Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: 9QCwsjZFpwxgecsHZpdjT4VGtsvHRoRs4UFuO7t6ghk=
Subject key identifier: AC:6D:2A:45:A0:36:45:78:56:9E:64:16:8A:15:33:62:6D:2C:5B:5E
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 01988C585F4086D36A1CDCA2D767D90A4C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 01:00:58 +0000
Manifest this update: Sat 09 Aug 2025 01:00:58 +0000
Manifest next update: Sun 10 Aug 2025 01:00:58 +0000
Files and hashes: 1: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: wKprC9A1ah7ojIah0qNsHp/glcP06lbbmb7cE/VxreI=)
2: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (hash: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:5f:40:86:d3:6a:1c:dc:a2:d7:67:d9:0a:4c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Aug 9 01:00:58 2025 GMT
Not After : Aug 10 01:00:58 2025 GMT
Subject: CN=ac6d2a45a0364578569e64168a1533626d2c5b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:e1:39:30:70:e3:15:99:ef:90:61:72:be:
c1:87:78:e3:ba:ce:13:9b:64:c2:de:39:40:43:ca:
6f:b4:bc:3a:35:ae:a2:e1:44:95:c8:51:2b:04:e4:
35:5e:e1:52:cf:6c:0d:0b:99:5d:42:21:52:a9:e6:
bd:d4:29:60:cc:30:d3:e0:9e:ea:ff:98:df:cc:68:
26:3e:4d:e9:2b:08:03:39:16:89:4b:03:19:f9:40:
f2:47:76:93:79:8c:c2:1d:1d:48:87:33:ae:5a:69:
00:45:2b:34:07:17:f1:77:78:b7:fe:fc:56:b3:bf:
3e:3b:64:b5:d0:ce:90:86:c9:27:79:cf:fd:d7:22:
d4:c4:b5:0f:b7:60:10:7d:a3:bd:35:99:ea:7e:d7:
dd:98:ce:a1:cd:f1:1f:47:2f:b6:ca:4f:28:73:05:
59:e5:0e:db:7c:76:c7:4c:6e:8a:bd:bf:61:8a:61:
87:a7:97:28:d8:da:50:3d:dc:ba:85:d1:09:48:cc:
ee:37:c2:08:dc:1e:7c:d0:c4:12:7e:41:70:6b:c6:
02:68:a4:c5:78:eb:57:d6:18:d5:e8:89:e1:ce:9e:
1a:f3:98:f2:d7:d6:92:ff:58:d0:02:3e:7e:2e:c6:
43:74:15:13:fc:86:d6:73:17:fb:fa:10:75:b9:b4:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:2A:45:A0:36:45:78:56:9E:64:16:8A:15:33:62:6D:2C:5B:5E
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:06:6c:0c:5b:87:98:81:54:14:39:19:92:38:da:91:16:d7:
df:34:8b:32:89:7e:a7:1a:ba:9e:ee:0e:c2:bf:f7:f7:24:0c:
df:cd:8a:ac:b2:77:58:18:a7:91:ac:e6:2f:b3:a3:42:28:66:
3b:9f:b1:f2:78:58:05:33:cb:a7:d5:9e:e8:b4:60:1e:72:dd:
65:f4:93:72:7e:e7:80:2e:11:cb:7e:f6:ea:55:eb:aa:6b:3b:
0d:9a:24:ca:cf:07:47:33:2a:9b:0a:2b:ea:bf:ea:17:06:ff:
73:4d:2d:24:04:2f:39:81:b0:dd:8b:35:51:b0:13:c0:d8:be:
a2:3a:9d:16:40:1f:47:39:41:24:b6:cc:ae:9a:39:82:a9:a8:
6a:d9:ed:1f:ff:b9:53:ec:81:86:df:53:66:b8:79:ab:64:cf:
a1:17:7c:e4:fa:01:c5:34:75:92:12:b2:28:85:31:f3:13:bd:
74:e3:2d:b5:b5:f5:46:ab:79:de:ff:40:97:df:d5:f6:0b:07:
71:0a:80:a4:1d:71:86:c5:d3:af:6e:bf:6e:c2:14:08:ce:13:
78:dd:4d:12:97:14:5e:a2:e4:db:66:05:44:2a:29:26:42:9f:
e2:f9:f6:e1:e6:23:26:82:0e:b4:4d:bc:69:04:c4:75:9f:df:
a0:09:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:19 2025 by rpki-client