Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: LvXDCtJm7iBFja9rTGZqjCbr3jrDVJsPp8Xy7tEDlKQ=
Subject key identifier: 2C:9B:3F:84:44:F0:10:43:4A:66:90:B1:FA:EC:71:50:D2:59:26:F1
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 0199239FDF08D2D6D1B52E80FCF0A9F8990F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 1012
Signing time: Sun 07 Sep 2025 10:01:43 +0000
Manifest this update: Sun 07 Sep 2025 10:01:43 +0000
Manifest next update: Mon 08 Sep 2025 10:01:43 +0000
Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: m2dVVbvHD/FauYY+Qf7Q5gAuYBGZI/BVTYFmUTklFeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:df:08:d2:d6:d1:b5:2e:80:fc:f0:a9:f8:99:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Sep 7 10:01:43 2025 GMT
Not After : Sep 8 10:01:43 2025 GMT
Subject: CN=2c9b3f8444f010434a6690b1faec7150d25926f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:b5:17:c8:8e:f0:8d:f9:30:aa:53:24:7d:
07:80:ab:88:a4:fd:38:4e:81:ac:84:6a:33:0f:71:
79:c9:de:33:d4:2e:58:3f:16:e9:41:53:1f:92:27:
46:47:40:1b:bb:79:28:54:b5:b6:eb:b6:d8:b8:5e:
27:41:64:a7:dd:cf:26:98:c0:58:af:b5:0e:98:a0:
ba:49:00:de:1b:c3:ae:d8:40:71:00:da:97:fa:19:
9f:50:6f:35:8d:dc:5c:26:40:6f:ab:9d:4b:85:a7:
30:3a:94:48:43:36:27:b5:a5:3d:30:b1:f3:c6:a4:
53:05:fa:00:93:e4:a4:9a:c6:9b:cb:3c:a8:e4:64:
a6:7e:b6:ab:05:98:a2:16:0e:16:05:b4:4b:a5:df:
3d:8b:e1:31:44:ef:1b:70:22:f5:98:55:5d:82:84:
6b:26:be:61:33:58:cb:15:9c:a6:0d:ed:03:69:7d:
b2:96:f4:d7:00:3a:31:35:c1:a9:ce:4d:c4:38:70:
8a:46:e1:5b:f9:c5:9f:83:ff:5e:b0:10:f5:94:c9:
07:92:f9:3a:27:d0:2c:fc:01:d7:73:8a:86:3e:8a:
cb:a2:ef:40:82:88:c4:04:db:26:2c:2f:24:7b:16:
84:67:14:ab:4b:20:b3:db:e7:30:95:ad:8a:cb:81:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9B:3F:84:44:F0:10:43:4A:66:90:B1:FA:EC:71:50:D2:59:26:F1
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:98:92:c6:ae:17:bf:66:17:bf:22:75:8b:ed:6c:3c:39:ac:
be:50:8e:bc:86:7a:8f:49:72:73:b1:92:a5:b7:40:e9:43:a2:
d1:8d:22:a2:53:62:87:95:32:53:a3:0f:06:7d:c8:67:63:e1:
cb:0c:2c:1a:d1:b9:db:b5:97:f3:14:5c:d4:09:ad:8a:c5:e8:
cf:eb:0f:ad:d3:91:14:16:f5:81:11:fa:58:5e:91:a4:81:c4:
f4:96:30:ec:95:11:38:c5:6b:02:dc:17:00:a4:af:fd:f8:cd:
9a:bd:a7:29:98:ed:22:97:ae:0d:a9:d7:f5:14:ff:91:2f:69:
89:5e:3f:4c:82:1f:e2:68:7a:b9:99:a1:4b:11:8c:aa:c0:4e:
f2:6b:a1:7c:24:bc:2a:fa:65:4c:a4:aa:1f:af:60:49:24:d2:
42:fc:67:8c:8c:b8:3c:f6:a1:fa:2b:60:23:af:a0:c6:96:c6:
94:f5:de:f6:7d:af:b8:64:5c:c9:10:b1:ab:de:e2:e5:c8:51:
59:54:75:78:db:2c:00:ca:39:0c:2b:3a:7e:88:2d:a1:58:5c:
20:56:5e:13:e6:3d:c7:6a:6d:b3:4f:ba:7f:f0:cc:e6:2b:48:
9b:06:9c:82:e3:37:79:0c:c0:56:e4:4e:eb:83:f5:be:6c:16:
48:6d:9b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:43 2025 by rpki-client