
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
File: m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json)
Hash identifier: uHbvk3Umd5aGHbTYI2ADGx1NbE5HfP4C0CNjtCjJ688=
Subject key identifier: 73:05:1C:4B:DE:6E:C3:68:48:5E:06:08:8E:84:90:97:65:5F:22:FF
Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Certificate serial: 01987306A5590A478F717B0D3CB1AD226899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
Manifest number: 01AF
Signing time: Mon 04 Aug 2025 03:01:12 +0000
Manifest this update: Mon 04 Aug 2025 03:01:12 +0000
Manifest next update: Tue 05 Aug 2025 03:01:12 +0000
Files and hashes: 1: GFs318vhhs43UeJYStMCcJcloVE.roa (hash: W8/O6hKTgxLPwLzEgTm/PKRsS6eSZm8+16PIQciHYr8=)
2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: +astH2OYKp4oJKo5Hc9JE7zVkuyOLY1TMq4oyXgMya8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a5:59:0a:47:8f:71:7b:0d:3c:b1:ad:22:68:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Validity
Not Before: Aug 4 03:01:12 2025 GMT
Not After : Aug 5 03:01:12 2025 GMT
Subject: CN=73051c4bde6ec368485e06088e849097655f22ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:02:13:1f:7f:fe:e9:85:23:29:7a:b8:ae:
9b:1d:53:15:cb:a2:7d:99:59:e8:cb:b8:24:b1:5a:
7e:cd:40:70:35:2c:47:8f:ff:e0:60:c7:be:6b:f4:
43:a8:78:e7:d5:6b:aa:d2:44:61:b1:20:fa:4a:21:
e0:5a:b4:bd:6f:ed:6e:b8:33:c0:54:fb:42:d0:e4:
d7:54:2c:0d:c1:b8:b1:ab:fd:ba:50:7d:eb:3a:4e:
76:88:33:15:06:45:ae:ea:a3:76:23:a1:8b:4c:10:
9d:c9:1f:77:75:8d:13:cd:16:ea:a7:b0:c3:ac:e0:
b6:77:e0:3c:63:72:f4:18:02:ac:a0:33:e7:a3:2f:
5f:00:31:0d:cb:c8:95:fb:fd:84:0b:44:fc:fe:11:
ee:cf:7e:5f:21:49:d7:a2:dd:4c:3c:8d:09:15:e5:
f4:9d:8d:bc:5b:d2:ac:b8:6d:9b:dd:74:47:91:57:
0d:b0:29:57:46:31:d1:62:ed:05:8b:01:2b:7f:f0:
09:67:45:5d:2c:3f:be:9c:11:ce:2b:cd:f9:81:10:
15:47:48:c4:4b:b8:4c:96:7c:64:88:d0:3f:a1:62:
19:8d:0b:bf:eb:da:56:da:c5:bb:69:01:95:e3:06:
a4:af:2a:a6:39:bd:08:10:98:c3:2f:81:d6:21:40:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:05:1C:4B:DE:6E:C3:68:48:5E:06:08:8E:84:90:97:65:5F:22:FF
X509v3 Authority Key Identifier:
keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:88:98:30:69:88:c4:d4:4c:0c:d1:ce:c5:80:e1:f5:9d:c5:
e6:39:1d:7b:ea:c4:be:c1:62:0b:93:1f:5e:6a:eb:ec:3b:d8:
18:f4:57:bd:3a:1f:6d:a6:d1:81:83:cb:de:5b:3d:72:c7:a2:
5e:d2:c7:01:f2:51:83:54:6e:25:36:21:be:2f:46:a3:ac:f2:
07:c8:81:72:fa:7d:13:62:a2:6d:1e:e1:80:6c:31:c9:55:1f:
c2:20:bf:08:29:0c:14:06:b4:cd:6a:e8:e8:d9:47:92:1c:f0:
fb:b4:f5:01:b5:10:1b:a2:3b:24:f4:d1:f9:31:dd:40:b2:8b:
95:a2:42:bd:03:72:e8:4f:b3:15:b1:1c:ea:53:92:bf:e6:26:
b9:a0:31:40:95:d7:56:4e:31:bb:11:5d:e2:ad:61:d8:af:5a:
2c:37:a0:6c:39:c1:55:74:77:d0:2f:49:b9:02:00:6b:71:fd:
04:cd:52:7f:b9:e3:9f:dd:9b:d1:2b:af:13:3e:94:9c:26:5d:
6c:18:67:f6:94:8d:ef:ab:99:ad:72:4e:ae:0b:29:a5:66:27:
e2:97:9a:79:57:a9:bc:39:ac:5e:74:d9:13:6f:c6:0d:13:49:
9f:64:fb:a8:52:11:7c:52:db:d8:97:0b:83:f7:99:34:a2:d4:
ef:d5:6d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:44 2025 by rpki-client