Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: h5x/zHmTkxj0X3O4agJTweaPJ/c1S5aSYqn2p0BoMsk=
Subject key identifier: C3:E5:B5:0F:D7:69:0C:CE:2C:F9:78:44:02:24:7C:0D:DD:01:14:82
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 0198D9604E00E051A7E7CE4855E61AC014F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0E9B
Signing time: Sun 24 Aug 2025 00:00:23 +0000
Manifest this update: Sun 24 Aug 2025 00:00:23 +0000
Manifest next update: Mon 25 Aug 2025 00:00:23 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: 67KvWG6tKoWIJ+I0PVw6O5e/RNoGN0107+J6fAtTnms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:4e:00:e0:51:a7:e7:ce:48:55:e6:1a:c0:14:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Aug 24 00:00:23 2025 GMT
Not After : Aug 25 00:00:23 2025 GMT
Subject: CN=c3e5b50fd7690cce2cf9784402247c0ddd011482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:a9:9e:8a:b0:aa:85:55:17:a0:c0:66:0c:
af:b8:4b:9c:c6:c5:88:52:73:25:f9:35:ad:a0:cf:
50:5c:ab:d3:fb:5b:04:67:fa:9f:b4:43:39:d9:29:
d4:af:54:b1:80:b9:38:58:ce:38:4f:6c:1d:84:15:
c6:01:f0:64:dc:ca:91:d2:a5:7f:f8:cd:55:4a:9b:
62:b1:32:1c:02:ec:11:7b:d8:44:1a:14:14:ab:3c:
10:d6:26:95:25:e4:82:1a:f9:64:ca:a2:98:24:9c:
38:8d:57:12:d1:97:23:bc:30:ed:38:d4:ee:8e:8c:
69:4d:09:a7:ec:e8:01:9f:2c:64:c8:6e:d2:fe:41:
1a:9b:69:f6:9a:a4:a7:55:09:e0:8c:4f:8f:9b:ec:
7d:d6:f5:7e:6c:96:61:5a:8d:dd:45:72:df:33:a1:
0b:be:b5:29:d5:a9:d8:b0:bc:42:6f:e7:27:b8:6d:
b5:f0:02:3d:ac:5b:e0:89:ca:49:10:de:85:ce:38:
90:e2:02:a4:e6:5f:39:49:5d:73:77:b3:b5:fc:c2:
8a:51:93:0d:f8:c9:0b:56:b3:a3:d3:62:ff:ac:45:
6c:e4:7f:e2:60:d9:8a:20:e3:37:65:bb:6a:70:b5:
ad:c4:86:63:de:3a:ef:b2:b2:72:3e:75:8b:ce:5a:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E5:B5:0F:D7:69:0C:CE:2C:F9:78:44:02:24:7C:0D:DD:01:14:82
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3d:ec:91:c9:6f:00:f9:b0:ca:16:ef:7b:77:43:84:37:df:
65:55:4c:47:8f:fb:15:16:ae:eb:15:16:cd:21:d2:d9:5b:cf:
1b:dd:ed:70:be:3d:a8:a2:b3:40:b7:b9:79:e2:50:32:7a:95:
72:ef:f4:22:8c:be:ff:10:03:7f:2d:59:8d:6f:a7:7c:5b:a4:
15:04:a3:a4:5a:04:c6:3b:12:47:88:9f:2d:16:fb:74:6e:e9:
79:e0:b8:51:03:a6:75:40:40:04:55:09:90:ec:b6:7b:3a:ff:
5f:89:20:c0:78:f5:8f:62:ae:8c:15:75:9f:d1:21:1d:88:e3:
69:67:86:a9:35:1a:f7:66:10:c1:ba:71:dd:b6:9f:de:c6:61:
58:80:51:63:47:94:92:9b:79:80:b4:22:9f:ea:af:90:19:83:
57:a4:64:cf:27:a8:fb:78:96:25:a1:d4:8d:51:83:40:a5:8e:
a2:5f:ac:92:d1:d6:1b:2f:13:d5:06:f1:81:f4:a0:cd:4b:f1:
a5:76:49:93:e6:e3:80:9e:d0:82:88:04:d4:dd:ff:6d:13:5a:
ef:69:33:18:aa:d5:ac:bc:45:0c:e4:fd:a8:b0:a0:2d:11:9a:
d0:ac:f4:f4:13:14:08:b8:95:72:36:49:f6:6a:bd:67:82:ec:
36:3d:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:36 2025 by rpki-client