Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File: mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier: mvnojwaO/7c8u0cxXZ6rJRrlfFcwWG7PDVBlZaEHh5w=
Subject key identifier: 4F:AF:96:F4:97:9E:7F:3E:8F:D5:D0:DD:58:8B:6B:4D:AD:58:5C:FC
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer: /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial: 01987A51F881E4395B19F987104665271580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 13:00:49 +0000
Manifest this update: Tue 05 Aug 2025 13:00:49 +0000
Manifest next update: Wed 06 Aug 2025 13:00:49 +0000
Files and hashes: 1: 1-2hqQTW3ul_bD8JHqn2arc4SQt4.roa (hash: 7Jb+agyXKOWc8cNwhtr84wIX4Xn98h0+c+7K9P4oPMA=)
2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: tV0Kx9oQ7pm/9whSwqe8YhI0zIl9n4d6pQLeU3sSsEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:f8:81:e4:39:5b:19:f9:87:10:46:65:27:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Validity
Not Before: Aug 5 13:00:49 2025 GMT
Not After : Aug 6 13:00:49 2025 GMT
Subject: CN=4faf96f4979e7f3e8fd5d0dd588b6b4dad585cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:84:e4:ed:db:58:12:fa:9f:69:af:83:33:
5b:4f:ec:4b:c3:e5:dd:e9:9a:8c:3e:82:55:f9:9d:
3e:f2:55:44:cd:3d:46:9e:14:ef:1e:d3:d7:9f:ae:
9c:d4:9e:98:de:e3:ae:cd:56:07:df:79:06:c1:cd:
3d:9a:fe:b5:50:cb:b3:ad:2c:b4:3f:f9:35:72:d0:
74:b8:52:d0:ba:3a:7b:55:54:7b:8b:7b:15:d0:04:
d0:0e:cd:3f:6c:8b:da:90:ed:b6:2a:56:db:4d:44:
b8:2d:40:98:ce:9d:33:3d:20:59:a1:79:04:f1:20:
07:44:92:87:3b:1a:c3:98:87:6e:59:5e:ca:21:8f:
27:b8:fa:84:62:33:93:05:28:d2:c5:77:b5:f4:71:
16:60:d8:7b:60:1d:53:2b:a3:c8:90:a7:e7:5f:15:
11:e4:1b:8d:58:88:93:9b:81:c8:d6:52:0b:5f:95:
3e:17:58:77:99:7d:48:9b:20:0e:6b:e9:10:77:27:
ad:cb:0a:3a:79:d7:24:8a:a5:60:fe:45:64:2e:8f:
a5:dc:0d:5b:ca:52:f1:42:9b:e6:0c:46:d8:5b:3a:
99:81:de:30:89:88:1e:04:c5:9f:fe:00:0d:69:0c:
3e:2d:b0:ad:20:71:d8:8f:20:14:5b:06:1f:8d:8b:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:96:F4:97:9E:7F:3E:8F:D5:D0:DD:58:8B:6B:4D:AD:58:5C:FC
X509v3 Authority Key Identifier:
keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:15:6f:a2:7e:76:00:81:2f:f6:a8:48:38:14:56:43:23:cb:
ff:96:5c:97:73:61:72:db:a9:f7:1c:3d:80:dc:47:fa:a4:3a:
ef:47:5d:94:d9:88:99:94:b8:d2:d8:a3:5e:38:50:01:9a:f3:
3f:b1:0a:43:65:89:aa:ca:95:33:c4:20:5a:85:27:7e:89:aa:
48:48:43:f8:52:da:bb:c2:44:3f:9c:da:b8:7e:be:df:5c:e8:
88:ab:3b:2a:cb:64:c3:42:5a:20:20:82:9c:66:e5:e2:39:e5:
86:b5:05:45:df:b8:7d:0a:ae:2c:82:a5:be:d7:e2:5b:d8:50:
aa:58:fc:3b:cb:9e:24:2e:ac:4c:2f:fb:ed:91:fe:e5:56:ec:
98:aa:03:e9:1b:da:4c:b1:40:e9:c1:eb:cb:09:2b:07:83:f3:
e5:29:f1:38:27:42:b2:37:26:f4:88:06:f9:78:4c:08:37:4b:
b2:c1:85:d2:fd:13:88:47:82:5c:6e:0c:71:a7:69:a3:37:83:
b2:d5:dc:ea:d4:af:f3:4e:96:f5:45:03:97:e8:97:be:46:b4:
f2:c5:ff:19:2c:33:e8:62:0c:c5:0c:9a:24:12:9f:80:f0:99:
55:ad:4f:0e:72:73:23:fb:49:77:a3:e8:87:1d:0e:22:3a:a0:
97:da:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:19 2025 by rpki-client