Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: 3ysOKY2H7bAIbc+U7zONCtYwOW3hjRTV+ygARbz0rxk=
Subject key identifier: 71:AA:E5:12:1F:62:64:87:BB:B6:80:4C:7D:A5:0C:A9:39:D5:41:E9
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 0198733DB55B1EF52DE98FD59848D5A7410F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 04:01:20 +0000
Manifest this update: Mon 04 Aug 2025 04:01:20 +0000
Manifest next update: Tue 05 Aug 2025 04:01:20 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: 93l/Vz1T55rcdFceQuoohN/dYjaN3VWYjN9ac0Tip4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:b5:5b:1e:f5:2d:e9:8f:d5:98:48:d5:a7:41:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Aug 4 04:01:20 2025 GMT
Not After : Aug 5 04:01:20 2025 GMT
Subject: CN=71aae5121f626487bbb6804c7da50ca939d541e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:64:3d:97:da:5c:1f:0e:18:d2:a1:d3:2c:
1c:fb:c1:22:c3:8d:ee:9b:31:ae:74:f4:47:d7:29:
ee:03:a1:2f:ee:c9:60:35:36:96:17:6c:31:b5:10:
67:c8:9b:19:f4:94:ac:a4:53:ae:35:9a:72:d0:54:
4c:00:6a:a9:9d:f3:6d:9f:1b:6f:46:d5:a7:51:7d:
08:c4:29:a1:f1:fe:c8:49:97:fe:4b:bb:1a:a5:d0:
7c:d4:a1:5e:87:b5:c0:58:e4:32:8e:c7:63:01:04:
b2:01:16:f1:58:56:cf:6b:4c:ac:53:9a:a3:4b:65:
b7:43:c5:22:24:43:4d:08:ed:ed:15:eb:b1:c1:a2:
8f:64:d4:a2:0a:28:37:78:da:44:06:34:d0:13:cc:
5f:ab:a1:17:68:64:01:61:e3:01:f1:9f:cb:d4:43:
3b:98:00:6e:52:80:69:46:c7:89:67:a2:53:47:fd:
4a:a4:fa:7b:c0:eb:b2:a9:d1:d4:2e:06:19:f8:38:
9d:35:ab:e7:ab:09:bb:77:ce:2e:08:a8:4f:a2:30:
3f:4c:0b:02:49:22:49:ed:94:91:5a:fa:13:eb:eb:
b1:de:35:6a:ad:da:64:b9:08:b2:5b:4a:92:80:3c:
01:d9:bc:ea:2e:f6:c1:05:a1:3a:87:32:29:fc:72:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AA:E5:12:1F:62:64:87:BB:B6:80:4C:7D:A5:0C:A9:39:D5:41:E9
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8a:03:d1:2c:9b:17:fc:35:6b:22:a0:d6:f2:21:d5:2f:de:
7b:f9:cc:4e:3f:38:cd:f9:de:0e:57:09:f5:62:42:e4:bd:99:
04:a6:db:28:85:79:70:19:de:e1:fc:81:77:42:41:0c:e6:5f:
7f:a4:16:1b:97:a5:e4:85:8b:a7:c2:75:20:7c:03:83:1d:1e:
99:55:b2:a0:59:8c:98:5b:7e:6d:f1:d0:e2:d0:23:01:db:f9:
d0:15:e1:e2:bb:83:db:bd:80:00:86:1f:cb:d6:35:0a:05:4d:
62:19:e7:bb:e9:48:bf:ff:7c:60:4f:89:7d:a5:b6:9c:6b:bd:
b0:f2:91:f4:1a:ce:bf:1e:40:f1:a9:dc:21:36:35:e8:02:5c:
7e:24:32:a2:a1:5e:d7:47:98:6c:5c:7d:3c:d5:ee:07:4e:96:
fd:43:2d:ed:c1:64:29:a9:33:df:e1:79:32:ab:5d:42:22:bd:
b9:48:70:59:49:d4:ca:27:d7:77:c8:55:d3:0f:3c:2a:1a:f0:
47:fe:09:67:29:59:be:e4:4f:ae:af:24:41:54:17:d8:cd:8f:
16:18:4e:60:bc:90:8f:bc:e3:81:97:bd:d8:da:af:9a:26:a1:
46:37:39:e8:7e:fd:54:c6:45:74:00:59:5a:2e:6c:65:ea:a3:
4f:3e:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:47 2025 by rpki-client