Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
File: mLERYbntS7CKACbVz9H-yWh8GcM.mft (raw, json)
Hash identifier: wEfTfvg9Z7vqfjmzjUD9QA83+NOmOIk5Uk+VSDidhZM=
Subject key identifier: B8:85:18:98:95:B1:DB:5E:0E:57:94:55:E9:C1:CF:6F:6A:84:33:E3
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Certificate issuer: /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial: 0199233121C4BC0DBFBD92CC6C5E2E5809C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
Manifest number: 085B
Signing time: Sun 07 Sep 2025 08:00:46 +0000
Manifest this update: Sun 07 Sep 2025 08:00:46 +0000
Manifest next update: Mon 08 Sep 2025 08:00:46 +0000
Files and hashes: 1: Cm8RCYhViL8QXogPawjCQz1KEOE.roa (hash: 0Bf8kPU+ifdON2kDga7X6CtCb4LJyzlqkerUdEy/siA=)
2: mLERYbntS7CKACbVz9H-yWh8GcM.crl (hash: zk3ZffPBQIKEAlgYrCtCgtUdEkeJUP5OL7I5jJraRQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:21:c4:bc:0d:bf:bd:92:cc:6c:5e:2e:58:09:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Validity
Not Before: Sep 7 08:00:46 2025 GMT
Not After : Sep 8 08:00:46 2025 GMT
Subject: CN=b885189895b1db5e0e579455e9c1cf6f6a8433e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:f6:fc:8c:d5:12:b4:d4:83:93:2e:28:2b:
d8:7a:8a:ed:3f:89:9b:84:0f:a8:22:5a:20:9c:33:
ec:0e:1a:e2:7e:8f:4d:6a:36:6d:9e:d6:ad:71:ad:
5b:8e:b9:63:8d:cf:61:e0:ea:65:9b:92:85:37:e9:
2c:ef:c4:84:ad:d8:20:9f:3a:cd:6c:b0:04:e5:08:
79:5f:11:a9:1f:69:66:d5:73:4c:b6:19:97:06:a0:
2f:b3:82:fd:cc:81:86:21:57:e1:3a:5d:29:24:12:
94:6d:4b:eb:33:58:f5:be:9c:10:9b:fa:1b:3e:a1:
3f:bc:bd:d4:a1:d8:4f:47:d5:b4:e2:42:7a:64:40:
70:9a:9d:dd:23:1b:ab:65:b2:a2:5d:17:ce:0a:70:
40:8a:4c:41:01:bb:f5:ea:2d:0f:22:93:90:2f:a9:
5f:93:7a:b6:d1:c9:14:67:81:56:71:38:3d:e5:79:
78:64:86:6a:70:28:c2:51:2f:e7:c7:e4:10:a9:9b:
97:d6:dd:2b:87:1d:45:6c:0a:76:ae:5c:1f:37:31:
f6:a1:f7:1a:f6:e7:d7:12:fd:27:1b:a8:c2:b3:90:
9e:20:52:1e:15:a1:2d:88:9b:42:be:9f:86:73:ff:
74:ce:ef:23:b9:23:c5:ee:34:0d:b2:e0:5d:9b:7d:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:85:18:98:95:B1:DB:5E:0E:57:94:55:E9:C1:CF:6F:6A:84:33:E3
X509v3 Authority Key Identifier:
keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ec:5e:1b:61:38:6f:de:07:d3:28:30:0a:a7:ba:3b:80:d8:
c9:26:dc:2e:06:70:f8:9b:42:fa:0c:7c:29:b8:10:20:c6:79:
23:6b:fc:89:f2:db:a2:a8:7f:3b:a8:ea:5d:1f:ad:ae:9a:66:
41:92:15:38:46:33:cb:95:62:a0:2d:f6:67:a3:5c:1e:b8:88:
56:e1:89:a5:dd:f1:7e:ec:fa:76:13:79:bb:a4:c1:6c:15:a5:
9a:a9:f0:75:f5:b2:b0:ef:67:96:6d:28:74:ce:43:23:5d:36:
7c:be:ef:1b:25:c2:2a:3e:c5:6b:eb:b4:6e:35:ff:17:69:8c:
03:1d:dc:be:c3:b4:75:03:e9:73:00:9f:cb:1b:d6:23:7f:9d:
27:97:43:65:4b:85:cd:65:dd:8f:13:58:f1:8a:b6:59:2e:03:
46:40:79:f7:d4:08:8e:20:93:68:bc:53:8f:57:81:bf:c4:72:
d4:ca:4b:e4:21:57:d0:0b:77:7b:64:f4:b9:58:4f:5e:31:22:
03:9e:3b:83:42:e7:ab:b5:2c:30:77:8b:9f:b2:f3:7c:be:02:
0b:52:ab:2e:c3:4f:4b:2d:d7:ea:ec:31:e8:05:2c:e7:84:97:
92:f2:ff:fe:80:f1:bd:09:d8:60:ed:d5:2e:91:54:64:d4:89:
ad:95:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:24 2025 by rpki-client