Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: jXcQfb6fzz5sYKIFIm/f3MBU8uH3bgE+NgcqQs7x5rE=
Subject key identifier: BF:B7:46:76:CF:0B:3B:55:FC:41:53:54:75:35:B9:9D:52:9C:83:F3
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 01988B7D1F4B2F2B5565422395EC393D21CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: 0296
Signing time: Fri 08 Aug 2025 21:01:29 +0000
Manifest this update: Fri 08 Aug 2025 21:01:29 +0000
Manifest next update: Sat 09 Aug 2025 21:01:29 +0000
Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: /QDY55usEj6OYIv16JBuHC7mu0bhNWAlhwnhwgwvj0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:1f:4b:2f:2b:55:65:42:23:95:ec:39:3d:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Aug 8 21:01:29 2025 GMT
Not After : Aug 9 21:01:29 2025 GMT
Subject: CN=bfb74676cf0b3b55fc4153547535b99d529c83f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:eb:05:77:70:e0:43:f0:12:e3:76:a0:1c:
1e:c3:d4:a3:70:6f:c2:44:d5:b0:86:9f:e6:10:d2:
8b:92:fe:95:4f:c2:44:08:25:e0:e7:ca:b5:c5:18:
37:aa:c4:0b:de:18:26:fc:b3:da:76:ef:78:d3:1d:
1a:0e:f0:87:fe:67:7f:86:ef:07:3c:de:30:a2:9f:
40:4f:6e:75:90:01:45:45:26:80:8c:69:61:c2:c8:
ea:51:37:32:be:6d:62:27:f2:72:e8:86:af:c8:d7:
19:dc:0a:55:90:d3:fe:0d:13:4a:61:13:1e:14:e7:
10:56:d5:d6:32:07:04:fd:40:0f:c9:68:bc:8b:5d:
61:22:d7:a9:dc:1d:bd:1e:67:1e:74:9e:ac:9c:c6:
69:d4:42:20:6d:2e:83:f7:13:9c:dc:29:47:7d:b0:
e6:e5:49:7a:8f:80:7e:e2:38:d2:76:53:51:13:1b:
ce:d2:ec:8a:72:cb:80:6d:09:2f:44:06:12:f4:c7:
a7:36:c7:ff:a1:65:40:0b:20:e7:f7:8f:c7:59:95:
c6:3e:00:bc:b7:b1:5e:58:1a:ec:36:80:8b:93:02:
31:2e:7e:ea:39:e4:58:ab:c9:47:15:53:24:98:8f:
70:39:99:65:ad:75:03:47:57:d0:0d:f2:5f:bb:5a:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:46:76:CF:0B:3B:55:FC:41:53:54:75:35:B9:9D:52:9C:83:F3
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1f:d7:80:f3:ae:d2:6b:07:7c:b9:df:eb:02:9f:83:40:1f:
8b:a9:56:c8:c2:2a:d8:3f:87:b8:26:52:96:58:fb:fe:ad:94:
7c:eb:27:18:31:b0:bb:83:40:81:8d:ed:ed:9d:9a:bf:9b:4e:
85:a5:81:18:9a:2b:49:3b:d3:5a:f6:ae:e5:ec:c8:2b:54:2b:
e4:52:d9:94:2a:cd:3b:43:a6:28:a9:0d:08:93:5a:94:05:ab:
bc:bf:a5:b2:05:1c:70:71:0f:d4:e7:61:6a:4b:df:71:34:ad:
04:6e:6f:7a:0b:29:9b:62:3e:bc:0d:dd:eb:5e:3f:b3:1d:b4:
f3:8d:ac:87:42:73:88:18:c8:96:c1:29:eb:c6:1c:67:3e:15:
af:fd:08:3c:41:91:cf:70:34:d9:ca:64:16:88:95:e8:f0:f4:
94:0e:1c:ea:84:23:02:72:15:7a:14:a9:58:56:40:8a:3f:02:
1d:62:e0:88:a1:26:eb:30:84:50:62:5e:bb:15:4b:3e:6d:f1:
7b:a5:8e:66:c2:b8:a8:71:c3:b7:c3:47:77:aa:eb:de:9d:11:
4c:89:3c:a2:b8:4c:f8:b8:79:68:80:4c:24:ba:1f:56:c1:c5:
2c:77:c7:d4:de:4b:48:c4:92:8c:21:ae:9e:f0:e5:70:e5:79:
33:c6:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:02:34 2025 by rpki-client