Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
File: sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft (raw, json)
Hash identifier: gridONOs4XpPC/JUs7aVKDRM5ikbEzSNvGOWwxftgUs=
Subject key identifier: CD:C7:07:AF:57:2C:06:18:4B:73:C4:EF:D1:0C:21:B8:F8:D2:74:85
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Certificate issuer: /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial: 019923D60DAB7E9EAFD28918FB7EB421252E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
Manifest number: 0FDE
Signing time: Sun 07 Sep 2025 11:00:54 +0000
Manifest this update: Sun 07 Sep 2025 11:00:54 +0000
Manifest next update: Mon 08 Sep 2025 11:00:54 +0000
Files and hashes: 1: 3VLZ851VUhXxIG7ryQ-8eGekA3s.roa (hash: WkKK7D8YH2zVVECR2pK95SMukGQlzInUKX5HdUYAXRs=)
2: sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl (hash: /dDs6mnXHWzcM4vwoc4ciKDiWV8piZogGeYcKvqTGdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:0d:ab:7e:9e:af:d2:89:18:fb:7e:b4:21:25:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Validity
Not Before: Sep 7 11:00:54 2025 GMT
Not After : Sep 8 11:00:54 2025 GMT
Subject: CN=cdc707af572c06184b73c4efd10c21b8f8d27485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:bf:68:04:ad:ee:b4:72:7c:e9:dc:2e:95:
76:a8:99:a2:29:52:72:b0:e6:37:4b:43:b1:f2:20:
6d:b6:b0:9a:06:60:8a:b7:e7:18:14:72:d4:f0:2e:
a1:8a:3f:38:8f:15:a9:7a:d1:95:e4:0c:28:bc:1d:
f4:fb:f7:9b:4d:fa:78:55:a3:df:36:c3:0f:d6:c4:
3b:fc:ae:a5:f1:e9:41:81:7f:86:e3:40:c8:a7:cc:
2c:42:52:4f:a7:4d:a2:7f:ec:cf:ba:7f:eb:a6:ff:
51:bd:c1:56:3d:71:24:8f:32:0e:e3:73:55:5a:cf:
04:66:7b:c6:d4:d1:70:c5:71:41:24:f4:4f:ba:2c:
c1:78:99:9a:4c:9c:dc:ca:3b:57:07:e4:ed:57:36:
a0:fb:d8:aa:b4:67:f6:46:3f:1a:4f:9b:b9:17:80:
e1:21:aa:44:34:0d:7f:80:d0:76:94:90:1b:f2:95:
d5:c6:75:4b:db:f4:a1:c8:95:0c:a9:d6:5e:f5:15:
de:15:87:67:7a:be:58:44:71:80:d0:35:4f:f0:df:
fa:b5:6c:48:a1:79:e8:02:ea:42:0e:4b:29:98:c1:
8e:81:a8:7d:0f:00:61:44:fc:bc:e1:df:3f:4a:ec:
bc:28:ab:31:46:57:12:04:36:9f:14:54:60:27:76:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C7:07:AF:57:2C:06:18:4B:73:C4:EF:D1:0C:21:B8:F8:D2:74:85
X509v3 Authority Key Identifier:
keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d4:73:4a:7a:f5:5e:47:8a:15:eb:c0:8e:67:8f:7b:69:64:
05:e8:c0:24:f1:6b:ad:d7:81:dd:2f:e1:b8:03:50:4b:49:fc:
6a:58:8f:be:ae:52:1c:24:fb:75:04:46:9e:86:0e:bb:78:83:
57:c8:79:66:7e:ec:83:e0:63:5a:1a:e3:fd:4a:24:cd:de:b8:
1f:aa:31:f6:9f:46:e0:89:80:84:79:ef:6f:06:5e:fc:b7:6f:
e3:fe:4d:f9:10:f6:ee:6c:b9:ff:76:5e:7f:98:23:97:32:81:
52:8c:29:35:28:cf:ed:a8:cb:13:90:f4:67:65:5a:90:90:ba:
0a:07:96:80:97:52:68:e6:f6:f1:71:bd:0f:ed:a4:29:7a:18:
2a:de:03:22:ba:98:30:9a:fd:0e:5b:4d:99:63:98:dc:b6:61:
dd:06:b5:e2:9a:1f:46:13:92:cf:38:20:a6:a3:3d:c3:a4:e8:
cc:8f:e2:42:d5:46:76:4b:5a:98:85:b8:95:9b:04:1b:5a:6e:
5e:82:01:13:a8:1f:16:1b:dd:fc:0f:53:8e:c2:6a:1b:8a:ea:
41:03:80:99:26:95:af:46:fd:65:76:03:c3:a7:d0:d8:81:af:
e1:a5:30:ed:35:64:cd:f1:77:97:2f:d6:47:45:9c:55:af:b4:
0a:fb:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:44:23 2025 by rpki-client