Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: pE4k1jbYSFJRvl6VKq2NCP481eugEg8xqodxfDAAu24=
Subject key identifier: 4F:7C:D7:85:3F:F6:88:D6:98:E7:7A:07:50:0A:EB:6F:19:FF:35:60
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 01995FEAC9845A2EA876C6BD31E0E967C392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 1694
Signing time: Fri 19 Sep 2025 03:00:46 +0000
Manifest this update: Fri 19 Sep 2025 03:00:46 +0000
Manifest next update: Sat 20 Sep 2025 03:00:46 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: pwqYDbNPbuOLSuDpHniEvAGw72F5K4lsGa4KZIlib3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:ea:c9:84:5a:2e:a8:76:c6:bd:31:e0:e9:67:c3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Sep 19 03:00:46 2025 GMT
Not After : Sep 20 03:00:46 2025 GMT
Subject: CN=4f7cd7853ff688d698e77a07500aeb6f19ff3560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:75:19:45:5a:cb:c1:42:b4:4f:78:72:45:
28:1a:d5:2a:fd:89:7b:94:ac:a0:f9:a6:83:19:22:
7a:70:46:a8:f9:05:57:aa:cb:33:47:af:89:8b:07:
04:c6:87:a7:6a:06:29:ab:44:a6:d5:8b:f5:8c:ef:
2a:e5:ae:e4:d2:30:7e:ca:3e:4a:59:89:53:2c:08:
b9:d8:69:6b:18:2e:b8:38:46:0e:79:23:db:66:21:
43:97:27:6a:ee:a7:bc:0b:bd:9b:b5:ca:ca:b4:c6:
75:2c:f1:4e:11:db:23:de:6e:e4:24:07:7a:22:10:
61:d7:21:68:47:40:5d:ae:f2:52:e7:c9:be:f7:1f:
c5:dd:04:f3:28:78:e5:35:f0:a2:eb:29:3c:75:d9:
04:50:e9:c3:15:9a:dc:f4:88:21:da:6d:86:3f:b6:
ec:b9:ed:b1:b2:91:33:7a:98:35:42:8a:54:c8:8e:
5b:72:60:14:58:4f:4b:e7:80:fc:7e:94:c2:2d:81:
91:4d:45:9a:6a:1b:e6:31:11:99:74:ce:a8:20:7a:
34:c8:75:89:40:df:79:49:93:ed:6d:da:b1:86:e4:
5e:b7:ba:4f:c0:85:0d:9c:38:fc:ab:62:28:68:16:
18:3b:ca:58:df:f0:ea:ae:6e:66:d0:fa:16:60:3f:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:D7:85:3F:F6:88:D6:98:E7:7A:07:50:0A:EB:6F:19:FF:35:60
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b9:35:df:35:6c:2f:86:fa:d9:0a:c7:0e:7d:30:a3:4d:4d:
f1:aa:4c:15:15:f6:ac:31:3a:02:90:e5:f8:07:fc:72:22:62:
4b:6b:6e:8f:48:47:4c:81:b6:75:6d:ab:d9:5d:ae:a9:c3:e1:
7a:36:78:29:15:d5:8e:f8:38:76:bd:5c:fc:e7:86:29:20:93:
8f:cf:37:cf:cc:d6:0b:43:e1:79:07:ea:a0:c9:e9:f3:0e:0c:
f6:38:63:4e:c2:e0:c5:91:a2:f5:1f:ec:7b:8d:4c:f8:0e:4e:
60:d1:34:53:dc:1a:e6:fb:ea:8a:1a:c2:c7:cd:3c:92:c6:9e:
56:c5:6f:8e:0e:6a:db:64:9d:0f:f8:c0:43:b3:9a:3a:09:b8:
75:da:7b:ae:8c:f3:79:19:55:cb:e9:f0:c3:4e:a3:8f:d0:61:
b9:5c:ee:d6:07:6a:f0:91:17:54:a1:0d:48:e7:05:bd:b2:8e:
5c:15:bc:4e:92:d0:aa:3a:09:75:b8:40:9f:3a:26:b1:87:43:
62:d0:1d:74:da:d8:81:50:b6:b8:d7:47:72:58:7d:79:4a:18:
49:7c:b8:f9:da:94:21:b0:29:d9:51:50:1e:85:28:f0:72:d5:
e9:63:40:d8:d4:c5:a5:b0:71:5a:c0:a8:18:49:1c:4e:9a:d2:
d9:5a:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:08:24 2025 by rpki-client