Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File: m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier: OuepXjFfNa+wztsZHVKopeMDyQyF3TmNxtZpznsfvfQ=
Subject key identifier: C0:DA:41:16:4B:7B:85:53:3B:20:AA:31:8D:8E:B5:9D:F9:58:2D:9C
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 019A01B5FC803D4FD1C360595F45F1CB14A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number: 0AD7
Signing time: Mon 20 Oct 2025 13:01:35 +0000
Manifest this update: Mon 20 Oct 2025 13:01:35 +0000
Manifest next update: Tue 21 Oct 2025 13:01:35 +0000
Files and hashes: 1: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: IOQXjk+kadNZrtDfpVsjTkQF6bYlyNAsIJnVvVko1tU=)
2: rhJcJSm_PMi8Ty8JJNNm9gt0gCs.roa (hash: 35jRPVs6JG51YgnZYUHY+bKhkmjaLSvQRKcI4y/GRMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:fc:80:3d:4f:d1:c3:60:59:5f:45:f1:cb:14:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: Oct 20 13:01:35 2025 GMT
Not After : Oct 21 13:01:35 2025 GMT
Subject: CN=c0da41164b7b85533b20aa318d8eb59df9582d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:29:59:e6:86:9b:ae:0b:b5:ce:11:68:8b:
3b:97:58:5d:96:6b:a2:b2:99:c9:e9:0c:61:7a:70:
c2:b7:53:df:df:a0:e4:8f:1d:db:b3:e4:f2:1d:57:
56:df:b6:20:b5:65:52:c1:0a:69:69:09:db:3c:e2:
ca:a3:4c:31:04:fb:76:c5:e0:3f:c3:9d:c4:ea:3f:
38:a9:3c:af:11:c6:17:de:a5:63:43:4b:8c:d7:38:
b5:ce:d6:1d:9c:21:b9:a7:6d:72:30:d1:fb:d9:66:
c8:ca:b8:5e:13:d5:1a:04:94:5f:4c:a0:b9:f3:93:
8f:2f:00:9e:b7:7f:ce:f8:c9:3d:17:1f:ac:f1:99:
25:27:9e:c6:80:54:c4:f0:cd:4d:9b:dd:2e:60:64:
d7:e2:40:f6:92:24:30:b3:8c:67:e3:ca:48:66:75:
62:12:5c:cc:05:18:b8:03:74:25:7a:ec:cb:2a:41:
42:f2:97:cd:31:00:fa:e1:8a:a7:76:93:34:b7:7a:
87:a7:f2:7f:56:46:ca:7e:3c:49:67:71:9a:f3:44:
88:98:a2:7c:a6:76:50:f9:75:da:65:4e:15:67:ae:
ad:b5:cd:c5:86:0e:15:ec:fe:c3:1e:85:d1:15:bc:
53:74:6d:8e:9a:24:93:7c:d9:ef:dd:e5:ba:26:fc:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:41:16:4B:7B:85:53:3B:20:AA:31:8D:8E:B5:9D:F9:58:2D:9C
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:14:28:79:db:eb:40:3a:7d:c6:ec:19:e9:61:eb:c7:c9:3b:
b0:db:07:12:92:4e:96:5b:64:68:d6:37:de:65:d3:d5:80:bb:
75:cd:b1:ac:78:fd:d3:77:08:78:14:69:cf:ad:b5:64:20:e8:
12:95:5c:af:9c:3d:ed:5c:7d:61:08:91:ef:c9:dc:08:4c:1f:
d1:45:70:7a:b6:37:2a:ae:40:26:59:ee:c3:3c:a1:65:ef:bd:
d2:f4:a8:7f:de:a5:6b:8a:69:59:53:88:66:08:be:ab:04:6a:
2b:84:f3:9f:45:a7:a9:eb:6c:6f:0d:f6:62:bc:45:11:19:ab:
cf:23:75:e6:e6:c7:e3:75:db:77:9c:03:bb:df:81:fd:04:23:
ee:e5:89:df:31:46:0e:36:87:d4:4e:ea:88:a3:ea:1d:89:62:
d7:55:24:21:d6:02:a1:b2:ce:d9:ad:c7:cc:a6:e3:55:a7:68:
7c:2b:68:7b:72:6b:4d:01:3c:0c:3d:b6:4b:6b:17:15:ae:96:
2b:af:9e:e7:8b:e0:70:2b:86:6f:1d:f0:37:d5:b6:69:a6:24:
1a:53:57:fc:58:de:1c:6f:84:5e:f7:70:3b:fb:ad:98:2a:90:
e1:fd:fd:71:71:60:97:84:59:fe:60:26:89:d4:98:7b:21:8b:
50:d4:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:35:29 2025 by rpki-client