Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: DGey8pjIY9C4Nml2OXeUJ0O/9V/pHS5KZ6DrJytJGMg=
Subject key identifier: 3D:71:1B:24:76:45:22:E6:46:9F:63:33:34:D0:E3:EC:D1:7F:B7:32
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 0198D4E0C71A2FA0CC17660868D6724E8F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0CC4
Signing time: Sat 23 Aug 2025 03:02:37 +0000
Manifest this update: Sat 23 Aug 2025 03:02:37 +0000
Manifest next update: Sun 24 Aug 2025 03:02:37 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: m0W7OjKzaZqaQCsYRklaouU9H19z6iE27/SFLyKNgy4=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c7:1a:2f:a0:cc:17:66:08:68:d6:72:4e:8f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Aug 23 03:02:37 2025 GMT
Not After : Aug 24 03:02:37 2025 GMT
Subject: CN=3d711b24764522e6469f633334d0e3ecd17fb732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:9e:db:a8:1c:8a:6e:ff:8b:07:5a:31:9c:
2a:b8:bd:07:24:43:ab:f7:e3:97:22:e4:b2:9e:6f:
14:ef:f8:b7:5c:35:b7:77:aa:b7:ae:30:b8:61:6b:
6d:7c:3a:f2:3c:3b:17:45:89:83:3e:f2:0e:c8:e7:
a0:13:6d:2f:5d:d0:a3:c8:3a:be:cf:a8:bf:d6:a7:
0f:c2:39:d7:81:f2:c5:9e:e0:40:d6:51:80:f1:bf:
9a:83:38:47:da:7a:8c:81:38:0b:cb:21:4d:0e:ea:
f6:61:56:e3:fa:90:ba:7e:4f:f2:be:cc:06:8a:1e:
8f:e8:0f:99:8b:14:c0:58:f8:c0:59:04:80:5f:f2:
64:5a:45:d3:4e:60:b5:9e:b4:39:67:2b:2f:9f:4a:
f7:76:b6:2c:76:f3:4a:5a:88:a5:5f:7b:d4:50:0c:
c5:c9:85:31:e2:9d:f1:f4:53:9d:d0:c9:5e:60:d3:
89:8d:7f:f5:b7:26:bc:94:30:9a:da:69:51:61:d9:
3d:69:ef:cc:93:ae:66:09:c4:bf:6d:2d:44:9a:e5:
74:c4:a7:03:c7:51:fb:61:81:90:7f:98:65:57:ec:
79:8e:16:47:bd:6a:e4:da:97:6e:9a:3d:f5:a8:c8:
7e:e1:d8:41:f6:36:23:c0:6a:0e:9d:fe:4a:0c:69:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:71:1B:24:76:45:22:E6:46:9F:63:33:34:D0:E3:EC:D1:7F:B7:32
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:31:64:87:cb:52:34:11:27:03:f3:9e:78:2c:95:c9:a0:a8:
33:da:cf:4f:0c:9a:cd:c9:6c:e0:8d:62:65:ca:07:ee:70:2f:
06:6e:e4:9b:55:21:75:de:fb:e9:7f:da:9b:1f:2a:87:90:86:
af:68:f9:64:4d:bd:c9:d3:c8:3b:8a:2d:85:e7:f0:3a:91:e5:
e0:14:8d:f7:d9:ba:06:69:6c:ca:99:f8:21:d8:26:54:64:c4:
3b:62:ff:1a:7b:81:a9:71:92:22:c9:23:f6:56:05:25:32:f3:
51:7e:f5:67:ac:58:52:7f:12:11:a3:98:aa:a3:84:8b:83:d8:
3b:48:09:75:cc:04:3b:c1:98:42:32:f3:e1:39:f0:ba:2b:0e:
da:a2:ba:09:c0:01:b8:aa:54:40:c5:38:f7:a8:67:2b:7b:5e:
1c:95:ac:7a:e7:41:bf:ba:79:8b:8c:77:c4:cc:5f:7a:db:3f:
19:7a:b3:d9:34:44:02:67:30:19:e0:f5:20:e8:b8:16:a1:55:
a7:2f:e9:b8:01:40:85:1e:bd:8e:dc:a6:18:f9:67:22:c8:03:
4d:91:3e:fd:c0:60:e8:50:cd:ad:5d:16:53:5f:f9:96:6b:d3:
57:a0:26:93:ed:bc:c8:6c:2b:11:54:0b:7c:bb:80:3c:5a:62:
40:7a:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:05 2025 by rpki-client