Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier: UvjZdiQpQRIc7KRFXztMcEfoJbWwebPhtJrDk36qygM=
Subject key identifier: 51:22:9C:78:D7:10:1B:5B:B7:8E:DB:CB:CB:76:43:AA:1D:9F:FF:52
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 01993191761D230B9F2386A2D705E5186F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number: 08BC
Signing time: Wed 10 Sep 2025 03:00:40 +0000
Manifest this update: Wed 10 Sep 2025 03:00:40 +0000
Manifest next update: Thu 11 Sep 2025 03:00:40 +0000
Files and hashes: 1: 00e-JENKJtNxBi-As1sYUq5EX18.roa (hash: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=)
2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: j5vHPqpHTi/Fml+a+CraIVeZ4/OwIaX4GDff9kaKOrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:76:1d:23:0b:9f:23:86:a2:d7:05:e5:18:6f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Sep 10 03:00:40 2025 GMT
Not After : Sep 11 03:00:40 2025 GMT
Subject: CN=51229c78d7101b5bb78edbcbcb7643aa1d9fff52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:8a:5d:57:c0:98:48:c9:2c:fd:0d:d3:0d:
10:f6:73:ff:49:eb:e9:60:65:88:7a:c4:c0:62:9b:
af:22:30:8c:7f:07:28:98:d4:b1:3c:b3:7a:41:39:
f2:e5:c6:c1:99:d3:c3:b0:8f:e2:d7:1b:4d:b9:2b:
8b:04:6e:7e:01:25:79:fe:69:75:17:32:e9:03:c8:
09:de:0e:4f:9b:30:7f:e1:5c:78:7f:d4:57:cf:05:
72:e0:9b:af:6c:20:70:5b:9e:f4:6d:a7:0d:b9:3a:
5e:30:85:47:fa:23:5a:99:54:d8:b4:89:3e:3f:51:
6c:bd:2d:88:e8:66:20:b8:6a:d7:c1:08:60:46:06:
de:32:3d:c2:7e:25:05:de:19:96:b4:53:f8:6e:b8:
da:bc:2d:3e:cb:dc:9c:6f:6c:7c:40:d2:e5:bb:ee:
1a:fc:7d:0e:65:2c:08:0b:b3:f8:00:95:5e:bd:23:
6c:fd:77:39:ba:1b:87:13:a9:83:51:47:a3:9f:45:
37:3b:b0:23:d4:16:ea:e4:6f:b9:d8:4b:10:15:67:
88:1e:a8:14:59:2a:fb:bd:9c:64:87:06:0a:ac:47:
c9:12:83:5e:2d:fc:d2:95:6f:2a:b6:9e:99:6e:1e:
34:df:6b:1c:d1:9b:b1:a5:a7:65:77:d9:c1:43:de:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:9C:78:D7:10:1B:5B:B7:8E:DB:CB:CB:76:43:AA:1D:9F:FF:52
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:57:64:95:32:ab:6f:69:07:0b:8e:81:32:af:5e:91:4f:22:
37:a9:ec:09:fd:47:81:85:17:57:d3:0b:35:51:f0:a3:f5:a6:
bc:c6:e5:68:49:ef:90:6a:e7:87:8e:b6:c5:66:4d:47:3e:f6:
ad:04:02:76:bb:e5:c3:48:d4:54:5e:3e:89:ec:5f:b4:b7:30:
f6:37:64:eb:b7:59:c7:ca:bd:30:92:d1:17:df:ab:19:8e:40:
e7:62:6c:3a:d4:05:40:e5:4d:f0:fc:3a:3a:3c:ae:9b:25:af:
75:95:eb:cc:b2:a8:33:08:ee:05:92:56:47:79:5e:46:36:35:
b2:32:f8:f5:68:3f:f8:38:27:83:9f:07:77:97:93:51:ed:ba:
9d:bc:f6:99:07:bd:ce:08:7a:d8:5f:a6:80:34:2a:27:ed:b3:
4c:d8:4c:8d:9c:14:9c:0f:cf:ea:48:34:b1:75:6e:7c:3c:a2:
48:e8:6f:45:f5:12:d7:94:4a:dc:09:c4:04:29:00:af:8b:17:
2c:81:c5:9d:cd:b8:f0:58:86:c8:53:08:82:df:b5:d6:67:6c:
4d:be:35:a8:90:16:3d:8e:07:32:9c:69:62:0d:1e:04:c2:a1:
da:b8:49:9d:8c:f3:9c:c3:a0:3a:d5:c2:92:27:f8:32:32:f1:
f1:00:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:57:10 2025 by rpki-client