
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: M5sa2cikf3/y5C8hYjiyP4vV+Xt9JuwCXbk/T+MNpjM=
Subject key identifier: C6:3C:7A:81:99:C9:1E:0A:BA:D6:2E:83:76:EA:61:5B:21:11:12:FB
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 01984965B0D39B224229F0DF18C818417CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 0C02
Signing time: Sun 27 Jul 2025 01:00:57 +0000
Manifest this update: Sun 27 Jul 2025 01:00:57 +0000
Manifest next update: Mon 28 Jul 2025 01:00:57 +0000
Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: p1e7GE3jUO8DUFHdVIQGbINtLn5KTnFiwMLRHSDmJSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b0:d3:9b:22:42:29:f0:df:18:c8:18:41:7c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Jul 27 01:00:57 2025 GMT
Not After : Jul 28 01:00:57 2025 GMT
Subject: CN=c63c7a8199c91e0abad62e8376ea615b211112fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:06:db:d2:e0:ed:c0:f4:02:1b:a8:c5:b7:
df:7a:cb:15:c4:6c:90:98:fb:44:ab:aa:99:aa:fb:
53:f7:5c:b2:f9:e5:01:3f:3b:cc:99:0c:01:5f:11:
8e:7d:f0:68:fe:74:71:59:52:ea:59:e4:0b:cc:14:
26:4e:fe:bf:36:c9:53:6d:32:15:c5:76:26:e8:5c:
af:89:e1:a1:ef:8a:57:7e:62:fa:5f:0d:d9:49:0e:
db:20:b5:45:9c:98:30:08:4e:e9:38:87:55:6c:e9:
8f:fa:2a:02:7f:58:72:17:55:49:d1:28:03:da:ea:
ff:42:4e:f1:50:d1:ce:33:fa:08:9e:1f:35:cb:3e:
7f:c4:0b:c7:15:11:9d:ba:a3:ee:1d:ef:c0:e6:bd:
b4:99:ca:1d:62:5d:f2:f5:70:e7:fb:2a:a2:95:40:
39:59:f1:1d:84:d8:4d:5c:b3:93:bf:78:69:59:64:
3c:20:01:4f:0b:a2:0c:7c:f4:11:fd:4a:cc:c4:0a:
27:f1:e0:dc:a5:3e:9d:16:6d:77:3f:9d:e8:3d:f0:
3f:d2:09:24:f9:fb:ef:d3:ca:e0:6f:ce:ca:ab:ad:
b9:20:9a:3e:24:4f:61:97:e7:37:78:5b:ad:d6:18:
05:a5:ed:a7:60:a1:c4:64:4a:3b:12:32:90:48:c3:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3C:7A:81:99:C9:1E:0A:BA:D6:2E:83:76:EA:61:5B:21:11:12:FB
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ee:a0:0d:a0:a7:3d:1b:bf:4b:59:2c:b2:23:56:0c:41:8d:
2b:b4:26:86:98:e0:8b:ce:8b:cb:76:ad:8a:33:2b:e3:52:60:
0a:8d:a0:f5:73:39:82:29:53:09:dd:88:55:a3:cc:a2:4a:2e:
e8:d2:61:b5:37:6e:ec:7d:3f:ab:5a:71:2c:27:cd:bf:23:99:
ba:14:5c:e2:33:b5:37:ce:03:b4:a8:f6:6f:0b:45:15:4c:b3:
45:bd:28:e7:37:f2:65:aa:d2:00:3b:be:11:a5:6e:b8:3f:5d:
ca:fd:d0:f3:29:60:39:91:c5:d5:5d:ab:e8:96:93:fb:f8:e8:
e0:6a:cc:e9:af:35:b5:84:43:4e:d5:ee:ca:43:53:45:16:7b:
48:1b:71:e8:08:e5:cc:a4:38:be:f9:39:01:4b:cc:0c:4a:eb:
2f:6a:47:58:ea:02:38:5e:71:b8:e3:f3:fe:c9:39:b7:80:1c:
b2:59:05:9d:03:a4:e0:af:60:8b:2a:ed:68:8b:5a:b1:ae:29:
a1:7b:83:51:f3:11:00:48:14:31:10:fd:62:62:eb:08:e5:13:
df:6c:c9:22:09:fd:15:1e:ee:e7:6d:7a:a4:ea:d4:08:8c:a7:
ae:5a:8d:86:8e:cf:b8:e1:1e:d6:43:3a:53:ca:a4:95:89:7b:
f2:a8:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:10 2025 by rpki-client