Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: KcJoRVA1IgUmhWkgjK9hfVcG8c95NVz5tFeo2y0zO28=
Subject key identifier: C0:ED:80:18:09:5E:AD:8B:66:6E:2E:76:15:B1:B1:3C:DE:F3:DB:7B
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019941051EF100A5F6A799D72F4F466D6DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 136D
Signing time: Sat 13 Sep 2025 03:01:18 +0000
Manifest this update: Sat 13 Sep 2025 03:01:18 +0000
Manifest next update: Sun 14 Sep 2025 03:01:18 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: OvfSzHcXzGmvQCN7sjobifKEKSSs7h6s2RJnEjfE/8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:41:05:1e:f1:00:a5:f6:a7:99:d7:2f:4f:46:6d:6d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Sep 13 03:01:18 2025 GMT
Not After : Sep 14 03:01:18 2025 GMT
Subject: CN=c0ed8018095ead8b666e2e7615b1b13cdef3db7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:b4:30:50:f4:9d:d1:db:3f:93:a8:9f:8f:
9f:8a:d6:df:e2:14:ce:84:69:ea:b7:9d:25:c1:f5:
f1:54:ca:b3:b2:b4:07:2c:f3:19:af:01:99:19:54:
34:3d:27:8e:ef:b5:4d:12:10:0d:23:1a:aa:47:57:
ef:49:1f:08:2f:a4:d9:d7:0d:6c:42:13:16:d3:f0:
b1:42:20:c7:a5:94:6a:28:bf:07:29:d7:c6:32:0b:
64:29:38:1c:91:68:02:1c:15:7a:d4:ce:fb:b2:2c:
76:d0:d1:a0:5d:d1:6f:ba:5c:d0:59:4c:81:ab:06:
de:90:a1:f3:ae:95:43:85:e7:a8:e0:5e:9c:32:67:
d8:b1:7d:26:0e:47:41:bb:d1:af:c8:0a:6f:d5:be:
b3:88:4a:c2:6a:ae:92:36:23:a5:95:05:49:ce:15:
03:2a:a3:47:47:9d:ad:8b:41:a9:be:1c:18:92:6b:
b5:9d:e3:68:3a:b3:2c:48:4b:31:37:3b:f2:92:09:
5e:29:02:26:36:18:40:8e:c9:41:9c:a4:67:86:21:
85:44:2b:1d:3a:d1:e1:69:bc:55:83:de:28:a3:98:
67:3f:9f:d9:dc:26:91:23:6e:50:11:b2:80:1c:3a:
53:88:4d:7f:85:ae:a1:7e:1c:0d:dd:30:90:1b:9e:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:80:18:09:5E:AD:8B:66:6E:2E:76:15:B1:B1:3C:DE:F3:DB:7B
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:12:86:d6:89:c5:93:2d:93:5f:9e:6b:34:f8:c0:c8:cd:18:
16:5c:01:55:2e:62:06:f7:03:26:fd:36:11:5e:8b:04:28:19:
d1:84:5e:2f:b0:bf:bb:b0:b9:ab:00:aa:7e:12:4c:e6:3a:f9:
68:65:1c:ad:b7:24:d2:82:1c:0e:dc:52:9b:45:0b:bb:ea:c9:
de:42:0f:06:a3:36:2a:eb:fe:c6:8d:e8:8e:5b:0f:58:fb:5a:
16:70:85:83:2b:7c:6e:04:3c:e9:0d:66:26:5f:82:4d:33:d6:
89:2a:cc:24:45:fb:88:03:0e:cb:ee:10:77:7e:7a:35:41:29:
b6:77:c6:76:ee:e0:7b:12:c2:9a:e8:fb:5b:71:81:64:3b:11:
70:12:f6:13:60:23:75:36:a2:7c:0b:55:d5:51:f0:6a:05:34:
ac:22:66:c7:b2:34:8b:5b:97:a9:d2:fa:4d:51:94:86:3a:e2:
8f:d8:ca:34:4e:35:ba:74:ca:f0:ed:2e:d9:b1:52:b8:6c:fc:
80:02:b4:f9:73:90:4e:c2:4a:4a:1f:66:c2:e1:54:53:3f:c2:
47:5d:d2:5a:7b:37:ff:08:3a:03:61:c4:6b:db:b2:31:bd:23:
c1:f0:4e:4a:eb:08:91:2a:f9:0c:4c:5e:49:dc:d2:19:28:43:
66:e1:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 06:38:26 2025 by rpki-client