Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File: M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier: znSOzIFjVJfalrxGa9C4kEmLsUs2ZajEcR37FtJvBNU=
Subject key identifier: FE:5E:E0:E9:35:0B:02:19:8A:DD:D4:39:20:85:4E:C5:E9:58:BD:9B
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer: /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial: 0198A12915269BD5E63993A0DBFF0A004E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number: 1002
Signing time: Wed 13 Aug 2025 02:01:20 +0000
Manifest this update: Wed 13 Aug 2025 02:01:20 +0000
Manifest next update: Thu 14 Aug 2025 02:01:20 +0000
Files and hashes: 1: 1_nKEKtn-rDapvV_FkI8ith69-A.roa (hash: HYbESAe393AiWHvbrJ4k/KX49GqaEptIBwkG+L+SrsI=)
2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: 02KSE0KgKoexkL2QzvPus8Ol3p/NlXCsUBybqlR818Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:29:15:26:9b:d5:e6:39:93:a0:db:ff:0a:00:4e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
Validity
Not Before: Aug 13 02:01:20 2025 GMT
Not After : Aug 14 02:01:20 2025 GMT
Subject: CN=fe5ee0e9350b02198addd43920854ec5e958bd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:32:c2:c4:f8:97:20:20:ad:45:5d:2f:0e:
2a:88:ad:7f:e9:7c:28:f9:1e:9b:f5:8d:8a:d8:75:
7c:fa:06:1e:5f:a5:be:44:2b:f1:67:8d:b3:80:f3:
79:d2:89:f3:78:25:c7:17:ba:41:99:a1:07:93:2b:
92:d2:a5:5f:38:4f:8f:07:97:99:e7:1a:c4:5b:6d:
3a:41:64:82:b3:7b:f2:02:41:87:fd:7d:37:9d:9b:
70:20:69:2c:67:d3:74:a0:47:c7:38:14:a7:76:b1:
12:68:10:0f:84:b9:13:58:56:6b:6d:84:90:5f:f0:
36:b3:3f:5a:84:9f:42:dd:b5:09:08:bc:45:d2:54:
9e:a9:a9:d8:9d:69:da:cc:58:31:d6:02:9a:e3:42:
0a:6d:4c:4e:6d:ec:c4:4c:30:5e:14:c4:80:a8:83:
3d:0c:b6:f0:93:14:95:02:6d:65:d4:00:12:68:d8:
71:23:14:9f:42:f1:1d:9e:fe:12:ea:5b:8b:3e:b7:
ea:33:17:ad:80:e3:79:a7:51:44:7f:fa:b3:db:98:
ee:bb:a6:09:35:b2:4d:ea:a8:cb:5f:9d:84:9b:99:
f4:21:f1:c8:ff:08:8b:5c:86:25:2e:19:ea:eb:37:
5d:93:ef:e5:0f:a5:f0:b7:4e:c2:bc:39:70:01:be:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5E:E0:E9:35:0B:02:19:8A:DD:D4:39:20:85:4E:C5:E9:58:BD:9B
X509v3 Authority Key Identifier:
keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:92:09:7b:63:b6:76:ba:09:b4:fb:d6:11:05:b8:e1:50:9f:
ee:2f:30:00:68:96:88:84:6d:66:ad:27:37:d3:54:a2:27:ef:
88:6d:a5:57:63:32:81:74:89:f0:45:65:59:f8:bc:e5:3b:1b:
ab:a3:dd:5f:75:41:bf:c7:7a:c7:65:5f:ff:d7:a5:d7:b3:cf:
56:df:0a:c7:50:71:72:f5:57:6d:7c:d9:a8:47:a7:8c:a9:b5:
06:66:03:32:7f:3d:1a:b1:d0:8c:30:7b:f5:fd:53:07:86:ac:
ed:be:04:aa:19:34:58:00:08:cb:4d:2e:26:4d:94:e2:47:16:
c3:78:11:c0:34:16:8a:09:d0:b6:00:9f:dd:7c:1e:ed:da:09:
62:bc:4c:33:0b:29:80:d5:09:41:9d:04:c3:f7:01:28:e9:4d:
66:51:a3:d2:15:ae:5e:38:66:85:3f:56:02:db:69:97:cf:3e:
a6:89:ca:9c:29:75:dd:80:bb:6f:54:86:9e:90:2e:1b:17:d2:
03:dc:eb:f4:e5:1c:67:3f:a1:18:2c:93:18:e1:b0:ca:07:de:
62:0a:a4:1e:3e:20:29:1a:d7:81:f0:d2:37:d9:ba:7a:87:c5:
fe:46:5d:2f:f1:5e:35:8d:11:12:02:bf:6c:5e:6e:6c:8b:fe:
57:35:1e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:39 2025 by rpki-client