Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: l3YNrQr1Vs4M/KriQWXG3neEuyKB3NaLm31346vFnJI=
Subject key identifier: 59:BA:C0:78:37:32:27:E6:7E:B0:40:2B:C6:8F:60:7C:C9:3E:4F:EA
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 0199FEB51C8E479269615F3666585C7DAF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 148A
Signing time: Sun 19 Oct 2025 23:01:46 +0000
Manifest this update: Sun 19 Oct 2025 23:01:46 +0000
Manifest next update: Mon 20 Oct 2025 23:01:46 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: dc/ccdchlODnJhJhAQLEbN1VuMNJdXSDO7PXKbQEfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:1c:8e:47:92:69:61:5f:36:66:58:5c:7d:af:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Oct 19 23:01:46 2025 GMT
Not After : Oct 20 23:01:46 2025 GMT
Subject: CN=59bac078373227e67eb0402bc68f607cc93e4fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:5f:48:98:35:e2:4a:8f:95:f5:9d:65:ae:
75:66:1e:14:b6:f9:47:03:2b:f9:7a:5c:59:4c:8b:
b2:d8:ec:8e:66:f5:49:d3:90:ab:fe:02:6b:7b:49:
39:89:c4:01:55:44:39:bf:4e:83:25:87:9a:81:a6:
b2:a9:5a:a8:72:07:12:b7:91:6c:62:fe:56:8c:c6:
2f:a8:48:65:70:dc:36:7f:2c:6a:c4:73:a6:59:79:
8a:f4:6a:03:8d:db:e3:43:d9:73:da:36:22:ca:ac:
8c:a7:40:f9:60:c2:84:1d:99:15:c7:23:8e:63:37:
02:3e:82:64:d5:c6:8a:d7:a8:2c:15:7a:ca:fa:23:
b3:87:93:fa:af:f1:c9:44:7b:61:12:24:72:66:25:
02:e4:d8:f0:f3:30:96:d4:50:c1:8c:9e:c7:c2:d4:
b3:af:6c:96:4a:75:e2:c9:76:45:93:5a:14:20:ce:
49:7d:68:42:52:45:95:59:95:7c:99:2d:3a:a5:2a:
01:6d:d0:e0:3e:a9:e8:44:78:7e:ea:39:99:03:9e:
87:fd:3f:4f:59:1e:45:4b:fa:2f:28:e7:f7:65:85:
c0:d5:b2:fd:2d:6a:66:51:2f:58:8c:6a:53:ef:af:
d2:38:b6:55:95:59:13:05:b0:06:8e:28:1a:1b:35:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:C0:78:37:32:27:E6:7E:B0:40:2B:C6:8F:60:7C:C9:3E:4F:EA
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fb:4b:73:0f:f2:ec:42:75:44:a0:19:cf:d0:7b:7f:4b:3e:
c3:1f:bf:18:e9:db:95:e9:ff:9b:39:c2:14:4b:08:61:e5:bd:
ec:ff:8f:da:be:80:8b:aa:d2:ba:d6:c5:ca:28:ba:ec:12:9f:
58:0e:68:39:fe:42:c1:d1:52:96:23:22:a6:f3:cc:75:0c:8c:
b2:f4:d0:23:d3:64:9f:4e:ef:30:14:06:54:0d:bc:d6:52:30:
db:11:64:40:eb:8c:b1:88:a1:bd:21:85:8a:d3:e5:1a:97:52:
8a:52:60:5e:e4:8a:a7:ee:97:12:7d:51:c0:0f:20:70:9e:8f:
08:6c:e2:61:1d:36:81:67:ce:d8:ac:9d:7f:b8:80:52:52:c7:
10:91:ca:85:d4:67:87:20:ef:94:98:53:5f:c8:88:a4:b0:10:
6c:bb:80:5b:6b:d5:fa:1d:f3:d1:ee:f4:4c:80:f6:bb:f0:59:
b7:8a:2a:d3:ac:20:19:e5:57:57:7f:41:4b:4e:75:79:92:30:
c4:79:06:1a:e9:82:56:9e:af:82:2e:b7:e9:bc:73:57:25:93:
10:da:ad:b0:37:a6:a6:96:09:f6:04:00:99:0b:a3:cf:71:93:
f8:79:de:97:94:e8:8a:d0:8f:9b:ab:b9:0d:68:79:cf:63:38:
ef:36:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:35 2025 by rpki-client