Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier: cgN7RlmqoFjc870ektmq8P8pi0b0pa0giRRbScpwk90=
Subject key identifier: 14:0F:61:1E:36:4C:B7:0B:01:29:92:D4:DC:22:AA:2F:2F:D7:8E:A8
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial: 0198820C1A7A15596EF8A9D2826C32C72BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number: 129A
Signing time: Thu 07 Aug 2025 01:01:27 +0000
Manifest this update: Thu 07 Aug 2025 01:01:27 +0000
Manifest next update: Fri 08 Aug 2025 01:01:27 +0000
Files and hashes: 1: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: kkWYrN6jIqp7etL6gw1jRKFff9huGSjMNyvEOSBqosU=)
2: t1PClou-z7vfeF555qMb4l57MSc.roa (hash: 9X/H2c1jyHWtYn2BaqYb1fxAsJf2gSZ8sASmz7CE+Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:1a:7a:15:59:6e:f8:a9:d2:82:6c:32:c7:2b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Validity
Not Before: Aug 7 01:01:27 2025 GMT
Not After : Aug 8 01:01:27 2025 GMT
Subject: CN=140f611e364cb70b012992d4dc22aa2f2fd78ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:cd:e0:77:50:b4:ff:ca:c6:cc:8b:30:70:
5d:1c:f8:72:29:50:14:e1:2b:58:ad:9d:84:c4:89:
87:f3:51:4e:aa:af:06:1c:a7:03:0a:63:fe:ea:b9:
76:15:8a:e3:61:a4:19:a6:0a:57:84:09:df:9e:c2:
9b:28:f0:47:28:26:d3:19:94:a7:c4:87:7c:ba:82:
ba:81:b9:91:14:83:df:bb:97:68:76:bf:1c:42:f9:
7a:10:45:13:98:63:59:3c:50:fd:18:9e:71:3e:d4:
26:b2:6e:5d:5d:eb:c5:e7:eb:79:b5:de:e9:eb:b7:
36:60:33:7f:9e:bd:0b:85:b8:6f:33:a2:9c:67:43:
f1:3d:2e:c0:0c:e3:ff:4e:5c:ed:b1:73:3a:db:04:
b4:61:ac:65:be:6e:5e:2c:59:42:c1:a1:10:3e:38:
b0:10:fe:79:34:88:57:49:27:35:38:d5:41:79:aa:
0f:f7:0a:4c:bc:5e:78:d0:ec:2a:23:66:f0:00:59:
23:61:a3:f7:c1:41:65:e8:e6:ca:de:b1:44:47:6f:
19:cd:47:73:ec:f0:e2:b1:35:89:a8:e5:3b:5d:d5:
20:91:a8:e0:9b:a7:63:b0:26:02:36:be:7e:df:6a:
46:06:3e:fb:f3:5f:01:23:e4:04:15:31:dd:00:4b:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:61:1E:36:4C:B7:0B:01:29:92:D4:DC:22:AA:2F:2F:D7:8E:A8
X509v3 Authority Key Identifier:
keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c7:be:e1:42:12:af:01:35:f9:dd:c6:17:2c:65:d0:2c:e6:
ac:a9:0b:dc:1a:7a:f5:ac:b1:02:e3:0b:fd:fe:77:84:b5:a1:
ae:b2:66:2b:cc:f5:b2:c3:eb:04:62:67:e8:ee:f1:24:b8:10:
ab:a9:b0:1c:39:9c:9a:b0:91:1d:d8:1b:14:94:58:3e:79:5e:
4f:d2:e7:1f:72:a5:2f:9a:97:a6:fc:21:0d:a6:26:e2:26:3e:
0c:bf:2b:fb:4d:88:6b:e8:17:78:5c:bc:d0:c9:23:71:ab:07:
fa:0d:f5:cb:73:9e:cc:02:54:a2:5b:76:ba:34:89:8c:f6:1e:
66:f4:ca:3b:d5:df:3f:a8:2f:37:b5:aa:d7:29:60:ea:c1:fd:
d2:44:64:af:40:72:87:76:eb:20:70:20:70:70:1b:dd:e5:b5:
a0:2d:79:f9:5c:95:6f:b8:95:d9:16:65:83:46:53:1e:85:7a:
a9:60:0f:8a:59:7c:e6:49:74:e9:9e:15:ef:15:41:34:52:a4:
30:db:6c:db:61:7a:a6:82:51:3f:1c:0a:b3:30:5e:30:d9:64:
05:57:1e:9b:b8:ca:d5:1a:d1:26:66:fd:6e:a9:16:bd:db:9f:
a7:f3:9e:ed:56:2f:dc:60:f0:0d:42:3b:29:e7:3c:7e:d6:05:
a4:64:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:00 2025 by rpki-client