Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json)
Hash identifier: crWF8v6xP2P6vFYwph4T0pJ2WzmQgw5RyTq/mVNYekM=
Subject key identifier: 52:F5:A9:25:5B:47:27:21:A1:AE:E6:37:8A:32:3A:CD:AF:A6:C9:03
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial: 0198D5F15B91F0CCD5A87760DEAA07205095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
Manifest number: DA
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: f1BUILnewKi0pPk0-cUIO9sX1N4.roa (hash: upOHsTvU2HpEvGGaQw5H57ty1Pp8ZO03Lz1+b3tzvFA=)
2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: y3u4zQ9Ty8JBnreNbcrsemRCYOA4zwvwY3iYkXbDjLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5b:91:f0:cc:d5:a8:77:60:de:aa:07:20:50:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=52f5a9255b472721a1aee6378a323acdafa6c903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:e7:5b:3e:49:9f:23:52:73:19:95:22:40:
8b:2f:f1:0a:b5:fd:0b:04:57:72:ac:21:6f:f3:9f:
79:71:9f:6a:bf:81:1f:a9:e6:bb:3b:d3:43:bc:d2:
b2:52:32:7f:a8:c1:17:ed:42:d2:90:64:7e:31:0a:
37:25:39:4f:66:44:09:6e:1e:fa:b7:8b:cc:62:13:
5f:58:ea:47:b5:e4:ac:01:b7:d8:dd:0d:db:78:18:
68:b1:79:a7:bf:18:54:e5:82:25:d4:d0:c3:5f:40:
64:57:93:65:f3:ca:af:26:f2:9b:de:bf:dd:a8:99:
07:0a:eb:0b:ec:74:5c:36:2f:47:ed:28:56:12:65:
14:01:c1:67:2a:57:eb:ed:63:86:b7:53:1c:8a:25:
39:44:5b:54:e3:7e:ff:b7:cf:89:0f:38:84:da:14:
0e:3b:04:c7:f4:70:a4:9f:37:8d:44:cc:a3:98:d4:
62:12:0f:22:c1:cf:23:d3:55:91:81:ac:80:c1:6d:
e5:bf:39:cd:8e:96:bb:a9:df:a6:3e:35:3d:14:9c:
48:85:cc:7f:92:45:06:63:97:9e:5c:be:0a:18:c1:
38:ff:2e:ac:5c:d0:ea:80:7f:89:40:b3:11:fb:2c:
b6:33:2a:2d:28:01:de:7c:d7:95:0d:1a:90:57:b5:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:A9:25:5B:47:27:21:A1:AE:E6:37:8A:32:3A:CD:AF:A6:C9:03
X509v3 Authority Key Identifier:
keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c3:ad:6b:c4:b6:aa:3a:78:5d:bc:81:f6:cc:b5:a7:1d:ce:
31:18:9d:9e:c3:5b:fe:ff:77:84:8e:38:c4:22:c4:51:24:12:
74:63:6e:c6:93:85:84:ff:3e:c4:f0:23:53:63:84:06:40:60:
41:20:9f:12:a4:b2:92:d9:17:60:46:32:60:f5:50:14:e4:1d:
ba:06:85:31:62:dc:16:4f:4b:24:8b:90:f3:9c:ed:8e:f1:b8:
f8:2a:35:8f:8d:c1:13:98:83:4d:dd:24:49:41:7e:7b:00:b5:
e6:b1:78:9f:30:fe:56:9d:c8:24:05:39:22:26:9b:f4:e7:31:
47:97:d4:70:19:e2:d1:b8:9a:1d:47:a4:d8:27:51:09:4e:30:
80:13:aa:ad:10:9f:77:3b:63:b0:ad:c6:4d:6a:dd:55:44:0e:
27:2b:8e:83:90:69:ea:89:76:99:68:62:1b:c4:64:fe:84:0e:
f6:64:18:22:83:23:f6:c1:90:87:91:1b:51:31:0e:99:a6:d6:
98:b0:c5:34:41:8f:43:9e:ca:b8:e5:f0:e0:ef:6a:4a:45:6b:
06:44:31:cd:7b:e6:08:b9:b7:d0:15:ab:77:3a:e9:a9:20:c0:
23:09:d8:d2:8f:79:95:8e:ff:91:a3:e7:96:f4:65:69:74:3f:
88:f9:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:55 2025 by rpki-client