Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File: m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier: NJGuseSTnrgYxiNNlBSDIMlWn14PhtjbkTST1IuiHoI=
Subject key identifier: EC:E2:0D:8C:00:95:C9:76:01:A5:C7:20:C0:7A:B2:2F:20:F8:D0:9E
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 0198D65FADCFB99EF7BC7ED43942F4542D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number: 0A3C
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: u611DQXilpngBgPDlVOkzWMXG6DhaXGt3XLG0/BQbqc=)
2: rhJcJSm_PMi8Ty8JJNNm9gt0gCs.roa (hash: 35jRPVs6JG51YgnZYUHY+bKhkmjaLSvQRKcI4y/GRMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ad:cf:b9:9e:f7:bc:7e:d4:39:42:f4:54:2d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=ece20d8c0095c97601a5c720c07ab22f20f8d09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:8b:cb:4f:2e:7f:8a:60:3f:eb:e8:da:6e:
f7:81:dd:f9:b7:63:33:53:70:fd:2a:be:27:da:29:
90:fd:a4:d6:61:08:78:6c:03:d3:e4:ce:54:ef:00:
e4:77:b3:e4:8c:4f:d7:05:37:d7:91:ca:7a:30:7b:
d4:14:3e:1b:91:d5:24:2c:86:bb:93:2b:b1:57:01:
76:36:15:49:53:a6:07:05:a0:ac:66:9b:ed:af:70:
1b:c5:1a:cc:0e:32:fe:1a:42:7b:77:e0:12:f6:6a:
9c:15:16:2d:cf:96:a1:a6:55:07:a1:ae:93:24:9f:
33:07:0f:48:8d:ec:69:66:d6:d6:95:01:28:7b:6b:
e4:4a:2e:42:7e:e2:1b:f4:30:76:b5:01:36:0d:1f:
ff:26:ae:f4:17:49:ba:52:95:54:ff:e9:a1:a9:88:
44:31:86:6b:ee:1e:7b:8c:a4:b4:84:0c:dd:83:dc:
44:1a:71:63:ca:d4:b7:b7:17:d5:ae:f9:8c:5d:a7:
9e:ab:af:0e:15:1c:b3:fc:ee:2a:a7:53:c8:e5:93:
2b:3c:33:03:44:0f:ad:a9:ad:f8:24:5c:5f:82:e5:
79:20:8a:7a:96:cb:4c:cf:1d:e6:32:bc:10:db:d5:
74:dd:ac:d3:8c:13:20:b7:c3:8a:50:d1:08:54:64:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:0D:8C:00:95:C9:76:01:A5:C7:20:C0:7A:B2:2F:20:F8:D0:9E
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:40:30:09:38:8e:4d:f4:37:04:b5:19:3a:64:41:ce:29:a9:
cb:1f:94:e3:d7:44:53:c6:2f:0b:3c:c3:e0:af:8a:53:13:6a:
d8:a3:ea:a1:d2:88:5c:fa:39:d1:63:6e:57:ad:57:b8:f6:36:
dc:9d:c8:16:32:c9:31:7a:16:75:90:92:c6:da:22:a6:8d:b7:
20:93:4d:91:6a:30:85:f1:a0:eb:2d:f0:a6:23:2f:21:a9:c3:
13:5e:21:d8:97:a7:fc:f0:13:c5:aa:6c:e6:50:4d:ad:04:c0:
e8:d1:d2:d3:92:af:85:38:1e:45:8c:db:be:55:10:a0:e4:a8:
d1:49:26:65:9e:ba:fb:37:7e:5c:83:a4:0d:b7:03:2f:91:27:
b2:fb:f1:10:c7:dc:02:cc:28:d7:36:f4:b1:31:9d:c1:95:62:
9b:49:8c:cb:38:7f:c9:83:bd:e3:4c:65:ba:24:09:ce:84:55:
31:65:2e:d2:72:6d:34:25:92:91:54:ef:4e:ab:e7:7f:69:e6:
e2:20:40:b8:2a:3d:d2:77:8f:d9:d9:d3:c7:c5:f2:78:9d:2d:
4d:13:30:f7:b7:8b:5b:38:51:32:03:3d:79:f0:03:9d:b9:a2:
5d:99:9e:44:49:20:c7:c2:1e:f2:fb:34:03:7e:23:9e:3b:38:
ff:34:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:10 2025 by rpki-client