Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier: NekqxAR81gUCkiZ2WnPaOw4LklspO9mLeFCm1eu0Mcw=
Subject key identifier: 5E:6C:B1:69:B3:62:3D:DE:69:D9:4E:8C:3D:D7:50:11:C8:57:24:9F
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 01991809636A9D42D7468C8323966E58821F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number: 126B
Signing time: Fri 05 Sep 2025 04:01:32 +0000
Manifest this update: Fri 05 Sep 2025 04:01:32 +0000
Manifest next update: Sat 06 Sep 2025 04:01:32 +0000
Files and hashes: 1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=)
2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: 6VRoTZEj1ecYNa43QEzMOoixN74hDTTOxiNAr5/aElE=)
3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=)
4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:63:6a:9d:42:d7:46:8c:83:23:96:6e:58:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Sep 5 04:01:32 2025 GMT
Not After : Sep 6 04:01:32 2025 GMT
Subject: CN=5e6cb169b3623dde69d94e8c3dd75011c857249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:a1:be:1c:c3:b0:c1:28:b7:7d:47:6b:80:
7c:d8:c1:5d:f4:a0:ad:09:df:1b:27:d9:c9:85:cf:
79:dc:f0:eb:32:4b:70:7e:ee:8e:45:60:27:85:0b:
5c:a1:fd:78:35:3d:e5:cb:26:3e:6f:d7:67:3b:1e:
7c:0f:cf:c2:41:ce:17:6c:fe:30:08:b0:28:39:bf:
f4:71:97:19:1c:0c:b7:9c:dc:33:fd:5d:f0:22:8a:
83:cc:bc:f8:81:ca:90:5b:7a:7e:d6:46:e6:b6:33:
aa:e6:f8:30:ee:44:ca:64:f4:0d:db:b0:84:d5:7c:
a1:3e:37:c3:28:51:16:33:94:02:f0:ad:95:e0:f9:
70:41:65:1b:05:27:ee:f3:c6:c0:72:a8:be:8c:69:
16:5c:f2:ab:80:92:64:24:cc:d0:59:28:b1:79:be:
b0:91:23:b1:e4:09:b8:56:38:14:0f:73:dc:2d:7b:
ba:04:b8:57:2b:89:fe:2c:ce:2a:89:fa:3d:e4:a7:
8e:4c:2c:9e:48:db:44:e3:ac:86:1d:8d:18:d4:dc:
55:23:7c:9f:76:1d:c3:16:4c:c4:06:f6:33:1d:83:
85:7b:51:1d:26:d9:c9:82:09:4e:8b:22:27:d9:8b:
94:bb:c3:b7:1f:cf:f1:13:00:fc:03:93:da:44:40:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:B1:69:B3:62:3D:DE:69:D9:4E:8C:3D:D7:50:11:C8:57:24:9F
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5d:9d:7d:2c:5f:6b:79:4d:40:1f:d6:37:41:b7:47:43:bf:
bf:4c:99:65:7c:a9:a0:6f:21:eb:d9:06:e6:49:73:d2:8a:f8:
82:d0:05:7e:03:b3:38:f4:3b:76:da:a1:8b:0c:de:23:41:41:
eb:b8:3e:b0:bd:dd:4d:90:c1:3c:58:bf:7d:b3:0a:1d:14:32:
72:36:a8:ed:03:8f:b8:b1:6f:9d:ad:84:1d:26:ec:27:06:de:
a8:6a:ad:15:91:00:cf:c5:9a:e9:19:e7:7f:86:a8:a0:89:40:
ab:2b:73:e3:41:e5:9a:d0:a5:af:73:29:09:4d:ad:24:f1:d7:
73:37:ca:93:09:40:e8:26:3f:44:88:e7:b0:c9:e4:18:c5:92:
79:ed:a8:25:77:5a:d2:b1:30:cf:da:16:c6:b7:01:5f:c6:f9:
d4:1e:70:56:d0:31:73:03:6d:76:71:46:52:4e:ac:1f:da:5a:
69:c3:2c:62:f9:26:19:dd:ed:0e:2f:b6:4b:47:36:41:87:fd:
c3:5d:7a:df:fe:07:5b:54:7f:48:cb:72:60:67:78:cb:e2:37:
bc:98:e5:58:f0:fd:8e:bd:af:8d:fb:f8:ed:be:e9:9e:b7:ba:
cf:60:03:a3:6c:0d:59:76:da:d2:f3:15:a4:90:99:d8:36:5d:
ed:20:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:08:09 2025 by rpki-client