Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
File: _vMpNgwbb8r79SU6ZX4-nX8iT34.mft (raw, json)
Hash identifier: EKs/q3Y3cOJXAiZ5KmUjlUgYvxyem9qgGnMK6+hzu98=
Subject key identifier: B6:4C:2B:B3:63:00:FA:B4:05:4B:05:C5:47:34:60:6E:13:EA:ED:0E
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 0199228D30B58ACEBF45EFDAC01C9D613A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
Manifest number: 0AAA
Signing time: Sun 07 Sep 2025 05:01:42 +0000
Manifest this update: Sun 07 Sep 2025 05:01:42 +0000
Manifest next update: Mon 08 Sep 2025 05:01:42 +0000
Files and hashes: 1: _vMpNgwbb8r79SU6ZX4-nX8iT34.crl (hash: e65hjeDWQkb59L0Z2+F/U1iuvEW2gJfRxJ6sajDDW3s=)
2: sal7PYLJIpSNgfzX-mHBx92eZY4.roa (hash: y0fWbs+KX+1LX1FUo2i/E/BhGWNH/lzhBXcOY7rC0YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:30:b5:8a:ce:bf:45:ef:da:c0:1c:9d:61:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: Sep 7 05:01:42 2025 GMT
Not After : Sep 8 05:01:42 2025 GMT
Subject: CN=b64c2bb36300fab4054b05c54734606e13eaed0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:3b:0d:d8:90:4e:91:df:42:b2:40:00:ff:
63:16:64:b9:d4:21:92:99:e9:d5:c3:2f:8a:66:bc:
52:f2:a4:29:c5:22:03:f2:62:31:8b:53:f8:52:4f:
44:14:20:78:b1:70:8a:c1:b8:e2:0b:5d:e8:4f:7e:
0a:e8:58:48:c3:df:c1:cc:10:c0:bb:85:f7:63:ff:
72:5f:d0:82:5b:dc:e0:0c:3b:f2:c2:09:a9:f2:23:
e5:fd:1f:4b:8d:28:b3:ae:cc:98:4b:8b:23:0e:60:
6a:9f:01:97:88:96:61:49:60:f7:24:83:de:0c:5f:
da:b4:36:03:ef:9d:1e:10:bb:15:8e:27:28:8c:72:
54:07:f5:3d:93:a0:a8:dc:65:bc:fa:ff:97:20:bb:
85:e3:cf:78:55:f5:28:c6:74:ab:1d:14:f6:82:09:
03:ae:3d:8a:3d:d2:31:32:b3:0a:82:b9:0e:2e:44:
e4:61:39:6c:67:70:fe:49:47:8e:0e:0f:86:8c:a2:
e9:d6:20:bd:89:ec:53:78:bd:01:1b:b7:35:b9:a2:
65:03:c0:f5:c5:9f:9e:5a:5d:02:d8:86:71:f4:0f:
48:5a:c3:cc:51:c8:68:b3:42:a9:53:cc:c5:ca:b1:
e7:4d:c1:ca:f8:4b:ad:35:83:82:9e:6d:62:bf:19:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4C:2B:B3:63:00:FA:B4:05:4B:05:C5:47:34:60:6E:13:EA:ED:0E
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2a:80:2a:cc:85:20:8d:3c:8e:54:9f:a4:a1:04:09:6c:f9:
99:ca:35:61:1b:fc:15:af:b8:1a:03:1d:0d:4a:c5:f2:05:16:
0c:8b:df:4c:7a:db:2e:1a:82:48:72:0a:e8:71:22:e3:14:36:
1d:15:b5:bb:20:a2:3b:38:47:1b:a5:58:20:fc:81:38:2c:50:
8a:04:b3:e7:ec:b0:89:6d:93:e3:a4:65:15:d4:90:53:bc:49:
be:fd:8f:f7:11:f0:a9:04:c5:a0:c3:4e:72:cb:e6:b1:b8:f4:
3d:51:ae:ce:3c:64:be:85:4a:6d:68:9f:60:a5:3c:e8:f1:da:
9a:d5:f5:09:de:68:58:81:2a:a7:5d:08:7d:74:d2:11:aa:04:
ad:15:c2:84:4f:d7:1d:fa:d6:a9:a6:ac:8c:ce:2d:ee:eb:12:
7e:7f:14:32:7a:ec:81:13:e0:34:5a:ed:e5:2e:e4:75:e4:fd:
6a:72:15:1a:26:f8:8d:4b:03:a1:b7:44:1e:bd:be:e2:11:45:
a7:e9:1a:06:21:e9:32:7d:d7:84:0c:3f:79:f5:29:92:09:9e:
58:84:85:dc:30:a0:ce:1f:d5:04:a6:74:9f:c0:cb:88:49:4c:
9d:b5:d2:bc:10:fd:8e:e4:0f:48:02:82:31:af:44:0d:ea:8d:
96:2d:4b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:56 2025 by rpki-client