Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: BG1TViwmFVEDxxYEV10Ijh9LGxgX+Ud05o+jxeTCMOA=
Subject key identifier: 72:4E:1B:48:6F:6D:AA:59:2D:3C:3A:A2:06:5F:DE:B9:86:14:C5:4C
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 0198D705BC81E16272A4E8F2874214D39DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 1425
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: p6ca99/SUgPANT9rao1rwpXdylUQSYCT7L42dW94wao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:bc:81:e1:62:72:a4:e8:f2:87:42:14:d3:9d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=724e1b486f6daa592d3c3aa2065fdeb98614c54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:04:9f:71:a4:41:1c:7b:0d:fb:fb:4d:fe:
07:4f:a6:6a:2d:42:16:61:24:1f:e1:47:dc:70:ed:
72:f4:a3:d4:14:93:eb:5c:e0:34:40:dd:e6:2b:40:
ad:3e:06:a3:ad:06:2e:bb:18:d1:fc:58:71:0f:58:
29:db:b0:94:84:3d:fc:1a:75:02:14:5c:d4:77:71:
a0:9f:ed:7b:87:5c:6c:a6:d7:78:6f:3a:44:98:d7:
fb:a2:e1:51:d5:b1:a0:7c:18:9b:58:a1:21:ac:33:
e6:cc:90:ca:00:3d:8e:8c:de:b1:ed:7b:be:6d:1c:
49:74:6f:6c:bf:b5:30:f5:1d:2c:a9:f9:0f:e5:d2:
64:c8:2f:d5:7d:ba:08:10:80:72:c1:5c:9c:6d:74:
3f:4e:bd:b8:f0:39:9c:ca:26:ad:1a:35:65:e6:d0:
be:91:89:4f:b9:5c:d2:20:e0:aa:3b:9e:16:db:92:
81:11:ac:5c:59:20:a4:6d:40:4c:e6:99:43:ef:6a:
c9:2c:6a:4e:0b:95:05:b0:8c:9f:27:74:17:a7:9a:
15:f7:60:fe:e6:da:e4:93:46:a2:49:60:c9:9e:6d:
73:d4:00:74:fe:3d:5c:f2:94:05:7a:02:0a:fe:24:
17:f8:5d:4e:97:9c:47:07:f7:5e:bb:ab:09:20:38:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4E:1B:48:6F:6D:AA:59:2D:3C:3A:A2:06:5F:DE:B9:86:14:C5:4C
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:03:44:28:1b:24:bb:8e:ed:2d:63:36:6c:f3:7b:79:85:0d:
ba:c7:0a:f8:87:96:44:d3:a7:0c:80:7f:a1:66:61:44:f8:26:
bb:b1:a9:e0:a5:d6:00:b4:25:6a:d5:4d:e8:67:b1:b3:3a:f4:
70:ae:54:a5:b7:99:2a:bd:8d:cb:eb:e5:f3:69:5a:41:be:80:
9e:47:9c:f8:82:af:00:e5:37:15:c9:7c:22:46:d7:5a:f0:d9:
38:3d:fd:6c:c2:fc:dc:98:04:27:77:26:c7:6c:97:0a:15:6b:
d3:a0:3c:62:7e:9f:68:52:3b:78:99:c2:32:a4:6e:8a:84:01:
0e:a1:c9:e9:49:25:97:f5:01:46:ec:ce:6f:64:b8:44:c9:4a:
22:4a:c6:cf:35:71:6f:cf:bd:5c:a1:35:3e:68:7d:62:57:85:
51:71:25:e6:50:e8:76:51:d5:34:7a:f0:db:b1:28:80:73:fe:
40:b1:7b:13:39:56:28:65:2f:2b:4c:66:d8:61:e6:5e:77:3d:
f9:c5:cd:01:2b:03:10:de:e8:fc:50:ce:0b:3b:64:17:b5:22:
a9:57:78:31:43:cc:30:08:07:cf:21:d2:1a:09:6d:81:a4:17:
3a:e0:53:2c:eb:00:bc:21:d6:52:9a:b7:1a:b3:2e:59:26:3d:
0a:b5:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:43 2025 by rpki-client