Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: wUMR2zQkfYdSNEBRKkYR0n3KO5OMrH5kNlgHUjT0kYc=
Subject key identifier: B0:81:10:F2:7A:7B:12:A2:96:61:3C:0F:65:02:B6:96:3A:EA:AE:36
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 019873067B8A3C29B019D7FC592DB55ACE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 12A9
Signing time: Mon 04 Aug 2025 03:01:01 +0000
Manifest this update: Mon 04 Aug 2025 03:01:01 +0000
Manifest next update: Tue 05 Aug 2025 03:01:01 +0000
Files and hashes: 1: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: 6hEyK1WVrNu6aexvqrWRydeBc1rnE0n8Y8eofelCEjE=)
2: oGPLcgnT5_jMQFeXtQh3bXaXriM.roa (hash: QUvCaj08Q2TK+WnTDqsu5pyPq9XzMOcObz9WAotvcYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:7b:8a:3c:29:b0:19:d7:fc:59:2d:b5:5a:ce:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Aug 4 03:01:01 2025 GMT
Not After : Aug 5 03:01:01 2025 GMT
Subject: CN=b08110f27a7b12a296613c0f6502b6963aeaae36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:1e:c4:3a:6a:3b:54:61:9c:3e:c7:a5:d9:
38:9f:95:5f:9a:1f:52:04:e6:c7:21:4c:62:eb:5f:
43:76:67:8b:c3:46:a4:33:a3:b9:97:c8:b1:46:35:
56:5d:48:73:cf:8a:15:97:8a:e9:61:a1:1b:89:96:
42:8c:69:db:4b:73:cb:15:84:b6:26:ac:9d:0b:ef:
6b:da:7e:d5:96:3c:e9:85:fc:bc:aa:4a:10:21:47:
a9:6c:9d:69:d5:9d:e4:97:25:0a:09:37:38:a6:fd:
4b:1d:a7:7d:a8:4b:ca:72:fa:63:8a:4a:ae:99:be:
a8:2d:57:fd:4d:47:95:e0:87:2c:dc:47:50:63:35:
14:90:70:09:b7:25:c9:e7:20:08:39:00:60:5d:17:
87:ca:fc:e1:5e:b6:43:29:91:5d:b6:d2:af:9b:ea:
5f:8d:b8:3c:e1:85:67:67:7c:5f:ea:99:2e:35:6b:
dc:88:c4:cd:d3:6e:e2:2c:30:a4:8d:d4:be:5c:93:
0d:9d:6d:31:bd:d3:a3:d0:21:61:c9:78:a6:4c:61:
67:50:61:8c:b4:0b:57:ec:f1:f4:09:f8:60:1c:57:
5f:41:40:30:19:5c:b0:21:49:aa:90:b3:26:f9:94:
eb:68:32:90:f3:4b:93:29:33:bb:25:02:1d:a4:ed:
70:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:81:10:F2:7A:7B:12:A2:96:61:3C:0F:65:02:B6:96:3A:EA:AE:36
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5a:4b:82:a7:63:25:7e:96:4c:48:74:3c:4a:38:d0:fe:36:
21:57:46:98:2e:4b:ed:f8:fc:6c:65:7d:26:27:62:98:89:94:
06:2f:3d:75:3d:7b:57:82:84:1c:65:34:15:59:f0:d7:fd:25:
b7:76:72:6e:0d:b9:b0:ff:b7:94:d3:8e:44:d9:9a:71:0c:5e:
59:8f:ad:12:21:ba:b2:f8:e4:4b:f5:c4:cb:0b:d1:6f:c5:3c:
ed:3e:64:bb:df:bb:f1:7c:29:87:6a:a2:77:14:31:a3:dc:ba:
7b:b6:ff:90:37:9b:bf:c7:9c:7f:35:a7:f6:ae:b9:31:7f:62:
ad:9c:e0:11:e4:3a:4b:9d:0b:17:5b:7b:02:07:77:ff:f1:79:
65:34:07:24:3c:1d:62:45:9c:cd:f0:c9:69:a8:82:16:cd:93:
45:08:40:cf:ee:c7:f0:79:d6:9f:34:2f:16:49:e6:a6:37:d3:
ee:02:e7:ea:0b:9a:7f:97:bd:9f:e3:fa:df:dc:61:eb:99:ad:
99:41:c7:57:f6:80:73:6a:5b:66:ad:be:54:a1:c5:09:af:d8:
06:30:ee:12:78:ae:0f:b8:ba:97:75:10:8f:5e:bd:2a:5c:fe:
b5:34:d0:d3:4f:a4:b1:26:b4:71:89:70:72:f3:e6:15:55:76:
ec:e0:10:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:52 2025 by rpki-client