Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: K2jo2k7Wverr3Yibn+DCFZZ9ZKI5+vXuclYUi2JtSRU=
Subject key identifier: 8C:62:45:38:DE:7F:8D:C0:03:D1:D6:83:9F:84:B1:53:7F:60:2A:62
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 0199172CA1A54BCFB1EE54F345B4A4911066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0A79
Signing time: Fri 05 Sep 2025 00:00:24 +0000
Manifest this update: Fri 05 Sep 2025 00:00:24 +0000
Manifest next update: Sat 06 Sep 2025 00:00:24 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: ucQZN/rv49c+OnZxmuK9bFc3t+Z4RQzj4eRH38d9css=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:a1:a5:4b:cf:b1:ee:54:f3:45:b4:a4:91:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Sep 5 00:00:24 2025 GMT
Not After : Sep 6 00:00:24 2025 GMT
Subject: CN=8c624538de7f8dc003d1d6839f84b1537f602a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6a:a4:1c:aa:c0:f8:9b:4c:f2:1a:ad:8c:4d:
7e:87:47:4b:43:46:73:5e:9a:aa:2f:51:d7:a4:aa:
88:ee:c7:78:07:bf:aa:17:f8:c3:fe:33:d0:53:3c:
fb:8a:ad:dd:3f:43:80:aa:55:5a:92:7b:de:68:45:
57:28:d7:cf:59:5e:3b:17:a8:90:ce:ba:ec:db:19:
60:cf:1b:b1:0c:ee:23:b7:09:8b:84:e9:5c:18:00:
d1:54:91:43:f4:c7:54:d7:10:0e:13:7a:9e:7c:4c:
59:20:a5:ff:da:9e:fd:10:9a:82:42:8d:55:5e:c8:
ca:9e:13:7b:f4:13:e3:8d:3f:e5:e6:e8:bc:70:f6:
a7:76:e3:62:d5:61:3c:86:08:20:17:22:68:fb:d6:
b0:3f:ac:6c:50:13:d0:4d:f6:45:06:f3:af:26:9c:
25:33:d4:a3:92:e5:fc:73:3c:2e:dd:1d:86:61:32:
2c:f5:25:38:04:bc:64:46:56:ac:c2:f0:b9:2c:6e:
e7:35:67:4d:4e:c8:53:46:13:74:6a:32:5d:b5:b0:
63:74:ea:80:d4:69:82:96:f6:ae:cc:77:77:23:a1:
06:2a:c6:ac:17:4a:6b:34:44:18:d2:33:9f:5d:51:
0b:18:a8:d3:94:60:d8:d6:cd:af:f3:00:9b:89:ae:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:62:45:38:DE:7F:8D:C0:03:D1:D6:83:9F:84:B1:53:7F:60:2A:62
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:37:5d:f1:9f:fe:7b:f6:8e:9d:ef:fc:af:6b:82:b2:d5:c7:
23:11:a7:92:b6:fc:9f:00:26:23:bf:42:32:d4:ea:1a:d7:b0:
91:90:c5:b0:92:f2:ba:86:6f:12:7d:34:bd:c0:3c:07:90:92:
91:e7:d7:05:2a:60:e4:a1:d8:3c:f4:b1:3f:6f:e4:ff:f9:9b:
e1:9b:9d:05:d6:c6:b0:80:f9:2d:fc:f8:12:83:17:80:e5:f8:
31:1a:ac:a7:38:88:67:f3:3d:6a:e4:2e:88:f6:f0:07:28:b7:
e6:62:c5:20:d5:39:9e:f8:e4:74:dd:72:49:55:5e:11:fc:84:
a6:c8:31:b4:3b:be:55:dd:6e:b6:d6:c9:8c:b0:b6:de:31:bc:
75:10:c6:d4:93:d5:1b:95:52:cc:50:89:d3:1c:16:c8:92:b0:
ed:81:e9:1a:a9:26:c1:0f:18:d1:44:65:7d:73:d6:8b:70:24:
4b:63:f1:de:90:eb:c7:bd:05:61:b3:76:39:b0:26:d9:c5:a6:
55:db:31:a4:00:ab:59:bf:63:dc:2b:b9:9a:b3:67:05:d3:39:
40:be:8d:eb:c4:38:57:b4:e9:1c:5d:c1:8d:8d:8f:1c:8b:4b:
3d:7d:cf:e0:95:5e:af:fd:b5:4c:ad:e2:c7:6e:a1:5e:ee:73:
ea:60:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:42 2025 by rpki-client