Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: BY6l7RiumxzjcE49tpjzDCgZELZ2gsrx0b+DgWee6n4=
Subject key identifier: 8B:68:B3:47:7C:62:8B:54:FA:8E:33:BE:D8:67:99:94:C4:81:17:FE
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 0198D54E6FC790785A11CFA22D81814CCB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: U6nb6DpUzJV_xi4UhiA5O3aKdZE.roa (hash: at4iy2FPtAChzVS5IZxWuVWW9v3c10T2DEm7KMEtSwY=)
2: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: 7EIhrTa5F3ctj4bmLaFgp01ja+RO3DRv6QFewd02ce8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6f:c7:90:78:5a:11:cf:a2:2d:81:81:4c:cb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=8b68b3477c628b54fa8e33bed8679994c48117fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:27:80:da:0c:41:0f:f4:43:99:d3:ae:46:
be:6d:32:df:37:eb:63:c6:b5:df:cf:c8:f3:80:d5:
5a:99:89:e3:ed:b8:ea:b0:da:52:a0:e6:d6:10:5c:
0e:10:c8:4b:b6:87:f9:0b:ec:14:8d:c8:d8:78:17:
e9:f2:36:af:88:b1:b7:05:b3:39:62:33:64:a2:b9:
7e:b6:24:8a:57:68:ae:ae:a6:67:14:61:5c:4b:43:
fb:4f:6e:cf:a1:82:4c:da:47:1a:f1:b1:1c:96:90:
ff:ba:0c:90:8c:8d:b5:2f:67:51:5b:c3:48:22:22:
cf:c6:71:0d:a3:b9:43:cb:03:a9:d3:85:22:bd:8e:
9b:fd:89:90:ff:63:fc:42:d4:fd:0e:bb:a8:3d:a0:
20:ca:3f:c1:06:2b:20:5e:97:e9:9d:e7:13:10:87:
95:f2:63:32:48:47:7f:a6:bc:0a:a8:12:c2:0e:2e:
dc:bf:05:de:9a:c8:b5:11:28:43:ba:f5:1e:b7:a9:
1e:9e:16:e7:35:8f:e5:5a:d2:be:5d:8e:97:a6:63:
5c:fc:c3:e6:8e:e1:2b:8e:ac:3c:04:65:1b:e1:d8:
38:28:61:d3:0f:28:e2:cc:20:7d:ca:be:79:69:34:
e4:34:b3:66:ed:d6:91:52:96:50:77:e5:1d:01:70:
7d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:B3:47:7C:62:8B:54:FA:8E:33:BE:D8:67:99:94:C4:81:17:FE
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:56:b7:ee:ef:b3:78:a6:5e:2a:40:31:13:c8:bd:8e:72:a3:
1d:56:fd:e4:6a:66:bf:5d:16:f0:9c:fb:06:06:f9:4b:aa:ca:
48:2c:5b:47:a0:eb:89:61:e5:44:25:8f:54:08:ce:10:ca:02:
2b:af:c2:93:94:ea:a9:51:12:5d:99:1c:8e:da:87:cc:27:05:
dc:16:c9:a0:96:cc:9d:9c:aa:38:e4:38:90:f9:bb:ee:d7:96:
0c:05:4f:93:19:59:32:6d:d2:48:8d:46:ae:2f:9d:e5:b1:7f:
c9:9e:0c:bd:23:d4:c2:c7:b0:1b:fe:c2:19:6c:19:bf:2e:00:
83:3b:e3:ce:e6:dc:da:85:d5:33:77:6d:3f:f2:c9:3f:40:18:
e4:a1:3e:cf:3b:0a:0f:fd:8d:4a:93:f8:d4:12:c0:57:5f:55:
7d:d7:cc:de:ee:f0:0e:4e:78:73:2c:bb:c1:b1:8d:8e:9c:1d:
b9:7e:b6:e6:3b:1b:17:94:c4:c1:7f:0f:9b:a7:04:a7:31:91:
71:a2:8e:86:fa:a8:08:f8:88:bc:90:9c:44:8e:f4:a4:68:c8:
86:dd:c9:eb:4d:b0:72:5e:7f:88:4d:2a:e4:b4:13:c0:17:e5:
0e:f1:1c:85:90:37:c2:08:4c:46:6c:3d:a7:d3:d1:cb:8a:ea:
ed:f8:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:36 2025 by rpki-client