Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: qpt4VL2n1U5nEtTUkEB3PBFuHATtfs8s06z00WvHBpg=
Subject key identifier: 0D:AF:5A:64:52:9B:49:37:7C:C7:6F:48:8F:B4:69:56:01:5A:73:4A
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 0199233109DFF9ACC9C8804799C6AF8A86BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0B38
Signing time: Sun 07 Sep 2025 08:00:40 +0000
Manifest this update: Sun 07 Sep 2025 08:00:40 +0000
Manifest next update: Mon 08 Sep 2025 08:00:40 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: RzZPUUiih0qGRgc0qKUO8Zs+hNpja/1Yicdt6DTVIvs=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:09:df:f9:ac:c9:c8:80:47:99:c6:af:8a:86:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Sep 7 08:00:40 2025 GMT
Not After : Sep 8 08:00:40 2025 GMT
Subject: CN=0daf5a64529b49377cc76f488fb46956015a734a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:3a:f2:7d:ee:66:51:ce:af:02:9e:19:cd:
7d:8c:80:f2:f8:43:7e:2a:dd:8c:c9:35:c1:81:2a:
be:3a:41:72:f9:81:80:f3:29:79:ec:7c:26:a9:c7:
8d:d1:ff:17:7c:a0:f5:f0:44:8c:e6:4a:a6:73:75:
45:72:91:54:98:47:ab:35:fa:e9:ab:49:50:e2:d9:
1c:10:d3:28:74:08:2e:fb:f7:7f:b3:b8:56:98:6e:
68:4e:95:c7:5b:51:36:a5:ad:d1:cf:53:53:d6:1c:
fc:46:48:f2:ef:96:69:f3:92:56:ea:43:3e:00:64:
21:8b:3d:c1:7e:9d:69:b2:ff:49:a2:72:c5:43:ea:
cd:eb:12:4c:46:a9:22:45:e2:15:ce:b1:1e:d3:34:
3c:0d:69:e1:a0:22:53:04:e6:a5:f6:b0:85:eb:0c:
a9:e7:92:f1:5b:a9:8c:d4:c6:96:c5:9f:d6:9f:64:
49:1c:b3:23:98:8c:d2:95:8a:d1:32:0b:9e:7e:c2:
d9:74:40:a4:3e:f2:2c:f8:d1:be:7c:42:e1:eb:55:
54:65:95:e8:c8:f4:f3:1e:a0:4f:2e:f4:60:d0:8f:
fa:4f:4c:e2:a1:93:5f:4f:b0:d0:80:4f:3b:f4:bb:
77:ca:b2:2c:a5:4b:10:fb:d6:cd:88:7f:8f:33:d1:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AF:5A:64:52:9B:49:37:7C:C7:6F:48:8F:B4:69:56:01:5A:73:4A
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:9d:18:66:79:39:44:46:88:96:6c:e0:f0:34:09:3e:56:
3d:02:cb:cd:83:76:5d:2e:05:95:99:34:0c:3a:19:76:ce:7f:
44:53:86:bd:26:86:95:70:9b:22:18:86:4d:39:54:12:0c:71:
ba:f5:ad:8b:fc:fc:8d:ed:0e:f8:de:b8:53:0a:5a:ef:4e:6c:
e2:6e:6c:15:ad:f8:42:11:05:b8:2a:bc:8a:6a:58:23:4e:ef:
17:98:f4:6a:2f:22:b4:1f:ba:a0:78:5c:43:41:ad:76:02:33:
1c:75:ff:4d:72:70:e5:b2:80:1c:69:87:29:0c:29:05:67:32:
9d:5c:a8:a4:a3:8e:76:79:c6:bb:da:67:ef:e2:ca:b1:ca:c6:
1c:c7:6e:4a:0f:37:de:76:bc:29:1b:4d:94:ee:36:77:c4:ce:
dd:f5:6f:7a:44:f8:f3:57:58:a3:1d:be:1a:66:7f:76:7c:91:
fe:d1:74:ad:49:db:9d:2a:32:a1:e6:2e:c7:61:61:03:f7:ba:
ab:65:5a:d0:57:bb:66:5a:b0:69:26:82:50:78:66:be:2b:f4:
21:9f:ac:e9:5a:39:db:82:58:25:32:28:d2:2d:d1:37:b8:ac:
66:5f:95:9f:4d:3c:18:49:b0:47:c8:71:d7:d2:ac:c3:7d:72:
07:31:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:53 2025 by rpki-client