Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File: mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier: uMvGjC1PPUzQsavi8S22xvipsbGb+aFmFCfQvPnQWq4=
Subject key identifier: DE:FD:7F:23:72:58:3E:32:43:B9:02:92:FB:E2:88:E4:47:69:5A:EC
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 0198CACA8B901B90164AD0A1E398F30459DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number: 0F5F
Signing time: Thu 21 Aug 2025 04:02:08 +0000
Manifest this update: Thu 21 Aug 2025 04:02:08 +0000
Manifest next update: Fri 22 Aug 2025 04:02:08 +0000
Files and hashes: 1: R9XjDqsU1i45aj3QGrLZJm2Xbtw.roa (hash: eXfXK6CNN8vKlZOgITSmIbCpVEoWMFvA24LwX+sXHCg=)
2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: FmGNpTVkny7s/uEjuetrFV/cQYrwByv+4S7XaVywoFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:8b:90:1b:90:16:4a:d0:a1:e3:98:f3:04:59:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Aug 21 04:02:08 2025 GMT
Not After : Aug 22 04:02:08 2025 GMT
Subject: CN=defd7f2372583e3243b90292fbe288e447695aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:db:3b:ef:11:ff:fc:4b:d9:0b:c0:17:fe:
3b:f4:16:93:f0:b7:b4:57:e6:3f:5d:40:65:03:c1:
9b:c1:c9:96:67:f1:5c:e8:44:ee:15:b3:3c:41:53:
ae:c7:b3:73:b6:2e:3b:2b:fc:d6:90:fb:b3:eb:58:
54:0a:b5:7e:4e:2b:88:b6:5c:cd:d0:e7:dc:85:02:
ea:cc:fe:5f:89:7f:b6:98:94:8e:01:b6:77:81:4c:
23:ee:81:41:e5:9d:8e:ea:8c:63:4c:7e:6d:e3:e6:
94:43:71:65:e9:17:dd:09:ec:c0:cb:b9:67:74:9b:
a8:60:29:c4:70:8e:15:97:4a:de:1d:cd:bc:35:c2:
88:9d:19:09:08:49:57:1b:4b:2b:7b:b9:59:7d:f1:
d2:67:49:bd:06:7b:73:3e:3d:c7:d5:b9:b2:df:bd:
d9:81:2f:de:55:45:6f:f7:85:90:26:8e:a1:2c:8c:
7f:ff:23:d1:ed:b8:db:c4:72:98:32:01:b9:d2:d2:
cf:17:0d:36:7e:cc:e1:56:40:e2:a4:a3:e7:f5:02:
dc:d3:bd:60:ee:32:69:f9:12:c6:77:7f:b7:4b:c7:
5b:a6:6d:22:d3:f8:f4:83:a7:60:dd:64:b3:8e:e9:
fe:61:79:6a:51:61:24:ac:b4:95:a8:5d:0a:60:04:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:7F:23:72:58:3E:32:43:B9:02:92:FB:E2:88:E4:47:69:5A:EC
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cf:64:1d:42:2b:88:17:e8:1c:c9:e4:5c:ef:64:5f:3c:ca:
57:34:bc:02:77:9c:aa:b2:6e:90:7a:b7:c0:53:c8:c1:71:29:
53:2b:33:d0:c9:64:f5:ca:7d:db:3a:28:b8:6b:58:c2:06:51:
a4:9e:89:64:d1:27:54:f8:cb:5a:46:cc:59:0c:1b:2a:1e:12:
90:4e:5d:a2:dd:de:6a:eb:a8:ee:46:5c:c1:03:38:09:a5:33:
01:d5:d5:ac:12:23:0c:ae:dd:77:af:53:54:5f:1c:ca:71:b1:
be:bf:89:97:4b:25:d9:f9:4e:4e:93:f6:87:6c:06:07:67:43:
d5:f3:93:41:e5:fa:b9:58:99:bc:d7:a1:44:5d:47:fd:a5:e7:
e0:e3:b0:95:7c:6f:dd:c3:a4:f2:57:a8:44:bf:46:b9:c4:5c:
28:d6:84:84:22:23:75:4a:7d:b6:61:66:30:34:d8:cb:73:5e:
e2:b7:82:8a:2d:fe:e4:4a:a5:83:a0:c8:fa:f4:a2:e4:d9:4b:
9e:be:dd:60:12:d0:ca:a1:51:a1:2e:a5:78:9a:07:d6:20:5f:
40:77:7a:02:bb:e0:27:1e:08:4b:07:86:cd:92:19:9a:20:9e:
8d:e3:3e:f0:73:0a:e7:47:1f:aa:9d:67:bb:7e:cd:5e:8d:62:
8a:c2:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:59:03 2025 by rpki-client