Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: gfEOJ05nYIA3crXTJUTLVuB/eupE4LpSV8XPFR/mFSo=
Subject key identifier: 27:15:B3:B3:32:4B:13:CD:DC:43:C4:DE:DB:71:4F:0F:D9:D5:A1:8C
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 01987DC12BEAFD2B463F0755967CCDDBD9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 0A29
Signing time: Wed 06 Aug 2025 05:01:08 +0000
Manifest this update: Wed 06 Aug 2025 05:01:08 +0000
Manifest next update: Thu 07 Aug 2025 05:01:08 +0000
Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=)
2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: gkuebPzlcmm3cSk866OewlZrgHPy1nSZIWhzww11Pn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:2b:ea:fd:2b:46:3f:07:55:96:7c:cd:db:d9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Aug 6 05:01:08 2025 GMT
Not After : Aug 7 05:01:08 2025 GMT
Subject: CN=2715b3b3324b13cddc43c4dedb714f0fd9d5a18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:03:86:42:1b:94:0f:d3:7c:a0:12:fc:3a:
c3:52:2a:6b:fd:0c:21:3b:39:e9:68:d6:45:28:04:
db:43:44:48:10:00:33:01:27:99:67:ae:23:d2:20:
ee:e4:5c:43:52:aa:ce:92:23:ce:74:25:3e:aa:10:
35:6f:0d:a7:f3:01:6b:28:7c:ac:90:5e:79:c5:d1:
5f:eb:8b:33:20:3f:4b:c2:e7:85:65:00:4a:58:5c:
06:f8:6f:ea:83:ac:20:67:39:43:1a:78:8e:c7:12:
3f:34:bb:28:8d:c1:2d:97:57:1d:b9:1a:dd:12:57:
13:76:ce:1f:78:19:2f:dd:04:70:d0:d3:ef:43:b4:
0d:8e:01:1f:17:23:6c:ef:89:d8:d5:8d:fe:9a:38:
88:7b:6d:32:1f:0a:0a:5b:6e:cc:2f:9f:40:07:d7:
1e:bd:4d:9c:db:85:06:77:3f:62:32:d5:c7:18:52:
f1:ce:18:96:54:4e:da:f3:5d:50:8a:6e:84:87:8b:
a1:8e:11:62:53:90:42:46:22:d1:fd:55:db:19:f8:
ec:98:d5:31:5c:a2:b7:7d:06:5a:92:b3:45:e4:97:
61:85:80:59:9d:63:06:4a:4b:91:b9:d7:99:b6:86:
52:e0:1f:d1:65:3c:d9:29:38:3e:94:32:dc:d1:cb:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:15:B3:B3:32:4B:13:CD:DC:43:C4:DE:DB:71:4F:0F:D9:D5:A1:8C
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d0:6c:e8:65:c1:a4:21:7d:47:40:8f:1f:23:ea:5c:8a:35:
28:17:0f:34:71:12:14:5b:bb:26:e7:d6:de:d2:a0:c1:b6:ed:
00:2b:f6:94:cf:16:25:bb:e3:81:50:b5:88:7d:26:cd:11:bc:
b8:61:0c:9b:e0:85:fb:25:56:0a:3c:61:51:8b:03:53:79:8b:
99:52:0a:e1:6c:c2:c9:fe:74:04:33:39:bf:68:00:0f:16:10:
3f:4d:cc:01:87:e7:48:88:db:ee:15:79:3a:1c:a5:fd:7a:fd:
97:4b:a7:37:59:63:c0:b9:d0:90:1b:e0:d0:17:24:ac:92:39:
2c:cf:b6:e2:ba:49:d4:4c:1d:af:11:c5:79:69:2c:a8:79:a0:
fc:0b:03:0a:a6:52:46:d8:b5:e3:5a:bb:8a:76:7a:f6:34:31:
02:3e:65:72:71:45:c5:66:0d:ef:cc:41:25:2a:35:d8:e9:fd:
a9:f2:89:f6:05:fa:a6:ef:19:19:7f:7a:f7:ae:2a:1a:6f:36:
15:fc:e7:ce:67:67:d2:04:c3:67:57:58:06:8f:84:ab:9a:0c:
11:de:43:b8:f0:1b:fb:28:32:6b:ef:55:24:38:d9:13:37:bf:
e6:b9:79:c9:1e:ab:e0:d2:77:89:74:02:fc:1f:bc:e6:3e:09:
75:13:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:32 2025 by rpki-client