Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: fHpgfhnRzxqCqAb1pHeHXdbd8+aTIXnaclmKajv6Q8E=
Subject key identifier: 5A:63:5B:F2:FC:F5:8A:E9:94:EF:D0:DC:5D:1B:69:98:AE:83:48:C7
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 019874BE4D5A471C54EED32CB7948A19FC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 03BB
Signing time: Mon 04 Aug 2025 11:01:25 +0000
Manifest this update: Mon 04 Aug 2025 11:01:25 +0000
Manifest next update: Tue 05 Aug 2025 11:01:25 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: Go6/LIRfPnE4XLzLOp0uqIXgEcUhLpwB9mwaY51zR0w=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:4d:5a:47:1c:54:ee:d3:2c:b7:94:8a:19:fc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Aug 4 11:01:25 2025 GMT
Not After : Aug 5 11:01:25 2025 GMT
Subject: CN=5a635bf2fcf58ae994efd0dc5d1b6998ae8348c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:bc:fe:ac:75:39:4b:a9:2d:e5:4c:21:3a:
a4:f8:35:2d:b6:0c:07:a0:8c:68:1f:de:dc:ed:e8:
d8:13:c4:16:d3:a3:e9:75:d3:f5:aa:d9:e9:04:47:
db:19:31:e5:ed:d1:9a:38:12:6f:0e:02:ab:8a:76:
88:27:d7:83:a8:28:f0:ad:a2:fb:29:70:cf:b4:2f:
ba:21:9d:74:c3:65:88:a5:62:76:33:91:61:af:85:
ff:57:9a:f8:5c:cf:bd:1c:5e:f6:b4:db:cb:a3:c7:
da:ae:00:ad:3c:1b:ba:8e:d1:13:33:20:ed:34:52:
d7:c0:86:1b:d1:f3:df:2f:a5:5d:63:f3:26:df:a1:
26:73:38:b5:b6:84:06:15:f9:37:fe:77:04:38:04:
68:f3:85:8e:3f:4a:6e:ac:c2:76:ae:72:8f:e7:fb:
66:3c:a6:7b:52:a2:da:99:4b:ae:c3:93:4d:4e:9d:
0b:01:81:df:c0:99:80:ec:7f:fa:46:32:de:09:6f:
a7:4e:b6:50:61:70:09:62:f9:5d:3e:f2:ea:0f:92:
b7:d4:34:8d:b4:4c:c2:ff:d8:a5:59:2a:77:91:b2:
9e:22:89:fb:60:86:24:1f:81:04:58:c8:2b:57:30:
0b:2f:e8:31:1a:d3:e5:35:03:59:5e:59:a6:42:58:
4e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:63:5B:F2:FC:F5:8A:E9:94:EF:D0:DC:5D:1B:69:98:AE:83:48:C7
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3c:a3:f2:6d:b3:94:e1:ed:7c:b1:2c:96:2d:53:9d:ce:45:
64:4b:95:d7:92:8a:ed:8a:48:41:05:65:ca:a5:01:48:d8:34:
96:4b:e1:b9:e0:16:68:97:c5:34:e5:3f:37:a0:a0:30:c5:d7:
f5:e6:63:d1:b0:12:24:93:c8:00:c0:df:52:2c:8d:4f:0d:6a:
82:cd:0a:c3:5a:17:19:8f:f2:53:50:65:8c:e2:7c:66:b9:e8:
81:e7:82:40:0b:0d:ba:c4:01:99:42:b2:46:94:d0:1c:b7:1f:
f3:0c:3a:80:51:3e:6e:12:57:39:63:04:2e:99:78:a0:c1:23:
4c:16:48:60:c6:bd:e1:b6:cd:35:f0:0c:76:f2:54:d2:83:11:
5c:18:59:58:7f:d6:8a:af:31:1d:0e:48:3b:6a:7f:a4:33:20:
f4:dd:54:a8:c1:43:55:ec:78:b9:75:40:e9:18:73:51:5b:d9:
58:11:c0:88:04:70:3e:d6:c3:38:e5:f1:de:85:7e:77:bd:dc:
0e:05:ac:dd:f0:6a:ee:47:04:8e:fa:1d:de:66:16:ed:32:ca:
1e:9a:01:b8:dc:44:58:d7:b8:50:4c:bd:38:20:0f:f3:ff:2f:
66:a0:7f:52:ea:8f:81:cb:fa:3f:d2:18:bc:2a:05:7e:30:f9:
e9:a9:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:29:02 2025 by rpki-client