Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: amlQLVsEgZOROssCLHYiRmoZkRb1HcsCizAVAesJWcg=
Subject key identifier: 96:23:96:91:AB:F4:2E:32:FF:36:60:C1:FF:E3:2A:BE:B8:E3:E3:E0
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 0199240C9513D5655AC3C6DCB8CDCF223477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 05B5
Signing time: Sun 07 Sep 2025 12:00:28 +0000
Manifest this update: Sun 07 Sep 2025 12:00:28 +0000
Manifest next update: Mon 08 Sep 2025 12:00:28 +0000
Files and hashes: 1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: OhvA7wTBTkvWPFzj0FNE51KSukCGAMyWCc8d8f5tz+4=)
2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:95:13:d5:65:5a:c3:c6:dc:b8:cd:cf:22:34:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Sep 7 12:00:28 2025 GMT
Not After : Sep 8 12:00:28 2025 GMT
Subject: CN=96239691abf42e32ff3660c1ffe32abeb8e3e3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:3b:36:a8:38:8d:2d:b0:aa:f0:4e:4f:45:
2e:fd:85:97:6d:a8:37:b6:2a:5d:41:56:71:83:b6:
60:b8:07:09:b4:64:bb:86:99:ac:7b:f8:52:b8:36:
e1:bb:e0:ab:64:0d:9b:42:d5:47:5b:e9:94:b1:a9:
fa:21:78:4f:5d:e0:a9:c4:43:b1:8c:ba:44:77:4d:
d8:2f:ba:22:e7:77:48:ab:40:6d:a0:53:5e:ec:79:
a9:cd:07:da:d2:6e:5b:96:48:6e:39:77:f9:58:a0:
e0:96:85:c9:c3:54:f6:a5:b9:17:98:cf:3e:e3:a8:
aa:5f:f7:03:c3:b9:05:82:1b:ab:3a:e6:70:d1:ef:
9e:e8:4f:e5:5b:4a:59:77:b8:4a:28:43:a0:f2:df:
a8:ed:d1:f0:cf:58:c8:bd:d8:92:4a:b6:55:9c:c7:
b4:ae:ad:b1:6b:4d:11:39:f3:13:2e:d7:0a:b7:b7:
a4:a1:23:48:9a:88:45:14:80:fc:67:df:c4:c7:fb:
fe:e7:07:25:4f:32:cb:dd:40:f4:4d:2e:23:3d:71:
db:98:4a:80:8f:ef:b4:3f:6e:e3:9d:63:b8:04:47:
e8:bd:c3:26:e2:e2:23:13:94:b9:4e:52:4e:69:11:
a4:72:88:53:89:dc:cf:ff:64:45:c0:9f:ea:7f:ca:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:23:96:91:AB:F4:2E:32:FF:36:60:C1:FF:E3:2A:BE:B8:E3:E3:E0
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:45:b4:dd:dd:4e:25:3c:51:5a:89:72:9a:e0:b8:33:e8:9a:
a0:c1:e8:36:ce:ba:08:9d:b5:54:ee:3d:ae:d4:4e:27:0c:bf:
9b:c5:b9:2e:82:aa:0c:60:2e:5f:bf:4d:81:7f:f5:1e:fe:b0:
87:de:f3:1d:7f:bc:60:3e:94:e3:96:fb:26:28:14:86:ab:9f:
a9:f2:0c:65:a2:fb:6b:0d:e6:e6:5e:22:a6:fe:e4:94:6b:e0:
b2:a3:66:2b:90:a1:79:b4:58:24:7a:2b:63:64:b2:97:18:6d:
e8:f8:3b:cb:9d:b9:26:04:b7:c0:f0:de:02:4d:bc:3c:cc:12:
be:5c:45:2e:e6:89:b8:fc:f8:69:3e:40:19:de:73:46:13:5f:
03:18:d0:d4:f8:eb:e5:c4:f1:1d:45:e2:8c:1f:d0:a8:85:cc:
65:a4:89:ad:e2:95:59:2a:6f:41:38:54:b3:5f:58:c6:f1:4a:
41:18:f5:61:50:83:dd:ee:ec:88:77:67:a7:bc:7a:57:8c:4e:
d6:3b:9f:ec:b4:70:23:80:6f:b0:17:69:5a:a3:3c:5c:ee:ca:
da:97:74:11:8d:5a:b1:d2:60:a0:71:35:5d:ac:69:40:e5:46:
0d:1c:99:dd:fd:ec:54:a0:da:1b:5c:40:e2:ae:d1:08:b2:45:
b6:d7:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 21:54:46 2025 by rpki-client