Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: 51KpG81UWSEIexzu8tj57Trd7SbPcYUzad+7uJPAte4=
Subject key identifier: 52:0D:57:BE:EF:45:E6:CC:93:FD:AF:83:6F:F0:32:40:85:BA:1F:94
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 0199228C600C83D9DE7E5D8CD896CD725ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 0415
Signing time: Sun 07 Sep 2025 05:00:48 +0000
Manifest this update: Sun 07 Sep 2025 05:00:48 +0000
Manifest next update: Mon 08 Sep 2025 05:00:48 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: qMFqBETAPNVv4IucnVTlRRP9FlV63Tch0h7My4bPkw8=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:60:0c:83:d9:de:7e:5d:8c:d8:96:cd:72:5a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Sep 7 05:00:48 2025 GMT
Not After : Sep 8 05:00:48 2025 GMT
Subject: CN=520d57beef45e6cc93fdaf836ff0324085ba1f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:3a:91:42:31:ff:d2:45:7e:68:c5:9a:07:
d3:bf:4e:de:1a:46:2a:0b:1a:5d:7c:eb:35:b2:e9:
44:49:2c:1f:a8:9b:05:81:45:bb:41:94:ea:b1:69:
a3:2c:0d:e5:98:93:5a:b3:0c:17:d0:e3:e4:02:11:
81:e1:6d:31:2d:df:dd:38:9e:a4:df:1b:10:88:2a:
62:7e:c5:be:e8:b3:2f:e2:16:3c:9b:12:4a:11:27:
28:a8:1e:2a:a2:ec:f7:ff:5a:c0:e4:c1:f3:27:88:
43:9f:02:f9:26:3a:88:e2:2a:73:26:ab:61:49:e8:
8b:f8:84:10:68:17:1f:2d:5f:94:f1:65:52:f9:1f:
8e:72:75:49:ae:b0:07:8a:b0:cc:25:b4:b3:ff:1f:
b5:6a:25:02:eb:03:a7:78:11:5d:e7:76:b9:bd:84:
af:d8:83:30:b5:ed:50:76:42:ca:7d:07:50:82:48:
e5:b8:06:47:91:10:67:f1:ed:0b:37:13:29:b1:24:
5c:2e:bf:15:50:89:56:81:54:18:d7:7e:8b:6f:98:
5d:44:66:12:bc:e7:2c:0f:30:f2:00:35:60:49:f0:
1e:02:1a:35:e5:aa:30:8e:11:d1:38:1c:39:e9:f5:
10:e0:5d:2a:68:06:6c:ef:95:65:a0:22:d6:81:24:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0D:57:BE:EF:45:E6:CC:93:FD:AF:83:6F:F0:32:40:85:BA:1F:94
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7e:5f:cf:7e:9e:f8:a0:2a:bc:c3:77:31:3c:2c:99:ce:80:
93:e7:b8:5a:63:cb:37:49:16:98:c5:2e:44:54:4c:c6:7d:e9:
3c:ee:58:d8:1d:63:f2:21:65:fd:b4:74:6f:78:5b:f2:ad:10:
6b:fc:78:62:9d:9b:84:45:c5:f6:3f:ea:cc:79:92:e2:54:01:
2b:2c:61:e8:a0:0a:70:7d:76:a9:1e:ad:22:d6:a9:b7:da:3f:
ca:58:ef:5a:a5:67:09:34:49:55:5c:a4:0b:f6:0e:80:c1:08:
47:c6:38:31:38:fd:32:d8:30:0a:99:58:70:68:6f:69:1a:af:
95:f6:b5:d0:8c:6a:25:e8:cc:a7:d9:8e:1b:59:87:88:2e:c7:
c4:7e:14:77:f9:c1:7c:2d:16:dc:42:2a:f5:fb:7f:89:12:d4:
c1:82:87:9c:4c:b2:5e:1d:90:e1:72:8c:ae:b1:6c:fd:5f:7d:
b0:1f:11:57:84:5d:90:bf:2a:dc:2e:af:c2:2d:33:f1:31:3c:
aa:c0:bd:75:48:bb:77:0f:6c:57:28:c3:17:e2:b8:a8:78:10:
d0:fd:ac:65:09:27:72:1a:62:f9:f0:a5:03:aa:73:11:7c:25:
af:91:2e:40:8b:02:cb:4a:39:00:6f:2a:5c:d6:f6:55:9b:a2:
54:fe:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:50 2025 by rpki-client