Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: JfAvG2b+dQk/SG3YDzG1ysscyKT51u1brTbmv7my0IY=
Subject key identifier: 4C:BD:95:94:56:C0:66:35:12:6F:18:2E:08:A7:EE:A7:37:15:9E:20
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 0198D65FAD02423705E6EAD5388E5AD4ECA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0A8E
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa (hash: tukb95Gwd6x2BRzhLsZA0PSUEck+o+zvt8A2/7nuQh4=)
2: aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa (hash: o539XDvH7v6Q1Bwgk0cJJENARzLE2fligJ+8v8cr/cU=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: voKqSJmP/soKw3Z8TqkaKFq/vUqiQAB+0/wsnE0o4gs=)
4: tI9ka3nY65XI0hS6cPovdv7yr60.roa (hash: +06LGDfkS/BJNhqCcOcJbY1vvOjfeeWWAoEc0fhS6DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ad:02:42:37:05:e6:ea:d5:38:8e:5a:d4:ec:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=4cbd959456c06635126f182e08a7eea737159e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:41:70:39:b9:f0:c3:d8:f8:c5:1b:4c:8d:
13:1d:00:d0:5b:ca:f5:40:08:1c:09:3d:8a:2e:f2:
ea:95:f3:ab:5a:19:e6:e5:43:63:20:e2:74:98:81:
aa:3c:df:a1:8b:77:c2:07:22:0f:20:53:13:06:0c:
e7:87:d1:30:3f:fb:9a:ea:2b:24:9c:dd:3d:88:5a:
56:31:ba:6d:0d:16:e8:be:69:a0:19:3c:bd:3e:66:
98:df:00:77:f3:af:06:4d:cc:8a:6a:fd:77:fb:4f:
87:f3:73:ab:16:e4:3a:4a:37:66:4e:f4:9d:1c:fd:
ca:b9:fa:eb:b6:c3:ae:ff:e0:ba:c8:0e:b2:dd:2f:
05:1d:e3:93:63:c9:c2:eb:c2:19:ad:2f:be:68:46:
7f:9c:41:3a:1f:ac:b5:30:dd:54:c8:d6:e2:3e:0b:
83:ee:96:29:e9:86:9c:57:f1:97:47:27:c1:6c:fe:
07:44:2c:39:5f:8c:21:c5:f3:0f:04:98:af:7a:fe:
40:da:7d:70:4d:07:41:95:20:68:cb:a8:d6:48:43:
52:ae:42:c3:bd:a4:d6:a4:24:01:83:c4:aa:19:89:
1d:96:6d:26:ca:5b:d4:13:5c:f3:8e:6c:d9:a9:9e:
96:7d:c3:0a:69:12:9b:ff:47:f2:59:58:2a:a1:ad:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:95:94:56:C0:66:35:12:6F:18:2E:08:A7:EE:A7:37:15:9E:20
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:84:cb:15:2e:03:9d:55:2f:c1:b7:73:a3:69:5c:fd:1d:16:
9d:d9:87:13:57:e4:06:f4:f9:bb:0f:de:ec:bf:a9:60:2c:9f:
b6:0a:f2:e6:c7:86:e1:cd:0a:af:5c:73:62:f6:55:8b:3d:7a:
de:1d:5f:04:c5:7c:0c:b0:1b:01:52:f0:90:2a:40:02:96:39:
d3:19:cd:73:77:e7:57:c8:9e:5d:c8:4e:7c:b2:f6:95:1d:52:
cb:a3:66:9e:f4:2b:68:e5:e9:64:7a:d6:b4:e3:75:ed:be:9d:
d6:ee:88:f3:9e:d3:01:4c:10:16:91:01:be:67:7a:1c:34:af:
77:76:53:41:58:7e:ab:bb:f1:58:91:11:de:42:b0:9e:88:e4:
ad:2e:fb:b9:fa:5a:71:63:11:45:94:0d:7c:f0:83:5c:3a:74:
9c:69:2d:fd:a7:41:97:cc:39:60:64:4d:dd:4f:df:38:a9:c2:
e0:fb:ff:31:22:6d:28:07:94:c5:98:3b:ed:0b:2d:ef:07:70:
b8:53:79:92:72:8e:b8:2a:81:be:59:6f:2a:b5:d0:83:2b:8d:
61:0b:59:81:dd:82:07:74:ab:47:dc:3a:2d:96:9b:19:1a:7b:
c8:f7:ee:bc:8b:4c:82:61:d1:5c:2a:83:91:98:e0:1d:1f:f2:
75:4e:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:51 2025 by rpki-client