Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File: m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier: lWabWSesWxDp+F9YCIdbIlZfbtus7pIlAyN9qEa6j20=
Subject key identifier: 96:34:35:FC:4D:B1:55:A7:4A:3F:CE:E2:A1:1A:3C:DB:68:F8:2C:87
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 0197B88FC853AC6AE0BE6F10C6F15CD1C610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number: 09A8
Signing time: Sat 28 Jun 2025 22:01:59 +0000
Manifest this update: Sat 28 Jun 2025 22:01:59 +0000
Manifest next update: Sun 29 Jun 2025 22:01:59 +0000
Files and hashes: 1: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: 4rJ+ep/Nq2jZWpL08sTKQZbIDhvRqbraJWtC31pQT4U=)
2: rhJcJSm_PMi8Ty8JJNNm9gt0gCs.roa (hash: 35jRPVs6JG51YgnZYUHY+bKhkmjaLSvQRKcI4y/GRMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:c8:53:ac:6a:e0:be:6f:10:c6:f1:5c:d1:c6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: Jun 28 22:01:59 2025 GMT
Not After : Jun 29 22:01:59 2025 GMT
Subject: CN=963435fc4db155a74a3fcee2a11a3cdb68f82c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:9e:cb:ce:fa:8b:ae:7b:4c:7b:4b:37:39:
da:7a:2b:53:71:de:6d:d8:89:81:c6:39:df:85:d5:
dc:e1:c2:6f:14:ee:6c:d7:f6:6c:23:3d:dd:eb:39:
6d:f5:79:32:ef:66:13:20:e4:90:3c:05:0d:12:da:
aa:5a:41:77:5d:bc:41:17:f5:75:ee:57:ec:2f:29:
f7:8a:34:ed:bf:4d:2b:1f:7e:a1:f3:bb:70:9b:31:
4b:fc:4a:88:3a:a4:46:3e:e5:ac:62:10:ba:36:48:
c4:5f:16:f6:ae:86:f7:5e:91:79:77:12:c4:88:a5:
b6:10:46:3d:5b:20:78:1a:ba:89:74:b3:bb:7c:b2:
8f:a6:20:6f:fa:bc:3d:fd:8e:89:21:67:1e:f1:91:
c5:fe:84:4a:23:c3:96:67:f0:36:f3:f4:30:44:54:
cd:5f:20:91:8b:19:04:38:99:ae:37:10:24:67:10:
9d:7b:5d:1f:29:69:f0:e0:0b:f9:7f:1c:78:35:69:
80:5b:dc:59:e9:78:59:ee:65:c1:0b:d1:36:39:09:
93:47:da:ce:8a:c5:1c:aa:f7:f5:f5:ca:de:94:eb:
ce:43:6c:9b:4d:b0:d3:f9:86:30:00:5e:ca:72:77:
92:48:63:bd:88:2e:7c:96:3a:75:1c:99:d5:6b:d7:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:34:35:FC:4D:B1:55:A7:4A:3F:CE:E2:A1:1A:3C:DB:68:F8:2C:87
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:92:d3:bf:0a:b9:2f:ff:1a:16:8c:86:8b:6d:6d:75:a2:3f:
9f:2c:13:09:95:09:15:1f:ee:62:5a:66:62:56:63:91:8b:58:
88:ec:2d:2c:d1:48:31:ee:be:9d:b9:36:cc:b9:a6:84:69:98:
2f:d6:d1:16:6c:ab:d3:dd:ed:a8:11:ed:23:69:38:aa:ea:5b:
88:26:ac:22:0f:c5:57:ff:53:a4:55:2f:26:c8:2b:c3:9d:15:
b1:ac:15:af:0b:76:bc:37:55:ad:94:29:de:ed:1a:3c:09:88:
40:ae:22:dd:46:05:d7:94:31:26:f4:67:dd:b8:04:f3:76:dd:
a8:69:a8:b7:36:e6:72:d2:79:2f:38:91:6a:62:1d:f8:de:20:
62:04:fc:52:3d:f5:c0:4c:ce:f1:ba:38:c1:e1:c5:82:17:13:
41:23:cb:40:f2:22:31:54:b6:e2:3a:b6:b9:90:84:ac:f3:bc:
57:72:68:95:4e:dc:63:27:8e:16:d7:df:b3:1a:94:b4:98:24:
1d:8a:66:73:a2:15:2e:80:10:54:52:b8:58:43:29:20:bf:a5:
34:cb:b6:3f:88:67:18:6c:81:3d:90:80:f9:6c:50:a4:6c:df:
4f:e4:34:24:33:c9:be:ea:64:b2:7b:5b:af:90:7f:8e:a6:a9:
64:b3:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:24 2025 by rpki-client