Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: Ikv8zlpohABTrnKQErPsXW+Sn4NE0u1V5xPS4y7bIL0=
Subject key identifier: A5:5E:F6:10:F3:41:5E:77:57:64:ED:53:DD:6E:30:E4:0B:18:94:31
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 01988EECB23A4FA10FE42DAE0DAEA5E25FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 11D1
Signing time: Sat 09 Aug 2025 13:02:13 +0000
Manifest this update: Sat 09 Aug 2025 13:02:13 +0000
Manifest next update: Sun 10 Aug 2025 13:02:13 +0000
Files and hashes: 1: ZGrcpUqsEOsf7o6fu8OWpNq4gNY.roa (hash: wpQNPwvek3Rp2M6cV1DD/Iu66bw6RcokC6IaW3yHq/w=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: tDBjI0DkYlsbP21Jkz+u23Fr6z6OoE2K+ca0VjwxZfE=)
3: gdtLNhs1JQCPzai-VNs9JYZHoWI.roa (hash: ZjSEtnU3HKrgHwmUc/jOdFVfQULcq2id5Yk1K05ZWWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:b2:3a:4f:a1:0f:e4:2d:ae:0d:ae:a5:e2:5f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Aug 9 13:02:13 2025 GMT
Not After : Aug 10 13:02:13 2025 GMT
Subject: CN=a55ef610f3415e775764ed53dd6e30e40b189431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7f:78:24:d3:d7:29:02:0e:7a:f3:b4:c9:c4:
b3:c0:44:0e:ef:f9:31:19:99:26:e7:2e:c8:7c:6e:
17:a9:3e:b2:61:16:97:a5:8b:97:96:2c:79:b4:3e:
ee:07:b7:c4:f4:fa:35:7b:95:9b:04:39:d0:08:0a:
bc:17:32:67:b8:09:2c:8c:e4:61:78:ca:9a:a9:a8:
f9:f9:4f:f1:f6:ee:07:d6:cb:5f:04:f4:7b:1b:21:
a6:49:d6:8d:11:48:6a:11:e3:17:a4:82:98:fa:d3:
d8:8a:72:b8:0e:ed:35:91:42:17:ed:26:c2:56:d5:
eb:ed:90:bf:c1:31:ba:77:41:ac:1a:fa:76:70:2f:
e7:a6:a6:c9:d8:7f:bf:7a:3b:78:9d:bd:af:f4:a6:
e1:87:ff:cf:15:16:b6:cf:d9:3a:7d:ec:2d:8e:7f:
e6:65:47:a0:a8:4a:93:0e:d5:d1:05:0b:2f:96:41:
6b:13:51:23:f8:dd:4d:a4:e2:73:0f:16:46:70:3b:
16:31:3e:f4:55:1d:40:ff:e9:93:aa:80:1f:e0:e8:
e8:7b:39:76:9d:18:d5:99:01:14:bd:e2:6c:8b:20:
d5:b9:b2:3b:cd:62:87:37:a8:ed:91:1f:52:17:c6:
65:6f:4d:bd:17:5c:4f:cc:d9:dc:cd:ec:87:c2:0c:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:F6:10:F3:41:5E:77:57:64:ED:53:DD:6E:30:E4:0B:18:94:31
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cd:bf:80:e9:6a:54:0d:04:5a:7a:69:58:5f:39:6e:de:d3:
35:9b:fd:c5:69:71:b4:ae:5e:43:36:76:60:2c:2d:37:07:68:
5c:44:ae:9f:ed:ca:9c:f3:89:4d:21:7a:85:2a:47:5f:b2:c3:
6e:14:6d:b7:3d:1c:4f:17:72:7d:9d:42:aa:89:0d:b4:46:71:
95:fc:77:b7:e4:fc:30:3f:aa:20:fc:96:e7:5f:4f:aa:ad:2b:
53:fb:ad:10:1c:d6:37:37:6a:a0:cf:d9:98:81:2c:80:ad:22:
9a:12:99:a4:d3:27:26:ec:2e:f4:c3:97:cc:0a:52:a3:c2:2e:
08:d9:9e:1c:f6:aa:7b:69:f5:ca:d9:a4:d7:41:7b:e4:1f:d2:
40:c8:a0:bc:65:6e:fb:7c:69:fb:bb:6d:94:f7:10:db:59:bd:
7c:d5:4a:6c:7f:08:1f:2a:fc:51:2e:68:89:85:6e:6b:5b:0c:
30:d2:46:5c:1b:66:20:56:c1:a2:27:4e:3a:d7:c4:b9:60:b2:
bb:58:84:91:4a:6b:50:8b:9d:b0:ff:94:9e:b4:92:5f:e8:3c:
f6:7f:64:1f:a3:4e:ed:1f:10:0b:29:5c:f6:2b:8f:ff:f7:5b:
bc:b8:b7:21:cd:00:cd:06:1f:ee:a6:93:90:05:d0:da:c9:bd:
00:4e:5a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:35 2025 by rpki-client