Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: rR+auI9bZWqnPnYEBin206hDA0UQLK6/DUYgelbnufA=
Subject key identifier: F9:61:4A:51:42:FC:57:A5:BB:C9:20:E8:D7:31:C0:FB:77:12:B7:16
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 0198D65F37DC5DEA75918EF7567A08FF85D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: 3eOfQ+0OL5l61vhs+D/2FR45Z4RsGfo400Etna9a69Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:37:dc:5d:ea:75:91:8e:f7:56:7a:08:ff:85:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=f9614a5142fc57a5bbc920e8d731c0fb7712b716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:38:85:a5:8d:34:71:66:9f:5e:bd:ed:84:
d3:56:89:2d:43:a4:8c:75:d2:28:ba:5b:88:d1:33:
e7:b8:24:e7:f3:03:9b:27:a9:04:f0:ed:91:1b:7f:
59:39:bc:bc:31:dc:55:8c:e9:71:8e:f9:d2:49:1d:
17:d3:e9:eb:13:2d:2d:74:75:9d:8f:28:f1:99:84:
eb:ed:91:c5:c3:58:a9:5c:2e:6b:a8:2f:d1:f8:44:
66:ef:da:db:ad:58:b6:b4:3b:21:f6:93:9c:a2:66:
76:40:9c:23:38:bf:f7:00:6e:78:db:66:d4:16:c0:
2f:32:63:56:72:49:88:0e:91:71:52:af:7d:14:a3:
4e:39:2e:ba:c9:a7:6e:c5:39:b9:6d:ed:7e:bd:eb:
fd:c0:eb:f8:05:1e:1f:86:f0:78:5d:e3:a2:93:17:
71:84:54:20:05:ba:96:1c:38:39:9e:0b:d6:e7:cb:
3e:d2:1b:3e:9c:91:08:08:dd:37:2f:67:2d:9a:c8:
29:3d:b0:69:83:e9:70:66:60:59:76:b1:92:e2:0a:
61:ad:d2:a6:ad:af:3e:d1:c5:8e:03:ae:38:bc:e1:
5c:96:43:f6:86:28:39:b1:a8:68:f7:27:da:b1:6e:
b0:ee:cf:07:f7:e7:d9:3c:e5:11:06:1b:aa:98:82:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:4A:51:42:FC:57:A5:BB:C9:20:E8:D7:31:C0:FB:77:12:B7:16
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:53:0c:de:a3:ee:16:0c:5a:e4:66:98:6a:3a:d9:b1:ad:73:
e7:2c:8f:78:58:7a:b0:6b:ad:b0:ed:43:fd:d2:bb:2d:61:42:
32:0a:d4:65:d3:5a:bf:1e:c8:be:ef:80:a3:0c:6f:30:63:e1:
3f:83:cd:31:3c:a8:cf:70:ec:b9:e9:9f:22:06:7b:0a:ad:43:
35:63:6f:19:b0:4c:5f:69:a1:8e:99:35:7e:73:9b:e4:eb:33:
0d:f7:82:76:9e:9e:ee:ce:13:79:ac:4e:ef:72:a8:88:87:5d:
c6:96:96:9c:57:bf:f6:66:39:7f:6a:98:4a:52:9d:56:ac:a8:
c1:7d:f4:da:7d:63:1d:ab:3e:81:11:11:2e:2a:86:ba:4d:31:
f1:0d:e1:b2:a0:a9:9a:4a:17:54:1f:cd:c6:7d:36:9c:cb:70:
8b:27:9d:1d:fb:83:84:fd:77:bb:a2:3e:a8:8e:6e:4b:f7:80:
dc:2f:f0:40:3b:6f:dd:69:c5:0d:2f:21:f5:ab:a8:3e:2f:98:
09:1c:d1:c8:1f:f8:c3:25:b1:63:c3:96:76:07:a7:87:e9:a8:
be:6b:3e:d7:e6:a0:36:65:19:de:68:c6:a9:23:5f:18:ab:15:
33:b3:87:d0:12:9e:c7:b7:ce:1f:5d:5a:5e:36:7b:b7:10:8f:
19:ed:3f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:09 2025 by rpki-client