Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier: GqwHmOuOMLpyLHYDIa9BYE/FVHWOQQh5/cD4+jtjhdg=
Subject key identifier: 61:F4:41:93:01:1B:0C:C9:D2:6D:3E:3B:10:1E:AA:70:D3:AF:76:70
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial: 0197B934238ABBEE51DC7A9D4260B5EDBAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number: 1391
Signing time: Sun 29 Jun 2025 01:01:31 +0000
Manifest this update: Sun 29 Jun 2025 01:01:31 +0000
Manifest next update: Mon 30 Jun 2025 01:01:31 +0000
Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=)
2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: D2RX39Or/9hfbzwkVbPbS1pGPoY0ifeXmJZm5hmFzqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:23:8a:bb:ee:51:dc:7a:9d:42:60:b5:ed:ba:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Validity
Not Before: Jun 29 01:01:31 2025 GMT
Not After : Jun 30 01:01:31 2025 GMT
Subject: CN=61f44193011b0cc9d26d3e3b101eaa70d3af7670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:ab:b8:72:d2:4e:b4:a9:61:86:b8:51:df:
75:8f:42:48:f3:ca:8c:aa:68:b4:e0:96:de:68:05:
04:75:a3:20:22:f3:68:a1:44:83:2d:51:97:8c:b2:
7a:c4:1b:53:74:e5:82:20:13:b2:c3:93:69:72:58:
47:a1:cd:39:a9:aa:76:fe:ae:6d:1c:ef:57:48:37:
d7:6f:4e:7f:18:17:81:e2:88:cc:18:7c:68:9f:b4:
d3:54:c7:60:65:e8:83:f8:94:05:b8:1b:cc:b0:e0:
98:9c:50:de:46:38:ff:9c:90:fe:7e:49:e6:c5:90:
c6:98:62:e0:66:aa:66:f1:2b:46:56:ec:b2:45:ff:
f8:79:70:e6:a6:86:2c:d1:89:44:67:2f:37:2a:b0:
29:41:3f:b4:4e:60:78:fc:7b:f9:86:f9:71:b2:5f:
1b:cc:0d:cc:96:bd:4e:a3:3c:6a:48:a0:fa:b9:31:
c4:a9:09:62:d3:4d:77:f7:f3:bc:3b:63:f8:c4:18:
51:d7:11:17:b5:92:3b:02:3f:e8:fa:85:e8:86:d7:
e9:9d:26:cc:37:8d:b2:d0:71:4d:cc:ed:17:c0:95:
80:e6:dc:fa:38:4d:3a:85:e4:c9:d1:32:02:31:9b:
c9:71:fb:f7:81:6f:44:39:45:09:87:17:b4:18:17:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:41:93:01:1B:0C:C9:D2:6D:3E:3B:10:1E:AA:70:D3:AF:76:70
X509v3 Authority Key Identifier:
keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:51:58:56:a2:7c:b4:c6:61:1f:f1:d9:d8:61:41:68:72:a0:
22:23:ef:cf:85:cf:ce:0c:ae:70:09:d3:33:9a:c1:eb:ab:20:
f5:eb:aa:6e:cc:be:8d:e8:87:17:89:a7:16:0a:8a:ee:4c:02:
72:9d:92:1c:2f:24:09:9e:d3:ee:18:fe:b5:6a:e1:7e:8e:07:
3d:74:4f:cf:59:33:42:ff:3e:2c:1f:84:ab:9a:41:25:66:6a:
5d:7d:b6:04:27:fd:6c:e0:fb:8f:93:0e:52:46:43:d7:75:03:
b7:9f:b5:4e:d1:5e:8e:5b:d9:e5:19:5f:39:a0:98:66:a3:a0:
0e:e6:f3:54:06:d7:00:e4:f0:d1:01:f8:93:ef:ff:12:66:42:
3c:aa:00:b0:c1:19:33:fb:d8:b8:e0:d3:12:57:ad:db:e5:c8:
48:a9:d8:58:e2:01:73:d2:58:1b:90:ef:74:d3:c3:2f:75:97:
9e:44:78:20:98:92:3f:e5:d8:c5:f2:ed:4c:fc:1e:2d:5c:ad:
f1:d1:02:1e:c1:a6:3f:e1:5c:f6:fc:9e:54:d0:50:47:bc:f8:
c2:8b:f9:57:64:98:2a:e2:07:a1:e3:a8:e9:1f:84:3c:72:41:
1e:cd:a0:cb:8f:c7:88:34:5b:4a:ea:c0:bc:30:b2:3e:75:a2:
c5:49:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:43:25 2025 by rpki-client