Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: 014fzfRJ/cUiWYvCTDYsokFeJJ85lbQ2b3J5A6d5Tpk=
Subject key identifier: 8B:B5:56:A8:EA:DC:58:0B:3D:4A:16:44:B1:0B:AC:06:EA:E0:E4:DC
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 01995454D9255BB0546828A41F4FDA7F2C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 125D
Signing time: Tue 16 Sep 2025 21:01:10 +0000
Manifest this update: Tue 16 Sep 2025 21:01:10 +0000
Manifest next update: Wed 17 Sep 2025 21:01:10 +0000
Files and hashes: 1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: sK3K7G88e4kJ94zYJaewDa9Rjq+6VWZ8avdxKd56f6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 18:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:54:d9:25:5b:b0:54:68:28:a4:1f:4f:da:7f:2c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Sep 16 21:01:10 2025 GMT
Not After : Sep 17 21:01:10 2025 GMT
Subject: CN=8bb556a8eadc580b3d4a1644b10bac06eae0e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:68:df:32:2b:97:9a:54:e3:06:c0:bd:9e:
e6:12:8a:9d:13:83:d1:d4:bc:7e:f8:fd:33:3f:39:
a8:08:f4:1a:91:03:8c:2a:9c:ff:bd:3e:79:b0:cc:
4f:e5:28:36:d4:01:c6:93:e1:fe:d3:b7:2d:06:1c:
34:a8:0a:de:b0:25:db:1b:b4:93:fb:05:7a:96:d1:
94:da:66:78:b1:2d:66:08:a1:36:2b:10:f6:eb:72:
91:28:6a:cc:b1:2c:73:b5:17:6a:25:06:7f:17:fa:
4e:e1:3f:2e:bd:d4:d7:f5:66:81:c8:a8:94:7b:73:
9c:41:c2:18:44:07:5c:db:67:9b:08:a1:06:ba:d7:
22:55:85:8d:44:fd:77:55:1a:bf:fd:3b:a8:b2:cb:
89:0b:b7:9d:b7:df:cd:16:ae:06:92:9a:0f:92:68:
8c:c2:e6:2c:b2:2f:4d:48:f1:bb:88:90:44:4b:c2:
37:31:45:e5:22:07:b0:31:b7:66:a5:a3:e7:d8:49:
65:ab:a2:1f:36:8b:0b:7e:92:f9:49:e8:30:3e:48:
b6:42:7c:33:13:38:29:83:96:d2:a0:ae:20:a8:9c:
00:8a:40:9d:e0:d9:b6:fe:0c:16:d5:78:87:0d:f4:
ac:b4:6f:dc:ae:73:de:70:a5:cb:b8:ef:e6:fe:7e:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B5:56:A8:EA:DC:58:0B:3D:4A:16:44:B1:0B:AC:06:EA:E0:E4:DC
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:c1:3b:1c:35:db:64:38:97:7d:ce:88:c0:a4:e4:ce:b3:
7a:d9:92:44:79:43:ab:f2:67:04:7c:4e:c7:c9:5f:a6:44:e0:
ac:97:58:6f:2b:1b:31:da:4d:d2:73:65:a6:f0:c4:14:c3:c3:
b3:e1:ee:43:3b:09:03:fc:af:e5:55:be:dc:d8:39:10:3c:e8:
77:77:a2:0f:05:86:8b:4d:51:57:59:67:6d:a6:47:38:ee:9e:
1c:c8:84:36:69:f6:4b:ff:9f:b6:01:4c:4b:7f:27:03:56:12:
e9:50:5f:44:d4:9f:74:6d:b6:83:af:e4:02:b3:e3:b3:d7:53:
a5:0a:4b:59:52:ef:d6:af:96:f0:3b:36:2c:3d:03:2a:17:8a:
06:ac:85:ea:a5:6a:bb:3e:48:eb:e0:53:35:25:28:42:3e:a2:
04:9b:c5:8f:04:3f:f0:c6:a1:72:51:0f:85:f9:c3:ee:b1:fd:
74:5f:a4:d8:b2:cc:01:5d:88:50:e0:e3:8c:17:39:3c:14:2f:
5a:6f:86:e3:6b:bd:5b:40:85:2b:1b:0e:46:eb:2c:c0:c9:c5:
5a:08:18:e6:93:da:ec:6b:80:61:10:89:df:a7:8d:95:e9:09:
f3:18:05:6c:d5:60:51:4c:da:d5:0e:90:85:06:b8:b4:06:7e:
0d:52:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 23:07:07 2025 by rpki-client