Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: 9t5QY/bleDpRLAY3eP81He57Qsnh3MxMF2k7HhGKMck=
Subject key identifier: 25:70:6C:5A:18:D8:13:5C:8D:E3:DB:15:9A:EF:8D:A8:52:28:17:6D
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019927E997023F1C393D8179CBF764985312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 1675
Signing time: Mon 08 Sep 2025 06:00:43 +0000
Manifest this update: Mon 08 Sep 2025 06:00:43 +0000
Manifest next update: Tue 09 Sep 2025 06:00:43 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: tc5Xgfar25ZtKZsAL8MKm7PY3r7Luipi1BBzRpoHO5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:97:02:3f:1c:39:3d:81:79:cb:f7:64:98:53:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Sep 8 06:00:43 2025 GMT
Not After : Sep 9 06:00:43 2025 GMT
Subject: CN=25706c5a18d8135c8de3db159aef8da85228176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:cb:55:37:12:1c:f8:6b:f8:0a:02:26:2b:
5b:74:a7:c2:9c:88:63:45:aa:e7:a9:b6:80:be:d1:
33:42:13:a4:fb:bf:27:78:5d:9c:85:2e:fd:9c:5b:
79:ab:2e:ed:f8:ff:eb:52:d8:f0:58:30:91:4f:39:
86:1b:d1:0c:26:b4:a0:ce:fb:66:0d:3a:e0:00:77:
75:aa:bc:ba:b4:d6:d5:bd:a3:90:02:d7:73:7f:e1:
fc:08:a3:70:47:36:65:06:79:f3:ed:da:87:ff:91:
4a:2d:0e:01:08:56:a7:1d:82:31:27:aa:8f:f4:e9:
7c:d3:29:ca:32:e1:2f:9c:18:5c:31:10:05:47:06:
35:12:02:d0:ad:14:dc:c1:71:d1:5a:4e:73:d4:51:
0e:94:97:1e:88:ea:06:0b:51:31:d3:e0:dc:45:43:
12:76:a1:38:c7:fe:ee:70:fa:74:7a:61:83:4d:d2:
c1:81:2c:22:39:4c:67:df:c9:5a:ca:29:9a:20:6c:
4b:39:6b:ae:58:28:f6:06:c2:28:51:c9:e3:6c:ce:
b0:16:b7:82:17:f1:f6:f7:ab:05:8d:fb:8a:c0:79:
4a:48:25:34:26:da:b1:3d:b6:98:00:91:cc:d4:1e:
e5:36:72:b8:0b:15:15:2b:8b:c4:ec:36:3a:8e:f0:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:6C:5A:18:D8:13:5C:8D:E3:DB:15:9A:EF:8D:A8:52:28:17:6D
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:50:3d:2a:16:3e:fd:ec:64:9b:45:2a:af:ab:b2:e1:32:e7:
d0:20:62:1e:e5:1c:6f:e1:94:dc:7e:6a:10:e9:97:2a:a5:f7:
21:24:e3:e2:52:72:c1:19:25:cc:54:95:7a:97:3e:9b:f3:dd:
c2:bb:8c:a6:e9:39:6d:59:1e:f4:64:15:bd:70:69:31:f4:1c:
2a:a1:f5:7d:7b:59:e7:c9:94:61:10:09:d8:22:86:0d:bf:39:
5a:40:53:c5:16:f9:51:9d:9c:a7:82:c6:8b:13:61:4d:39:52:
da:91:4f:bb:af:37:b3:af:d2:c9:74:99:84:1e:02:66:49:58:
13:4b:65:8f:1c:c2:36:6e:62:d5:87:ec:28:30:4d:a9:33:e1:
8b:79:ea:41:94:39:4e:cb:81:e3:c9:44:8f:af:22:05:06:26:
43:cd:72:53:9a:27:e7:0e:8d:b9:2c:5f:70:5a:85:8f:5d:9d:
83:c8:43:8a:1f:8b:53:58:30:66:4b:d4:0c:e0:55:cd:ea:05:
39:c0:36:bc:47:37:d6:43:c7:a0:31:98:1d:b1:fc:e9:12:e3:
a6:97:78:c8:1f:10:a3:83:8e:62:01:5b:75:b3:38:4d:9a:51:
34:25:56:ab:ff:b5:df:ca:3b:54:5b:4f:e6:9d:d7:1c:57:c7:
d5:af:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:01 2025 by rpki-client