Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: nGdCpI+PTbiGegoVSJwvr1oXXTIcCb1evnpPDbK4RKk=
Subject key identifier: 64:A0:DF:FE:53:17:86:08:5E:0E:0F:D6:EF:AC:F0:A3:C9:1D:AF:3F
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 019896A63A6A1385FCB6DDE762E1C49C0CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 0FC9
Signing time: Mon 11 Aug 2025 01:02:12 +0000
Manifest this update: Mon 11 Aug 2025 01:02:12 +0000
Manifest next update: Tue 12 Aug 2025 01:02:12 +0000
Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: RrSxN6NEWONjcDb6Th2wcOvMo7isyoJi5Co17of32KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:3a:6a:13:85:fc:b6:dd:e7:62:e1:c4:9c:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Aug 11 01:02:12 2025 GMT
Not After : Aug 12 01:02:12 2025 GMT
Subject: CN=64a0dffe531786085e0e0fd6efacf0a3c91daf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:e2:a4:a6:73:7f:c8:d3:a0:52:c6:62:71:
1c:73:20:1c:66:5e:8f:21:f5:e4:9b:c8:3e:91:5f:
f1:2b:f8:4d:95:69:89:16:e3:e2:b4:d5:64:c3:d3:
c6:0b:1c:95:39:a7:b2:02:29:b1:04:17:27:1a:ae:
41:28:16:64:de:ef:e0:8d:e2:08:5e:f1:44:11:69:
66:b0:ae:ba:c0:fb:a3:90:b1:2c:18:9a:02:85:39:
e2:a6:90:f2:70:12:69:85:27:08:e3:2c:3b:79:88:
da:f9:d0:a9:b8:95:1c:cb:1b:4a:65:2e:85:38:fd:
80:05:13:d2:15:04:ef:85:a8:00:04:0b:75:3b:a5:
fa:d8:ba:8e:f4:d6:9f:72:10:bf:d3:aa:9c:2d:74:
c9:4a:06:9f:b4:3c:9d:e1:84:6c:34:61:8c:78:03:
dc:04:bb:80:35:51:8e:32:af:a7:d5:0f:16:8a:76:
df:2f:02:22:9a:7b:fc:83:eb:82:df:aa:6a:d0:7c:
68:56:f1:b3:1e:2b:f8:6e:81:26:bf:57:3d:0f:80:
cd:3d:bd:88:1e:71:18:84:45:81:8a:60:b0:a7:eb:
1c:b0:52:7b:20:0d:b7:e1:de:9f:44:d3:95:e9:f8:
82:98:0b:cd:9d:4a:f0:13:1f:98:69:9e:c4:53:ee:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A0:DF:FE:53:17:86:08:5E:0E:0F:D6:EF:AC:F0:A3:C9:1D:AF:3F
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:88:35:9c:ab:d3:5e:a5:83:80:89:81:b9:3f:82:82:2e:ef:
88:47:40:69:f7:3e:0f:2c:dd:a3:d4:bc:17:0c:4f:d2:19:6e:
02:85:3f:1b:34:67:d8:dc:5a:3f:81:f8:ca:04:9b:18:95:0b:
de:8b:58:92:2d:7d:3c:e5:93:b9:51:dd:6f:b1:63:1a:a3:c3:
cf:c5:70:c5:db:fd:d7:ed:ae:c3:a2:1d:09:9e:56:97:25:51:
20:e8:40:00:aa:8c:4c:42:68:f0:ae:66:5a:33:94:fe:7c:e9:
4a:f4:d7:79:f0:7b:35:a6:83:64:a0:e5:1a:7c:82:d9:f9:02:
d5:e1:37:6d:79:02:f8:1b:64:9c:84:e8:5a:37:a3:6e:2a:32:
7c:24:66:8d:2b:f6:4f:98:c3:25:f2:03:03:b0:14:2d:73:dc:
af:ae:c3:2d:3e:29:62:bd:f7:6c:0a:6e:ee:8f:96:94:27:dc:
81:7e:b9:3a:f4:7f:d7:37:00:d3:83:c2:ec:c6:ed:cd:4b:5c:
c6:b3:80:22:1d:30:44:cc:ed:6e:93:d4:93:26:71:be:c0:e0:
e7:cf:2b:96:0c:0e:62:31:31:e1:ce:c0:a2:ea:2e:3e:f4:6f:
50:4c:66:90:aa:f8:bc:21:38:2b:b4:e5:44:14:26:3e:e7:58:
d5:33:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:14 2025 by rpki-client