Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
File: b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json)
Hash identifier: whLdpZGGmbI0S9cSTYWLIjF/vPccPEI/8ZYVPLsaXRs=
Subject key identifier: FB:CB:0A:25:A2:35:F8:38:34:D0:FA:F5:C0:D3:EE:92:77:E9:68:A5
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Certificate issuer: /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial: 019A00DA6E8C26D978F63E142DFF338423DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
Manifest number: 1050
Signing time: Mon 20 Oct 2025 09:01:46 +0000
Manifest this update: Mon 20 Oct 2025 09:01:46 +0000
Manifest next update: Tue 21 Oct 2025 09:01:46 +0000
Files and hashes: 1: QgZP-cnsGLbXLiB8i-j6fiH8Sys.roa (hash: S2EGBlisrDeYdPuuPvmxq5XQnasXOcn30j5uFZy7zjM=)
2: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: KpOOxPeEeS99mnYZOvO5lz0Z7U0q7yZOGkcbWoMtj9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:6e:8c:26:d9:78:f6:3e:14:2d:ff:33:84:23:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Validity
Not Before: Oct 20 09:01:46 2025 GMT
Not After : Oct 21 09:01:46 2025 GMT
Subject: CN=fbcb0a25a235f83834d0faf5c0d3ee9277e968a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:25:05:48:c9:88:d3:2a:1b:1e:89:cc:d7:
51:ab:10:9d:a9:92:72:8e:8f:8f:61:8a:9a:51:3c:
eb:7c:f0:cb:39:f7:a4:14:49:e0:99:11:b0:a6:cb:
4b:2c:75:8e:91:d5:bc:3c:66:25:be:21:10:25:30:
8b:0f:e9:9b:7a:cd:27:e0:d9:ef:5c:19:93:a2:c4:
67:47:f0:cb:84:b5:99:9a:e7:0a:33:85:9f:2a:9e:
7e:24:76:42:5b:c2:e0:6b:58:4e:86:61:74:38:19:
bb:5e:bf:30:8c:1b:68:25:70:24:dc:d7:11:ef:da:
9e:91:7e:91:7c:95:0a:2d:15:73:04:ef:4c:6f:40:
c2:d3:1c:63:b2:3a:3b:01:01:04:0f:7c:36:0e:be:
84:0b:84:f4:25:b9:1d:2d:81:71:05:21:32:98:cc:
4f:52:bf:4e:38:da:f4:40:e5:70:4a:18:b4:29:88:
6c:48:40:36:3f:cc:a0:98:93:5e:ca:0b:43:ae:8d:
8f:ad:5b:99:b7:d8:20:d8:41:cc:9c:e2:a4:31:a1:
2f:03:d8:8d:b2:b8:49:30:85:44:b3:84:90:d0:7f:
05:3a:46:ab:cb:7c:43:b5:56:d9:91:0d:51:d2:e2:
63:71:e2:36:0c:67:0c:84:35:c7:bb:51:1f:14:3b:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:0A:25:A2:35:F8:38:34:D0:FA:F5:C0:D3:EE:92:77:E9:68:A5
X509v3 Authority Key Identifier:
keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b6:99:b7:f9:2f:b8:e6:56:b9:84:00:be:1a:89:41:c5:4e:
b4:e8:99:5c:43:81:62:f4:c4:ce:0f:8d:a4:06:75:d3:3c:21:
b7:78:b3:48:dd:93:b9:04:72:47:36:1d:e7:be:fd:fb:b7:97:
10:0d:c9:e9:76:97:88:68:2c:4c:e2:c1:00:f3:a5:d8:18:8b:
da:14:1b:f5:74:92:ea:86:38:3a:a0:c1:b4:72:2a:47:4c:08:
42:6e:37:b9:95:a6:15:e7:c5:90:58:53:71:45:06:64:b2:9e:
8c:47:fb:68:66:56:78:59:79:47:c9:34:50:32:0b:80:75:d4:
2b:26:62:01:d4:f6:9e:75:8f:08:d2:ff:fd:a3:5e:87:6b:b6:
1e:04:cf:05:35:c1:df:5a:4e:23:94:1c:0e:70:ce:05:d5:3b:
46:68:68:c2:6c:6a:df:88:1e:97:7d:12:38:96:09:e8:d5:a5:
c7:3b:78:87:e4:41:99:53:0d:59:ac:06:de:c8:00:82:ec:e4:
ad:9d:8e:8b:af:a0:9a:8a:6f:2d:68:13:3b:26:9d:8c:94:6d:
64:8e:e0:7b:9f:15:b5:28:69:5b:d7:0b:67:02:c9:e1:05:56:
d6:4d:82:9c:3f:51:23:02:02:6d:24:b8:d3:b6:c2:72:8f:bf:
e4:73:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:48 2025 by rpki-client