Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: A52YKGj6ZQgzMSI5yERIDRmCFn4y6IkH8ys9qGkJH10=
Subject key identifier: DA:71:48:AB:9B:25:A3:06:13:7D:F2:26:7D:87:C9:BB:10:4D:B4:78
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 01995D206A8DCE494E75CDFE7A0D77205AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 09D2
Signing time: Thu 18 Sep 2025 14:00:29 +0000
Manifest this update: Thu 18 Sep 2025 14:00:29 +0000
Manifest next update: Fri 19 Sep 2025 14:00:29 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: COEb0PdSm9xgL+FnBiekVK1GtObtjWHhnPoqXOYS0+Y=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:20:6a:8d:ce:49:4e:75:cd:fe:7a:0d:77:20:5a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Sep 18 14:00:29 2025 GMT
Not After : Sep 19 14:00:29 2025 GMT
Subject: CN=da7148ab9b25a306137df2267d87c9bb104db478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:e0:c4:ea:84:46:5e:c2:58:d4:72:53:78:
eb:44:be:8e:23:a8:d6:bf:08:37:7f:7a:6c:1b:bd:
1f:00:62:b4:06:0c:e8:7a:2a:88:f1:09:99:49:07:
d5:5e:1b:d7:e8:73:03:c8:7b:37:c9:bc:27:7e:0f:
18:25:f6:a2:d1:a9:cc:54:48:6b:ba:1c:4c:9f:4a:
a2:57:ed:ce:41:58:f4:74:6c:2d:d1:52:39:d8:65:
0d:e3:24:5a:95:1c:64:49:2b:72:f1:b3:2b:a8:bf:
b4:29:02:0a:9b:7e:0d:89:60:7d:9a:44:71:14:db:
65:35:94:b4:c9:c2:bc:39:e1:bd:f8:fc:14:16:78:
0f:4d:b4:65:bf:a0:29:c3:d6:12:6e:0a:5e:b9:dd:
09:49:08:7b:4b:7d:58:1a:71:0f:5d:20:40:2a:ec:
e9:eb:c5:63:31:b8:00:27:57:a8:b2:dc:76:90:ef:
ed:8b:3d:1a:71:bc:98:e1:96:22:23:59:b4:d9:33:
b2:56:00:da:49:5e:10:6a:26:b1:67:92:d8:f6:4d:
3a:f1:a0:c0:98:3c:b4:cb:ef:95:5a:11:79:b5:87:
34:bd:34:23:8d:44:74:ca:60:ae:bf:e8:bc:90:e4:
09:c4:c2:c6:86:f2:7b:7d:3a:35:3a:8d:69:0c:36:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:71:48:AB:9B:25:A3:06:13:7D:F2:26:7D:87:C9:BB:10:4D:B4:78
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fa:2a:2f:17:bd:e0:cd:e9:1b:ab:14:f2:23:fc:bf:33:61:
d6:2c:b7:0b:33:3f:61:f6:44:23:33:f7:10:3f:0c:06:33:a3:
e4:b7:52:b0:73:78:ce:c2:e2:77:63:53:35:5c:de:dd:75:d3:
13:9e:56:b4:41:18:3f:ba:d8:37:c7:e0:7c:be:a2:24:11:d2:
ec:e0:16:ff:b1:28:78:e7:51:da:e2:d6:6c:6c:2c:39:f2:91:
de:e5:d0:68:5a:75:cd:60:b8:e9:38:2a:5d:25:37:3d:b0:0c:
7e:97:4a:42:86:67:f1:f4:20:28:65:fc:b0:41:f1:80:fc:8b:
29:0e:55:66:d1:40:8f:98:4b:3b:a0:39:ab:77:6f:02:1b:58:
3a:f9:9f:9b:ef:05:89:24:2a:84:5d:53:10:81:6b:9d:43:f0:
d6:e8:82:3c:37:43:44:37:20:57:0d:88:26:59:f9:7c:dd:da:
d1:2a:15:24:c2:4a:e5:bb:12:27:88:f3:f2:65:27:5f:57:a7:
7c:d1:d8:af:43:9f:27:4b:60:15:8b:04:1c:00:8c:da:51:fd:
4f:ce:ef:7d:9d:7c:71:84:a6:6b:92:eb:d5:f2:2c:da:c0:e3:
1a:34:76:2b:07:a2:90:12:c7:bd:d1:24:70:69:e6:39:20:7e:
3d:44:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:26:02 2025 by rpki-client