Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: UyDSox6MRTU7TNkseWQmgdAYR7ds2fhzDk738nBT06A=
Subject key identifier: 31:CD:20:22:52:71:82:EF:05:F6:21:57:D1:5B:A8:4D:28:AF:63:9F
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 0198D54E746B1FF9EAE2BCF618B284E964CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 13F0
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: CYgcyO6VIVy4wYgrPqC0TxNuGXROIJcf5rauuhECE2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:74:6b:1f:f9:ea:e2:bc:f6:18:b2:84:e9:64:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=31cd2022527182ef05f62157d15ba84d28af639f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:55:ca:ff:af:fe:1a:b4:7e:4c:6a:87:f6:
60:88:38:6a:66:7a:52:9f:0e:b1:86:66:cf:5f:bb:
54:7d:cb:6e:40:a3:4a:e7:e0:59:61:e9:4b:7a:b3:
01:1d:69:6f:e4:e6:6b:5b:ef:72:67:1e:1d:2e:c9:
d4:16:e8:9d:30:b9:e2:2a:4c:35:0f:86:06:29:33:
11:9a:45:e5:62:60:33:31:0c:e3:15:1e:a1:b8:79:
b0:e2:42:3b:22:87:82:49:93:d6:8d:e0:43:b4:f4:
a5:56:67:4b:b0:29:71:c7:3c:34:d7:4d:d3:a1:a1:
55:54:65:48:b1:6b:79:cb:2b:a6:c7:fb:72:56:44:
a0:c5:e1:d1:ee:65:55:38:2d:86:43:85:6a:f2:33:
4f:37:09:d8:bf:fc:45:1a:ae:9f:75:5f:0f:d0:1a:
a8:54:1d:56:e7:7d:d6:f1:2d:d2:f9:47:31:7f:0b:
36:0e:02:54:8d:5c:91:1c:2a:f0:1b:37:c0:e4:80:
39:37:f2:49:89:99:8d:34:26:11:ea:2b:d1:11:b1:
2f:b8:2a:8b:34:3d:ca:a8:50:4b:38:18:28:e4:72:
1e:fe:fa:76:db:ab:fc:a9:3b:c4:89:a5:ab:dd:1a:
0d:bc:6e:53:d1:e7:4b:69:79:be:72:c8:62:d2:29:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CD:20:22:52:71:82:EF:05:F6:21:57:D1:5B:A8:4D:28:AF:63:9F
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a7:0f:dd:7b:41:e6:c1:37:6a:e0:dd:2c:ab:29:0a:39:82:
17:fe:72:0b:03:80:0c:c6:72:4b:97:41:dc:d2:d4:28:b9:2b:
0f:fa:40:60:4a:e5:c8:d1:eb:b2:17:13:f9:2e:5e:e1:dc:16:
b0:5b:0a:bd:57:20:21:a6:9c:6f:d9:e8:35:1e:8d:16:d7:26:
f5:f3:1d:97:1f:63:f6:45:6e:05:60:a7:fd:e0:e1:64:04:47:
53:a5:53:94:f9:aa:1e:d2:ba:44:16:1d:22:56:55:2a:6a:a4:
bf:96:2a:71:40:34:a6:37:31:7d:fb:ef:9f:83:e7:ba:2a:aa:
50:c4:3e:86:9b:76:36:a6:39:5f:c9:e2:3a:4b:9b:c5:7b:0e:
59:4a:05:05:8b:27:9e:ff:12:81:94:a2:fc:cb:57:bb:70:12:
9e:c2:78:39:c9:90:cf:37:b3:09:3c:f6:15:5a:39:85:eb:54:
7b:19:80:c5:f5:ff:73:be:39:da:0a:6e:4d:74:55:f9:cb:ea:
8b:23:d0:74:91:2e:3e:6a:7d:60:a3:97:ac:03:ce:2f:38:0f:
f1:fc:fb:fa:4e:10:77:ad:6d:f4:29:88:a5:98:1c:9a:c7:92:
89:8e:27:2d:82:ab:a9:79:2a:5f:ed:9e:91:90:e8:19:18:3a:
d8:87:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:23 2025 by rpki-client