
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: RPUvgyUFcQN04bYiUSiqbDar0nxZNj+k36KGWTe8C0A=
Subject key identifier: 54:E4:E6:C2:C0:62:FF:D0:8A:DD:F9:EC:3D:23:3B:5E:AC:9C:18:FB
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 01987B9BA758D0A84E731ABD54DBB89FA782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 15AF
Signing time: Tue 05 Aug 2025 19:00:55 +0000
Manifest this update: Tue 05 Aug 2025 19:00:55 +0000
Manifest next update: Wed 06 Aug 2025 19:00:55 +0000
Files and hashes: 1: hH6hMaSyonrhQA9h_vP1HTqln7M.roa (hash: 8QJDFdFinb7s3U9xb08fJBm7sr1In5Pe6TKE9Vk8YEA=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: cPwiAAhJKWuqRvp/l1q2XIaKWs+2g5iSfygeTABj3f4=)
3: xZRwQEVBqhCo3g2OnfWg1phYcj0.roa (hash: Up0oMZDKtVNJTjmYE39xr0VdPFglYOYmh22V1+hmiHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:a7:58:d0:a8:4e:73:1a:bd:54:db:b8:9f:a7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Aug 5 19:00:55 2025 GMT
Not After : Aug 6 19:00:55 2025 GMT
Subject: CN=54e4e6c2c062ffd08addf9ec3d233b5eac9c18fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:85:e2:24:64:b6:50:14:e0:19:4f:8b:10:
16:04:fc:ed:15:f7:b1:23:87:10:5d:cf:a5:4b:8b:
a2:fa:14:44:eb:f9:a0:8b:58:19:af:a0:3f:07:06:
90:a3:3f:4a:81:3e:51:e0:c5:48:9d:ac:28:25:6c:
a0:9d:88:3c:45:59:cc:72:38:ca:cb:d1:da:7f:db:
85:e8:20:92:24:06:e5:8c:81:c2:58:3a:d3:3b:09:
24:c9:a9:5a:7f:13:b7:33:09:dd:65:92:dc:a6:83:
fd:97:fe:32:65:8c:41:91:e1:2b:ae:98:da:3f:10:
71:c2:4b:f2:e9:e3:84:fb:92:91:5e:b6:77:1a:a5:
8b:9d:2f:b6:21:c4:d3:98:90:4b:cb:13:b0:df:bc:
6d:5b:21:da:52:64:b9:bd:cc:72:ca:f4:91:64:bd:
f0:7a:c3:88:88:ff:58:46:4d:ad:8a:d5:c6:77:c7:
7f:97:24:57:ad:9f:82:60:b4:4f:9d:d2:7c:7f:a6:
de:eb:b7:97:a0:96:8f:90:80:00:62:bf:2f:c0:30:
a4:7f:6c:06:4e:98:94:92:33:4d:c4:ca:3e:6f:c0:
fa:a2:e2:5f:9f:85:89:0c:71:26:fd:41:98:c3:5b:
11:fc:aa:05:5f:47:8e:38:e5:13:44:04:0a:79:fe:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E4:E6:C2:C0:62:FF:D0:8A:DD:F9:EC:3D:23:3B:5E:AC:9C:18:FB
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:bd:7f:9d:cd:10:d4:d9:5a:5f:d5:95:42:e3:c5:24:2a:0d:
01:a3:9b:b9:98:9b:10:21:44:55:d4:62:7a:ba:1f:d9:1e:fd:
77:af:1e:3c:11:ab:c6:63:ad:3c:f9:0f:f0:fb:f2:7f:c2:82:
09:ca:be:69:34:3f:34:c7:8d:6e:87:a3:19:e4:07:fd:fd:db:
2b:6a:6b:d6:78:d6:eb:95:d1:21:ad:02:04:d2:52:13:36:66:
99:fb:1a:8f:b7:b7:79:ce:59:57:86:c8:aa:00:ba:e7:71:f3:
ea:8f:d5:61:85:15:94:26:63:94:e3:cd:2c:54:7d:d8:25:b7:
b2:c7:cc:f8:38:b0:3f:7a:ed:95:6d:b1:91:9a:76:ff:32:8c:
8e:7d:01:b5:90:52:72:3d:6c:1b:23:ec:2e:e1:4a:11:5a:61:
33:7e:29:2d:f1:24:4b:e9:2a:4f:8a:6e:20:12:02:f2:42:1d:
6f:5d:eb:4c:12:f2:d4:fd:e8:1d:d0:b5:35:76:36:01:43:b3:
77:b4:6d:cc:15:f3:89:8c:eb:2d:33:9f:ed:18:be:4e:6c:6f:
a7:72:17:73:2e:86:a5:01:7d:8c:fd:32:ea:2f:b1:c4:d6:57:
70:3e:d6:57:de:92:b7:66:ed:a9:12:b1:a5:4e:62:d0:8d:9a:
ee:aa:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:44 2025 by rpki-client