Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: n7VudkMrME+e7Je61KcC7vxsCVJgjSkN09GE4I+YZ78=
Subject key identifier: AA:E8:4D:D9:41:99:A5:06:78:1A:8E:FB:25:E6:C9:57:95:6C:36:F4
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 01988BEA5BE5538B018DB6003CACE4C4CB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0A8D
Signing time: Fri 08 Aug 2025 23:00:48 +0000
Manifest this update: Fri 08 Aug 2025 23:00:48 +0000
Manifest next update: Sat 09 Aug 2025 23:00:48 +0000
Files and hashes: 1: WEMws9n6rUTkd5LM4QecvMz8r_U.roa (hash: CZHPbmXmn0MVwHpVyYpkHxFw9h7//57NzIqqFrYWcd8=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: Y9fNR58/Qb7oWwF10XIzfUfBeRScoM3q4yCHWixGliw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:5b:e5:53:8b:01:8d:b6:00:3c:ac:e4:c4:cb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Aug 8 23:00:48 2025 GMT
Not After : Aug 9 23:00:48 2025 GMT
Subject: CN=aae84dd94199a506781a8efb25e6c957956c36f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:f0:93:e4:c4:bb:d7:f7:9a:59:43:60:83:
4e:8d:a8:4e:12:bd:ad:c1:89:fb:58:59:29:39:c1:
be:58:2f:09:6c:6e:6f:51:9e:03:5a:94:05:4f:5c:
a3:84:04:09:3e:e6:50:d5:d9:b8:a7:e7:1e:17:5e:
0a:d5:3e:5b:e6:36:0f:a9:09:b1:cc:e4:be:cb:88:
56:32:e0:e7:52:97:83:2c:fe:23:c1:67:d6:2c:83:
fe:a0:22:3d:0d:ad:f2:55:3b:46:96:05:6e:08:31:
b9:ae:f0:49:97:7c:19:0c:0e:6e:6a:26:f3:19:63:
1a:aa:48:ce:4d:e8:39:87:03:f9:19:c7:ea:f8:b9:
bc:b6:5e:80:87:d7:95:a8:c1:66:28:0e:e0:7c:35:
16:7b:7c:89:11:7e:ca:6b:fb:ab:03:a4:af:25:89:
61:dc:52:b6:ca:75:d9:5a:88:69:c5:87:a8:60:f4:
ba:e2:d4:68:f6:2f:2d:2a:d6:3f:91:68:66:50:dc:
02:d1:88:a5:5a:1f:fe:7a:e3:68:77:36:ac:76:16:
d1:11:5b:e0:23:7e:21:0f:af:f8:12:41:ae:1d:88:
34:fb:fb:5d:3c:fb:46:ae:e6:9c:e5:e4:84:fc:eb:
be:96:b7:e1:58:59:bc:9e:da:38:6f:18:46:35:ff:
1c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:4D:D9:41:99:A5:06:78:1A:8E:FB:25:E6:C9:57:95:6C:36:F4
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a7:37:32:3a:6e:7d:63:cc:f2:42:bf:9f:2b:1f:0a:13:84:
c8:00:37:b7:c9:d3:5d:de:93:bd:51:bf:bf:07:20:ef:ee:b6:
52:86:31:9c:a1:85:e1:36:97:4e:ad:ae:bd:f5:6d:17:dc:1e:
d0:3d:09:bc:8c:2f:04:d1:55:fd:ff:3c:08:68:21:8b:cd:1c:
56:9a:9c:29:4b:d9:9f:fc:0f:a0:99:df:68:2e:61:d3:fb:a8:
df:10:a9:69:65:05:70:63:21:77:75:9c:4f:9d:a0:ce:51:16:
19:04:06:17:14:89:3f:bb:46:38:9b:22:f9:d9:e0:e2:52:8b:
db:41:4e:21:55:e1:2a:ab:a4:4d:b3:fc:c1:90:bb:6f:e5:92:
27:bc:98:8c:94:a1:a1:55:ff:2d:f9:99:4e:33:f6:cd:9b:de:
36:a7:15:a4:be:d2:18:01:82:00:7a:d3:ba:97:ea:21:0e:f0:
0e:15:35:01:2d:e9:59:20:13:6e:c4:e2:9d:75:41:af:53:fa:
63:70:4e:b6:40:a4:0d:e9:9f:de:6e:87:4e:f3:68:40:58:d4:
c2:16:eb:a6:f3:85:7d:b8:4a:69:da:2a:c4:51:eb:bf:7e:e1:
ee:93:6b:de:2b:2a:9f:8b:91:c0:00:9c:de:90:2a:90:5d:9f:
2e:8e:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:08 2025 by rpki-client