Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File: m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier: DgZiKIbcN+1XiDCQDpl0WfVc2EB0jlvAC4la3tTMgOI=
Subject key identifier: 89:69:A9:67:91:EE:FB:7E:37:E1:11:F5:F8:C1:91:01:F0:FE:DF:A2
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 0198D5BC06269B44D6A0ADB28DBBC4D1792C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: mMd9t7Yc5uyRHNjC5QZJE9SPsfaqu1qpZnsBxQeDjXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:06:26:9b:44:d6:a0:ad:b2:8d:bb:c4:d1:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=8969a96791eefb7e37e111f5f8c19101f0fedfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:da:a7:38:24:93:f8:82:15:78:2c:f6:f9:
4f:df:a3:fb:cb:4f:5e:b9:88:6d:7c:62:e7:d8:32:
78:57:98:d9:9d:b1:1d:31:8e:57:7c:cd:dd:f0:31:
c4:c7:4a:58:70:3d:52:e4:b4:01:9f:dd:f8:cf:c0:
24:f2:c4:bf:f9:a4:9d:aa:09:6d:bd:90:91:13:f7:
e9:2e:42:9b:ea:5f:99:c8:43:3c:1b:f4:85:58:4f:
64:71:7d:e3:ae:0a:fe:6e:7b:26:65:47:63:57:39:
d4:11:75:69:90:33:9a:c2:14:1c:71:ef:82:00:a4:
0a:b7:48:23:fc:ac:d9:12:12:01:f3:2f:df:b3:50:
19:fd:af:24:53:1e:c2:46:1a:8a:8e:1c:92:cc:14:
b4:47:08:8f:1e:11:1b:e7:79:84:48:30:d7:e2:fb:
8a:1c:53:50:26:7c:49:62:6b:94:ce:20:d4:a4:52:
b6:8a:9f:33:5c:56:81:0a:65:ec:f9:c0:fd:95:6f:
1e:c1:47:d5:66:4a:45:fb:58:c9:2c:3b:71:18:0f:
2e:fb:a7:41:ea:6e:60:d8:dc:e5:f7:cc:b5:86:3f:
22:35:3e:e2:8e:52:cb:6e:30:04:1b:e2:3e:d9:75:
b8:34:a5:8c:15:13:c9:38:17:d3:59:e1:b0:02:e1:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:A9:67:91:EE:FB:7E:37:E1:11:F5:F8:C1:91:01:F0:FE:DF:A2
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:61:d5:35:a5:8d:9f:2f:9c:55:85:e4:1e:b6:fe:da:19:b1:
b4:4e:8a:b1:6a:5f:06:a4:1e:c3:e2:3f:02:df:f1:f2:38:30:
5c:f7:bf:c4:b3:8b:50:04:0a:0b:1f:45:ee:c2:ea:f7:27:77:
f2:1a:c3:12:2c:07:b8:33:17:9c:31:da:ef:61:2a:42:aa:2b:
1c:13:00:79:76:36:39:3d:91:36:d1:d4:60:61:55:68:c6:3e:
53:8c:9d:de:90:36:c8:99:97:51:2d:24:51:41:c3:88:32:ab:
6c:b1:cc:b5:12:28:5b:0b:ac:6e:6d:72:8d:d9:0e:bb:c8:da:
a2:d0:d5:53:0d:23:fb:f3:1e:67:de:c4:a6:9b:21:5a:07:05:
cc:b1:61:43:b2:cb:be:03:56:63:1b:41:60:f7:f8:d7:0c:26:
a1:e4:36:fd:f7:93:20:97:83:51:e6:97:60:0a:d4:2a:b3:e9:
2d:74:1a:98:1e:bb:e8:e8:6f:fd:87:45:c4:a4:90:d4:c9:98:
82:17:41:a6:79:37:9d:2e:99:cc:3e:1f:9d:ec:54:d3:28:f8:
ab:0a:24:6e:ad:1f:0a:f8:f7:29:30:fc:f7:88:28:61:a3:1b:
34:36:c0:a4:ea:0a:75:f4:10:e9:ff:28:3a:6d:1a:58:d9:de:
e1:29:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:46 2025 by rpki-client