Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: zsIkwdfp1DykODgVzezYtRjF7b9MgiswO3SLm/idfXc=
Subject key identifier: 74:29:CD:0D:12:4D:E5:19:F5:C6:2D:14:E8:EB:88:19:4D:45:B2:9D
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 0198744FB08489434391C614E939E4004F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 1303
Signing time: Mon 04 Aug 2025 09:00:36 +0000
Manifest this update: Mon 04 Aug 2025 09:00:36 +0000
Manifest next update: Tue 05 Aug 2025 09:00:36 +0000
Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=)
2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: QkmTcUhOgjLqlLDgI4PwEZFt6LHD+y/f0bQx0JoQEvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b0:84:89:43:43:91:c6:14:e9:39:e4:00:4f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Aug 4 09:00:36 2025 GMT
Not After : Aug 5 09:00:36 2025 GMT
Subject: CN=7429cd0d124de519f5c62d14e8eb88194d45b29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:0c:dd:e4:49:f7:76:d3:cd:fb:74:ee:5f:
39:60:43:c5:1c:c0:60:66:9b:4a:d7:9d:f6:7c:b5:
79:63:8c:dc:f3:a2:27:38:80:60:60:b5:2c:bf:a6:
73:a6:ec:f1:33:27:ea:89:7a:e3:14:8c:10:0c:d8:
b4:64:29:a4:f1:ab:33:bc:c4:80:a1:1d:d7:11:0e:
92:a8:13:ca:8f:b1:68:7d:e0:b5:65:dd:eb:b8:17:
74:e8:6e:e4:d8:e1:29:26:be:ef:48:29:8b:9e:ee:
34:8f:c7:be:5f:09:a4:6d:19:42:9e:db:6f:67:b3:
67:1e:2d:b4:b0:90:a8:29:4d:e0:58:cf:4d:31:04:
3c:e0:5d:0a:94:4f:89:66:1b:69:0e:4b:93:51:37:
12:8e:d9:58:86:b4:b2:73:74:53:2c:2e:74:71:a7:
80:37:8b:ca:b5:c9:64:8c:09:ba:d3:3d:94:fd:be:
10:aa:f9:28:d7:cb:c4:6e:0f:2e:82:6d:0f:be:d0:
ac:3d:e4:39:ec:7e:06:04:c0:b7:5b:63:34:c9:bf:
e6:8e:cf:26:e0:e8:df:9d:5a:64:12:bb:84:05:5d:
34:0f:ac:14:7f:5b:2c:f5:6c:63:5f:42:10:3d:c5:
19:e6:9f:c5:e4:27:e1:b6:74:63:f0:53:15:a0:79:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:29:CD:0D:12:4D:E5:19:F5:C6:2D:14:E8:EB:88:19:4D:45:B2:9D
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c2:1f:a1:83:2d:b0:54:32:77:8c:7f:78:e8:30:2b:6e:0f:
20:c2:c1:41:ef:28:5e:21:48:c6:54:00:db:11:cc:d7:74:26:
96:9f:a1:ce:eb:e7:de:5f:a2:32:34:6e:bb:e1:54:05:3e:3b:
6b:3f:12:e7:fc:24:a6:a3:6c:a5:dc:76:b2:42:0e:d6:e3:ea:
64:2d:04:67:9e:71:6f:55:9f:88:91:4e:bd:a7:b2:bc:57:83:
a5:be:b1:5b:8e:f1:3c:a2:ba:b1:1d:25:e2:b5:3b:f7:5d:50:
d8:85:76:0e:52:3b:fb:9b:46:f3:cb:ad:15:41:19:89:32:a4:
4b:90:cf:cf:ca:a9:33:66:f2:b0:b3:7b:8b:40:78:ce:e7:fe:
77:b7:59:30:19:fe:b4:10:45:d3:ef:b2:d2:77:da:a7:32:7a:
cb:42:c8:d2:42:a4:54:79:f5:fe:d4:fb:84:24:45:c9:ad:7a:
07:6c:09:de:3f:f3:ea:17:24:bd:93:1b:e5:46:72:9d:83:52:
3d:a4:9d:66:2d:f6:39:e9:11:12:92:cf:54:1f:dd:7b:72:28:
67:81:40:2c:d3:c6:91:dd:b4:01:ff:4a:da:55:3a:4e:22:d8:
4d:87:f7:a3:ea:c8:51:36:72:98:32:1f:d2:f5:e2:63:84:d7:
e8:49:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:37 2025 by rpki-client