Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
File: mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft (raw, json)
Hash identifier: CYER1K8noP37qN/WOe0SN9nZTtuW/uEAUHDtihU6jBQ=
Subject key identifier: 9A:0B:B5:56:98:B9:95:82:C6:97:B0:16:72:8B:BD:71:F5:F9:A4:BB
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Certificate issuer: /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial: 01992330CE384B0294D14863AAAE637010C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl (hash: yYRXdSAWudTPQRV3dMbyBfoNsiuNigiDvatF66zuNLA=)
2: s3dIm20GepVqtr86hU4U0PO_ew8.roa (hash: IACsMI0iHVIsWExBAgSS418a6ZTtpolE9FZ0jLsNao8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ce:38:4b:02:94:d1:48:63:aa:ae:63:70:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=9a0bb55698b99582c697b016728bbd71f5f9a4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:df:d7:26:fa:9d:bb:55:f6:b4:7d:7e:88:
b4:4a:15:60:a2:61:1f:4f:5c:36:ee:68:fb:c0:b2:
72:11:c9:b0:b0:b7:13:aa:d6:18:82:a1:53:3b:d4:
d6:22:da:c9:f0:86:fc:f2:51:5b:2f:05:7a:1f:47:
03:21:b2:d6:38:87:34:d2:74:5a:94:f4:05:00:58:
9e:ca:fc:33:54:a6:79:de:9f:8e:40:e1:63:70:55:
f2:80:cc:7f:3d:c4:d8:51:dd:3b:d3:82:2b:36:c8:
22:c9:af:68:5d:e7:f4:f3:0d:d0:27:71:16:0a:ee:
dd:9e:40:54:1c:2d:c7:39:17:c1:1c:57:58:f9:f0:
14:76:94:f8:c5:0d:ba:fa:d5:96:20:7e:fc:b0:8b:
40:ac:71:6a:aa:8b:9e:be:be:65:0c:5a:5b:53:4d:
57:b2:36:c4:82:2e:fb:43:6e:05:1f:9c:31:ad:e0:
4f:20:76:f3:ef:66:ae:99:a1:16:3f:a5:47:e5:5f:
04:02:31:05:4f:4b:92:e9:e7:32:a5:3a:fa:06:db:
2c:e3:ec:69:4f:5b:1f:02:2d:16:0f:74:f2:d0:08:
8e:3c:28:74:7a:83:2d:06:3c:d8:d1:c7:a8:cb:04:
c4:91:50:1f:57:75:37:12:3b:45:55:09:45:57:59:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0B:B5:56:98:B9:95:82:C6:97:B0:16:72:8B:BD:71:F5:F9:A4:BB
X509v3 Authority Key Identifier:
keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:6d:f0:87:c4:fa:97:b9:46:85:9f:08:06:0d:5d:78:d4:
2d:8c:11:3f:b7:cb:7d:d8:b9:a3:6e:07:01:a4:0f:9a:a8:4e:
d1:77:d8:1d:9a:98:b7:49:13:c0:2d:62:a4:55:eb:2f:d5:45:
44:35:ad:a6:ee:da:4f:bf:3d:8e:47:14:de:89:22:17:72:3f:
2c:c4:ac:9d:01:d0:65:23:7e:11:6a:67:78:8d:bd:13:35:fd:
71:b8:b5:6c:b4:46:02:6c:89:c4:9c:5c:59:4d:e3:56:99:ac:
f5:4c:d9:fa:02:2f:43:3d:bc:20:82:46:1d:49:78:ad:1f:b4:
82:e1:61:4e:13:42:6f:d5:f4:3d:8d:14:0f:b9:1e:f7:a9:a1:
9d:66:46:f3:4e:e2:da:1b:c6:43:fc:66:82:9a:63:0e:d3:9c:
71:46:2e:1a:9d:d4:32:9d:3b:09:51:de:b1:e1:a5:56:b9:a2:
d4:22:b8:56:dd:b3:24:40:59:29:7b:b0:9d:bc:82:7b:8c:94:
ae:37:f5:48:ef:89:02:d2:2f:1f:2e:b6:93:2a:54:78:2a:45:
ac:12:f4:9f:3d:14:ff:ad:da:1c:93:d1:42:cd:8c:6f:5d:68:
05:ac:04:01:fe:86:01:5c:72:89:d1:b5:24:78:f9:0a:05:39:
27:eb:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:39 2025 by rpki-client