Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: KF0IpMfl29FASnyKYXKP0xzZBuZItB0E1pURcPTqyHs=
Subject key identifier: 93:13:9E:E8:BE:26:65:04:0D:11:1F:7B:3E:7A:53:DD:6E:E6:3F:87
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 01987298AFFAACAACEB8FB491691D8B7DE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 1234
Signing time: Mon 04 Aug 2025 01:01:05 +0000
Manifest this update: Mon 04 Aug 2025 01:01:05 +0000
Manifest next update: Tue 05 Aug 2025 01:01:05 +0000
Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: TQXrQ7ufNGP/b8IJZYX6wat0uB5sWyKZ3sDaPrspCIY=)
2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:af:fa:ac:aa:ce:b8:fb:49:16:91:d8:b7:de:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Aug 4 01:01:05 2025 GMT
Not After : Aug 5 01:01:05 2025 GMT
Subject: CN=93139ee8be2665040d111f7b3e7a53dd6ee63f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:a7:99:54:11:90:1f:58:bc:92:1f:ee:fd:
55:ae:bd:99:74:db:01:03:c6:5a:c1:97:d1:d9:92:
0c:6e:0c:e5:28:3a:8c:69:2b:70:bc:1d:89:20:69:
f0:dc:bf:88:00:4a:e4:1a:04:ac:a4:71:7e:ea:9b:
ec:5a:1e:c1:68:75:a9:9a:93:07:ef:98:9c:8d:4f:
f4:bf:7e:f7:a1:d9:0c:0f:2a:2a:01:b0:ce:84:57:
5e:7a:4a:8b:6a:90:36:ad:83:91:a8:40:ae:61:f2:
d4:61:a6:88:19:ef:cf:e9:b8:47:2f:85:20:18:02:
4a:f8:b6:e4:a7:d6:80:ae:47:c5:c9:1d:4d:50:79:
59:1c:66:82:93:b5:f4:a7:1f:c0:61:d4:7c:71:bc:
d3:9e:b7:0f:a5:83:52:0d:db:a0:da:eb:9f:bd:04:
47:e4:7f:b4:51:73:9d:91:eb:34:62:11:d8:d0:39:
07:39:17:23:df:c9:e1:9b:24:52:0e:69:5d:a6:a3:
5c:ab:d8:9c:cc:48:af:7f:85:7e:ff:ab:f0:49:14:
4b:a8:de:fb:ce:77:58:15:cc:47:a1:8f:9b:fa:6d:
fd:3c:81:9b:57:fc:10:38:e4:36:cf:d7:9d:29:16:
30:8b:4e:e0:cb:c7:d0:01:56:b9:fd:44:70:a0:e0:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:13:9E:E8:BE:26:65:04:0D:11:1F:7B:3E:7A:53:DD:6E:E6:3F:87
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:05:40:c4:ef:7e:b2:32:01:1a:7a:82:f7:f6:45:59:23:b7:
2b:77:34:25:e9:20:74:2b:46:ac:82:b5:1b:19:e5:9a:fa:82:
96:67:25:19:2a:4b:83:47:23:04:7b:b2:05:b9:f6:8d:e3:02:
9c:d7:62:31:b8:f9:43:24:58:8a:ba:cf:9a:9d:60:51:bc:bd:
40:ee:bc:82:b6:e5:28:28:28:f4:ac:e8:7a:e4:bb:9e:b5:aa:
6f:5b:24:68:86:de:47:e5:aa:9d:67:59:6d:93:47:a4:cd:2c:
57:fd:4f:b1:c4:69:69:f1:ee:59:1e:48:61:ac:f6:10:af:f5:
9f:ea:23:60:20:17:b0:51:88:9a:b4:17:56:f7:60:6f:f2:f6:
f0:eb:72:37:2d:78:6e:ea:35:a1:83:ba:2c:47:3e:e3:83:5e:
f4:92:a9:15:f8:c7:64:aa:5b:70:10:d3:05:b5:d2:9f:d4:3a:
0e:8d:79:43:cb:ae:73:f9:5c:2e:e2:69:58:78:84:ef:c0:1e:
c9:16:ab:6c:4f:b5:79:6e:d0:99:af:9f:2f:3d:7d:78:88:d0:
58:88:32:3c:af:56:81:fe:fc:f8:fe:87:24:f2:4f:78:79:af:
81:e0:a2:3a:11:79:65:df:5c:5e:ff:81:75:92:dc:4e:40:3f:
99:49:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:42 2025 by rpki-client