f9:37:fc:ac:4b:8f:f6:dc:d7:
e3:b5:00:f7:4c:15:7e:0d:87:b5:86:48:fe:7f:13:
9e:1e:5a:60:72:93:f4:96:2b:11:33:d7:0b:54:9e:
bd:2c:0b:04:a2:41:72:58:ae:91:ec:0f:93:94:8f:
91:9c:fc:32:e3:2a:75:4a:bf:c6:4f:26:7c:15:1d:
56:3c:7e:e6:9f:79:02:db:ff:e7:b9:b0:bb:b2:29:
1a:11:85:21:78:43:b2:ed:6e:dc:f1:6c:c3:14:f1:
fe:17:a9:eb:05:fa:37:07:f4:e3:21:ff:12:02:69:
18:ee:7a:9f:3f:71:97:93:77:01:d8:48:84:1f:66:
0e:55:b2:07:bf:eb:2f:c1:c5:ce:d7:57:bc:cf:29:
22:98:d0:c9:66:d6:97:b3:64:0f:2f:29:4f:8b:84:
f5:28:8f:cf:14:22:5c:af:45:4a:c1:f5:61:dc:0a:
e1:3c:db:a4:e2:af:fc:1e:cd:84:da:55:62:ca:ff:
1d:15:09:d7:5c:95:f9:78:25:cc:ab:62:13:55:ea:
d1:4c:7a:f0:54:5f:ba:4e:ce:c4:3e:56:1b:0f:58:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E6:0D:15:C4:B9:60:F3:31:34:8F:0D:19:26:ED:62:5C:21:9B:4A
X509v3 Authority Key Identifier:
keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:05:d8:cf:d8:44:7f:51:4f:4b:eb:28:fb:ef:2d:98:2d:f1:
61:01:a8:8a:a4:38:0f:c8:ad:2a:50:75:5c:2f:53:89:d0:7e:
a6:2b:44:ea:41:db:16:96:4b:a1:ff:36:db:ab:46:8a:3a:95:
e7:b3:5e:2b:12:60:d9:82:9a:e1:9b:ae:59:5e:07:f6:d9:3c:
b2:59:19:83:9b:27:72:49:e5:be:08:62:77:fa:e3:c0:38:23:
84:5c:be:14:20:4c:48:6c:86:83:e8:56:2e:ed:c3:c4:44:9e:
77:ae:07:90:f1:3c:44:59:da:b7:16:39:97:ac:2f:99:a1:55:
6e:38:41:d5:9a:b0:ca:e4:a9:3f:ae:80:50:26:b4:14:fe:d9:
ee:77:72:3f:17:2f:b5:e0:0a:93:98:77:1a:0b:d5:51:b8:0b:
f8:03:cb:27:29:5e:b6:71:2b:fc:f1:e3:8d:7a:c5:5e:d1:45:
9c:50:2f:f1:b4:51:3b:cb:31:52:41:ec:0e:a0:8c:95:67:41:
ef:e0:c2:f6:cd:84:c3:c3:a0:3d:d9:27:35:ec:77:f5:ff:88:
db:59:0c:b4:30:6c:48:f3:a6:34:b0:97:12:82:94:2b:98:03:
79:e4:13:96:3a:f7:7d:30:ae:28:75:a5:fe:8c:90:53:05:c8:
44:92:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:14 2025 by rpki-client