Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: 9vjLMFwhp9nkq+OU9nuFni6r7Lhs991Luy5Sl30VPpc=
Subject key identifier: 41:10:70:95:8C:B0:8C:8D:57:D4:FA:A1:C5:7A:41:1F:1F:13:81:B1
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019922FA7CB9E4B1DA6D0F0A0ED72951FEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:05 +0000
Manifest this update: Sun 07 Sep 2025 07:01:05 +0000
Manifest next update: Mon 08 Sep 2025 07:01:05 +0000
Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: GOnHsiYZ3N8u81I0rvpqFXXfFBYMwhS+w7YSVPBkDAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:7c:b9:e4:b1:da:6d:0f:0a:0e:d7:29:51:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Sep 7 07:01:05 2025 GMT
Not After : Sep 8 07:01:05 2025 GMT
Subject: CN=411070958cb08c8d57d4faa1c57a411f1f1381b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:43:3e:24:1a:8e:f2:3d:64:e9:03:71:19:
da:e4:77:2c:25:77:46:28:ab:44:e4:39:1a:13:bf:
27:f1:ec:e7:61:7a:dd:aa:2c:96:48:c1:fa:e8:5a:
18:f3:10:0b:7c:0b:73:68:00:2d:28:e8:f4:b1:02:
52:73:84:ed:78:ad:66:2c:a3:6e:20:fd:96:ad:ce:
f6:73:27:03:f3:56:bb:20:e4:59:0c:9b:bb:a5:88:
1c:82:3c:cd:d2:31:af:8a:1c:88:5b:44:a4:97:ed:
3b:fe:f9:a7:28:3a:f4:b9:07:05:93:01:c6:a5:5e:
6f:fa:f0:d6:e2:30:25:a0:e6:85:7e:65:b5:42:2d:
44:49:c2:67:e1:1c:8a:98:3d:20:e9:da:24:06:02:
1d:91:50:2d:b7:f7:ce:63:83:72:58:d1:31:94:ba:
cd:a4:04:b2:e8:67:f4:32:eb:bc:12:86:58:54:d1:
b0:0d:7f:27:81:2b:e0:50:33:ac:85:4c:0c:78:9d:
18:31:b3:28:8c:ad:75:5d:05:ca:77:43:cd:0a:4f:
4f:2f:d3:5d:9d:bb:dd:bd:fe:3b:23:7f:03:15:ea:
00:85:55:d9:3b:c2:f7:47:65:c8:43:0e:81:dc:1c:
95:7f:48:54:1a:5d:ee:02:ef:37:6d:e6:5e:8f:19:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:10:70:95:8C:B0:8C:8D:57:D4:FA:A1:C5:7A:41:1F:1F:13:81:B1
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a3:b0:eb:40:c1:f5:44:8a:11:8a:9a:a3:f0:c9:73:36:00:
49:b6:63:6b:4d:f8:89:9d:5a:c1:df:57:80:b4:c3:fd:ea:08:
00:6b:bd:29:58:dd:b6:02:d6:60:c5:8a:59:cb:7f:84:3b:00:
75:d0:c3:90:43:1c:fd:78:c4:d9:e6:5b:92:bc:ef:98:5a:77:
be:41:cc:03:32:fc:73:af:3d:35:95:5d:1e:6a:14:84:51:1e:
c2:26:e0:11:45:bc:7b:7e:b7:92:74:27:c8:54:b4:9f:ab:c6:
0f:ef:20:e4:4b:08:f6:ca:74:da:16:f1:c2:2d:7a:20:8d:f5:
2e:dd:0c:7c:48:9f:fd:2f:c4:1f:4f:b1:66:bb:47:ca:da:4c:
93:f9:fb:00:e8:7b:8a:a9:e8:9b:ea:84:fc:b1:7e:ab:25:b7:
b0:c9:23:d2:20:cd:36:aa:13:35:90:e2:92:ad:58:60:be:ae:
59:36:8b:0a:23:f4:4d:26:ba:22:d8:c5:ae:a2:14:05:27:c2:
2d:b4:66:88:e3:da:d8:43:59:75:b4:1d:1c:7a:d5:45:e8:06:
13:08:b5:9b:94:d5:3c:2d:37:d3:73:95:a9:18:9d:ee:ea:27:
71:f3:3b:4f:27:2c:a7:ba:26:f3:8f:af:ee:c5:9b:3c:34:89:
1f:3f:f7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:54:15 2025 by rpki-client