Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: /3D772uXT15TVu62PVzlCEjcj7BUQTzhbkk/3nosDS8=
Subject key identifier: 6A:C1:65:A3:BB:5A:CE:59:3D:08:20:89:AE:B9:A8:2B:D3:D2:C2:04
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01987B9C872ED92DEEB71F0305CFA1490FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 19:01:52 +0000
Manifest this update: Tue 05 Aug 2025 19:01:52 +0000
Manifest next update: Wed 06 Aug 2025 19:01:52 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: 7B7dAXkE5Twv/FIkjGj9b5OJ/HTzP0Wi0JahofNdMvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:87:2e:d9:2d:ee:b7:1f:03:05:cf:a1:49:0f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Aug 5 19:01:52 2025 GMT
Not After : Aug 6 19:01:52 2025 GMT
Subject: CN=6ac165a3bb5ace593d082089aeb9a82bd3d2c204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:7d:46:51:64:cd:f6:b3:cb:56:10:5c:e4:
55:27:c0:41:45:38:c8:32:df:e9:d0:5b:24:7e:e7:
ee:c7:b5:75:ec:42:52:51:e4:0d:64:24:26:3c:80:
cf:65:d0:c2:e5:e4:04:a7:4c:28:e6:b3:a4:ec:ba:
41:72:9e:f8:10:b5:af:90:4e:90:6e:89:1e:44:97:
29:40:75:cb:56:5b:02:3c:4d:d1:c1:35:40:51:6a:
ce:68:5c:a2:30:b0:dd:15:6d:b7:28:c4:f7:bf:e4:
a2:95:f8:7c:f5:6b:5c:a7:92:c7:e6:38:90:c3:9b:
0b:e4:47:97:94:2b:45:e3:89:45:ce:09:ca:f4:0e:
bb:7f:83:3b:c0:f0:73:61:b2:fc:d1:17:81:ee:f1:
a3:e3:3a:fd:11:35:5d:a5:73:0d:b0:50:5c:52:45:
90:b8:d2:48:a0:19:06:f9:fa:88:44:38:e7:ab:38:
b2:73:b7:a5:10:4c:91:03:7b:9e:c3:c6:09:68:e2:
b1:60:36:fc:64:81:50:25:49:3e:2d:4f:39:ae:b1:
f7:76:cd:c6:9e:92:7d:3f:0e:82:b0:df:6c:02:80:
43:2b:de:0f:11:df:d2:24:a9:4c:fb:2e:5b:c9:d2:
9e:d2:c3:33:40:82:48:e2:21:07:c2:2b:1b:86:d0:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:65:A3:BB:5A:CE:59:3D:08:20:89:AE:B9:A8:2B:D3:D2:C2:04
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:62:65:21:35:88:f7:20:b4:6a:d5:ea:1b:1d:db:a5:3d:1f:
31:54:04:7e:6a:6b:27:7e:7f:93:e3:9e:0b:16:c2:c0:cb:4a:
ef:b5:d1:ce:36:c6:11:6d:30:f0:31:af:33:71:7d:4a:1c:a0:
e4:85:30:7f:13:80:de:60:25:26:7a:c4:a2:60:9d:1b:91:54:
83:c9:82:e2:8c:03:ff:81:30:88:43:83:b7:b1:2d:1e:46:2a:
59:65:3b:0c:f3:6d:5b:7a:ee:ea:d9:8b:51:4e:0f:84:13:75:
42:ce:d5:fa:5b:34:4a:06:38:11:ba:f9:d4:8c:00:0c:7f:dd:
20:47:f0:ae:fb:40:36:76:a3:43:1f:d2:a8:cc:c5:73:6d:9f:
d5:ed:a2:63:fe:b9:4f:f4:d9:8a:dd:9e:78:b2:19:0d:91:d0:
fd:fa:26:f5:b2:d1:96:80:c3:9d:f2:b8:86:45:ab:a3:b4:fd:
e3:2b:0b:10:6b:c2:47:2d:65:85:68:ac:d6:dd:53:a4:7e:98:
8b:cb:69:e5:59:5f:1a:f3:28:73:30:23:1b:85:17:8f:b0:63:
ec:57:14:ef:59:da:b1:45:9b:96:bc:ef:1f:ad:35:6c:3b:ab:
01:a9:1a:af:3d:50:d1:54:a8:3e:b4:59:fd:d3:06:33:a5:b8:
4b:90:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:00:15 2025 by rpki-client