Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: AuO46D0PUpvwa2mZ7SVPryDsXdtRj/rbPJ9L5HY83k4=
Subject key identifier: 98:08:78:DD:85:5E:01:9D:61:79:8E:79:58:5F:C0:D7:83:4C:6B:B6
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 0197B70EA8F651BAC943CCA1F77EBA79F7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0C30
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: 9G5zcIW+Kg7QuJDs8/PsHDsR80ivP5cc8t36p1D2pS4=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a8:f6:51:ba:c9:43:cc:a1:f7:7e:ba:79:f7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=980878dd855e019d61798e79585fc0d7834c6bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:d2:1e:92:61:7e:09:66:03:14:8c:b1:bc:
e9:da:ba:e1:ed:d9:be:94:aa:7e:46:3b:df:8a:70:
fc:b3:f1:f5:79:cd:c3:5d:dd:ae:29:36:6a:e3:9b:
c3:ec:44:21:50:8d:8d:f7:95:90:8f:fb:c8:c5:f7:
c1:1c:ca:56:b5:66:74:a9:e2:c7:f0:27:b9:9c:93:
24:18:52:fa:19:58:fb:f6:b4:c1:d4:b5:3c:c7:3c:
c1:f3:75:a3:a2:90:51:8e:27:85:0e:d3:ad:ee:14:
32:bd:a9:d8:3c:b5:24:df:ff:c3:d4:5d:59:c6:70:
66:86:31:2d:a5:31:03:79:58:e3:49:cc:92:63:38:
bd:e8:91:b2:f7:73:ac:dd:73:c3:f1:f4:1a:33:49:
55:13:39:e4:e7:4f:08:e7:f2:c7:78:e2:d7:23:94:
80:70:ab:e5:60:c3:0e:cc:14:2a:0d:bb:9c:d3:82:
68:0b:21:28:2f:99:f8:5b:d1:e4:6a:9a:d7:7c:7c:
84:63:03:4d:3c:88:12:f5:82:a4:45:99:3b:20:69:
5d:bd:e2:1a:66:74:d4:d2:16:ba:4e:f2:ab:c3:86:
c7:a7:c2:74:49:ef:07:f7:71:fb:fa:bc:52:72:de:
ab:8d:e7:cc:38:f4:32:01:d0:77:48:40:68:e0:05:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:08:78:DD:85:5E:01:9D:61:79:8E:79:58:5F:C0:D7:83:4C:6B:B6
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7e:c8:c2:19:6e:8e:61:38:86:6a:ea:47:40:cc:2b:1b:93:
00:f7:51:37:ac:6a:1d:9b:b1:0f:07:b2:c2:f4:48:7a:97:2e:
ba:02:4c:b7:92:78:59:70:af:21:96:e5:cc:24:d7:bd:80:c6:
64:82:5d:4d:2d:07:95:d3:07:59:33:22:24:0c:46:67:40:66:
23:f7:fa:79:f1:0a:a1:1a:3d:24:de:be:05:3b:ed:e4:6f:9e:
f4:f1:3e:b3:bd:96:11:14:f4:c2:a0:8f:07:88:27:50:2b:c5:
5a:9e:3a:50:75:ff:fc:6c:55:c2:0d:55:68:55:0e:29:17:a2:
6c:01:92:80:a6:0e:ce:f7:c2:fd:89:38:ad:02:ff:bd:b8:01:
59:f6:eb:f1:64:a4:8f:b8:2c:38:8a:83:6e:32:5a:62:5e:ea:
68:a5:5d:06:59:0d:8e:db:7f:51:3d:7e:0d:ce:52:05:0d:de:
b3:10:3c:1d:27:62:fc:2b:c5:c8:70:e2:09:6e:b3:6b:02:4e:
55:92:4c:ed:91:c1:6c:5a:a4:91:cc:a0:06:5d:60:d1:fc:06:
39:bb:f4:53:fe:75:79:b7:82:d5:61:bb:07:11:df:6e:12:c1:
0f:20:ea:0a:50:b8:d6:f5:12:3d:6e:35:c4:aa:58:ff:0f:39:
19:0e:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:18 2025 by rpki-client