Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File: m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier: X4c8g9G+SZO7ZjZTiRJedLGl9xxrsF0WM5eNU+QESNA=
Subject key identifier: 04:95:21:4B:D4:CD:33:CF:66:52:F7:49:B0:DE:48:99:D6:60:0E:A9
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial: 0198D54DD2A23EE679CD9BBB1A11E606C03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number: 0CCA
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: zNN9vBVyfdDuHhbagVmZsBBRxNOjfwRuABz8VAaw5NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d2:a2:3e:e6:79:cd:9b:bb:1a:11:e6:06:c0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=0495214bd4cd33cf6652f749b0de4899d6600ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:52:3c:9b:a0:7c:60:b4:24:f2:d1:4f:57:
fa:c8:5d:6c:2e:d5:31:b6:a8:b3:6f:20:23:3b:3e:
d2:e5:89:0d:28:73:99:d4:44:bd:6f:ec:63:94:8d:
56:2c:2b:a6:39:f8:1f:84:f9:34:cc:59:5e:3c:ec:
ee:0a:36:32:dc:98:ed:bc:17:6d:39:28:bb:f2:40:
c8:4a:13:df:9b:7c:4f:52:6b:65:fe:70:76:1a:82:
44:ad:b4:a3:63:b5:97:20:eb:71:06:06:ff:57:eb:
48:c9:2b:fc:89:63:09:42:74:70:a1:0f:13:ff:ba:
43:56:47:15:de:2d:fe:9e:32:c9:ec:87:e7:fd:bd:
c7:9a:a1:f0:11:af:40:16:1b:3e:8b:b8:96:2c:1a:
cc:e0:08:48:0c:eb:f5:72:3f:97:ce:dc:70:33:18:
3d:a2:88:b1:99:c9:c5:6e:8b:14:90:91:9c:2d:a7:
7d:1c:17:e5:ee:20:80:70:89:e9:56:a0:75:4c:f0:
e8:38:66:27:3e:8a:2a:f3:be:64:81:eb:a4:7c:68:
03:3e:63:cd:99:03:7d:83:91:8f:d3:43:1f:26:f8:
4a:be:07:1d:45:4a:0e:19:d4:73:d4:32:d1:b0:a6:
ab:4c:2f:8d:1d:96:00:37:81:38:af:fe:06:d6:e3:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:21:4B:D4:CD:33:CF:66:52:F7:49:B0:DE:48:99:D6:60:0E:A9
X509v3 Authority Key Identifier:
keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:24:77:1a:b2:24:3f:fa:5d:24:80:c6:19:7a:81:fe:f5:70:
76:bb:b2:5f:31:a3:46:95:84:3c:18:42:b5:10:0e:ab:24:5a:
7d:70:b4:b1:d0:a3:70:5c:72:1f:dc:f7:05:d3:72:cf:c3:af:
d1:36:c8:cb:0d:a2:a7:29:20:a5:7c:01:5b:94:b1:33:7d:97:
ad:d4:fc:3f:78:26:c8:16:f5:c1:94:60:28:85:3b:54:26:02:
e3:18:18:8d:76:3d:d3:8c:e8:9b:6e:e8:10:4d:84:07:32:1c:
b3:80:3c:22:5e:6a:ac:aa:67:3b:e7:e2:34:52:4a:61:83:e3:
60:ce:d5:ee:4b:47:d8:71:f9:85:24:54:bc:67:bc:89:4c:6d:
e3:69:92:04:3b:89:ec:87:35:ec:ba:b1:14:0f:1b:1c:91:b5:
7d:72:ff:7e:14:71:5c:ab:56:3b:d4:8c:cb:45:a2:25:b1:53:
05:5e:9b:dd:fd:4b:9e:e4:0a:c1:c5:9d:54:59:75:bb:87:9e:
ce:e7:e5:35:76:3c:7d:08:1b:f5:fa:64:22:47:bd:bd:ad:49:
1f:99:c1:f2:1a:1b:00:e5:fb:44:a2:93:0e:62:9a:ce:a2:e5:
53:9f:e9:04:c9:fe:dc:63:c4:10:c8:91:db:cd:1d:c8:2b:66:
a4:b7:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:31 2025 by rpki-client