Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: ERA28VWUD9K1rpLS0PA94uNtkCgdu+F/ro4jVG9p340=
Subject key identifier: 2B:9C:35:FC:BE:11:8C:CC:2E:19:44:35:8E:E3:8E:AF:E4:E5:90:24
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 0199228CA5211EDB3317EFA8AFCC7D0DDCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0ADB
Signing time: Sun 07 Sep 2025 05:01:06 +0000
Manifest this update: Sun 07 Sep 2025 05:01:06 +0000
Manifest next update: Mon 08 Sep 2025 05:01:06 +0000
Files and hashes: 1: WEMws9n6rUTkd5LM4QecvMz8r_U.roa (hash: CZHPbmXmn0MVwHpVyYpkHxFw9h7//57NzIqqFrYWcd8=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: TRzarL7skUQflmmqfyHZ3jpr4HmiRU2d9gj208ZrgTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a5:21:1e:db:33:17:ef:a8:af:cc:7d:0d:dc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Sep 7 05:01:06 2025 GMT
Not After : Sep 8 05:01:06 2025 GMT
Subject: CN=2b9c35fcbe118ccc2e1944358ee38eafe4e59024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:55:6f:e3:1d:7a:79:1c:1e:ae:24:08:4a:
e5:1d:f3:9d:67:69:9d:37:76:31:a0:6b:42:f9:4b:
41:68:c9:d6:34:15:58:42:ca:49:69:34:7a:47:30:
6e:cb:a1:03:14:21:3d:e0:4b:33:af:bf:15:59:40:
eb:b9:31:dd:e0:0b:d9:06:6c:86:b4:41:01:51:16:
f6:e2:ae:b0:f2:6f:05:a2:c0:76:c3:bf:16:76:e0:
a1:a2:60:be:0c:98:ec:1e:ad:05:65:c0:06:3f:99:
31:d8:af:dd:47:b2:fe:a3:58:7f:b1:cb:2a:15:38:
8c:b7:33:53:05:38:4f:46:b4:32:df:cb:3f:1f:17:
f0:80:ff:9b:45:d5:3f:3d:04:4a:1b:5d:c6:81:ec:
b1:39:ac:65:51:6c:94:52:3b:9a:b3:dd:68:c3:6f:
1e:1c:5e:fb:5d:aa:a0:8f:e6:6c:35:e4:c1:73:3f:
85:74:8b:2c:6b:55:4f:52:2c:87:93:a2:5b:03:2d:
49:4e:4c:58:9e:52:96:31:a6:35:20:26:c8:8a:72:
af:45:9b:1c:e3:40:9a:fc:9c:80:7d:cc:00:7b:ef:
02:1d:b8:e4:e7:be:63:ae:1a:97:4c:f1:16:c7:89:
d7:e0:13:48:69:8d:c5:5e:80:37:46:70:29:b9:13:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:35:FC:BE:11:8C:CC:2E:19:44:35:8E:E3:8E:AF:E4:E5:90:24
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:00:e9:91:b0:3c:2f:f1:a8:c2:61:aa:a5:ac:52:7f:c0:6e:
d5:51:47:c3:bb:19:c0:17:10:00:58:be:06:7b:83:3a:95:4c:
96:74:01:54:77:8a:49:cd:05:50:1f:83:f4:4a:b0:57:02:44:
a1:40:ef:68:98:8d:51:21:0e:28:c9:6c:5b:74:70:fa:48:22:
75:e1:49:60:34:ff:06:8e:cd:49:7a:89:6c:77:e0:e5:46:1c:
8d:45:a8:e5:82:54:b0:5f:ca:23:13:4a:3d:d6:30:2c:b4:de:
94:b4:78:d4:a3:bd:fd:de:f4:e7:d8:38:a6:27:23:db:e6:73:
8a:85:dd:e1:bd:57:4b:11:d6:9a:96:7f:e2:4d:b0:5c:15:56:
22:47:e2:3e:8d:53:21:49:96:52:ff:51:a5:b0:ce:4d:50:d4:
a9:92:8e:81:45:04:69:74:e4:be:7a:f5:50:ee:16:0f:f4:a6:
75:03:f3:33:ac:4b:39:55:38:81:68:d3:4c:79:c7:32:44:28:
04:d6:ba:5f:46:5a:56:50:0d:e3:bb:f8:b9:8e:fe:47:42:c2:
ab:e6:d9:46:bc:08:70:74:c2:3e:28:66:62:8d:1b:79:a3:26:
c4:4b:67:ca:ad:a7:1d:e9:23:fe:2a:80:51:fb:66:5f:13:29:
33:7c:7e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:05 2025 by rpki-client