Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: 7c8NJ2pTizfjIjfz8palT+36fDiUa3k0VXnKLLN1b8k=
Subject key identifier: F8:38:EF:DD:CA:F8:DB:6A:80:0D:62:4A:C6:9E:40:A6:15:69:77:67
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 01984408915B8A5C680FF340854BDB4B5D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0C79
Signing time: Sat 26 Jul 2025 00:01:08 +0000
Manifest this update: Sat 26 Jul 2025 00:01:08 +0000
Manifest next update: Sun 27 Jul 2025 00:01:08 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: 7a1mg8X+VH9wC1coNZ2n3OsNHgV40pDUJblOLmXuKjA=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:08:91:5b:8a:5c:68:0f:f3:40:85:4b:db:4b:5d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Jul 26 00:01:08 2025 GMT
Not After : Jul 27 00:01:08 2025 GMT
Subject: CN=f838efddcaf8db6a800d624ac69e40a615697767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:d1:c0:a8:39:a3:85:c8:eb:10:20:df:93:
86:14:f3:56:26:39:6f:a6:5b:9b:87:a3:5e:88:8a:
7b:13:d9:30:16:5b:b0:2b:ee:a6:da:3a:0b:46:2c:
98:f8:32:79:31:bb:2b:e3:e0:22:81:d0:1d:f5:12:
42:fc:6c:08:16:95:e5:31:30:d5:d7:4d:f9:6a:d0:
3d:30:3a:54:f4:8c:d2:87:a0:72:6b:e1:ef:44:d8:
76:65:cd:5d:21:16:71:0c:f8:30:a3:f4:3a:fe:48:
14:00:9a:95:39:67:e1:f1:27:db:7e:a1:44:d4:60:
30:60:27:6d:4a:38:07:1c:6e:e6:2f:00:63:65:87:
5e:3d:2e:93:e5:0e:25:b0:f5:f2:08:19:a7:55:1a:
c9:3a:2f:28:1b:37:db:dd:85:d2:92:88:5a:c5:39:
77:4d:e2:f4:49:5e:96:8e:36:bf:5f:e2:51:36:bd:
a3:6d:4a:12:57:4b:c7:60:8d:5d:84:3a:1c:58:98:
50:2d:61:db:6f:10:8c:bf:27:f0:27:2e:c7:28:b0:
dd:a0:6a:e4:9e:6b:67:f3:a0:7a:e7:4c:01:9b:f0:
2b:65:7e:0e:1f:5b:60:50:02:08:71:a4:45:9c:19:
ea:fd:00:11:0d:94:58:c4:64:79:61:8a:7b:4b:1d:
6a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:38:EF:DD:CA:F8:DB:6A:80:0D:62:4A:C6:9E:40:A6:15:69:77:67
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:63:ec:0d:94:f4:54:0d:00:e2:89:39:a6:84:80:12:c6:cf:
2d:9a:9a:7f:b0:c2:0f:9c:bd:fe:91:90:40:33:a4:c0:16:7b:
c2:17:69:ba:66:71:f4:f8:d1:c7:1d:34:c0:41:a6:6a:92:24:
ed:c1:33:23:77:10:93:a4:42:9d:19:a4:63:d8:e6:97:66:61:
e3:fe:8b:1c:aa:61:36:c7:33:ec:fc:df:07:6d:17:a6:f3:25:
3d:c6:8b:df:79:0f:73:41:e4:fd:69:33:8f:dc:44:84:58:9e:
3b:b6:e0:4d:8a:fa:1e:43:b3:3c:47:19:37:6a:f2:8a:19:4b:
f3:ba:78:f7:86:5a:26:b6:6e:c8:81:b3:79:9a:62:82:7e:a0:
b2:e9:42:5d:95:ed:c8:56:a8:2e:5f:d7:ee:2f:32:0f:47:37:
52:8f:42:bb:cd:c3:6b:82:11:c7:b7:c9:dd:38:a2:ca:5a:6a:
b9:d8:06:61:7a:11:8c:58:e7:86:fe:27:dc:34:3c:b7:65:ba:
96:89:c6:14:47:b2:9d:8a:9c:01:f8:b5:a9:4f:aa:3c:e3:25:
84:61:17:df:a1:7f:ca:35:4a:32:d4:bc:83:2e:d1:a1:fe:1c:
20:b1:28:1e:9a:42:d1:b0:a7:da:d3:b7:ac:69:72:77:7c:3c:
6b:1e:0b:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhECJFbilxoD/NAhUvbS10DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZGJhOTUyOTBhOTg1YTY5Nzc2M2QzMGFiNDJmOWMzNzg0
MDc4YjIwHhcNMjUwNzI2MDAwMTA4WhcNMjUwNzI3MDAwMTA4WjAzMTEwLwYDVQQD
EyhmODM4ZWZkZGNhZjhkYjZhODAwZDYyNGFjNjllNDBhNjE1Njk3NzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmPRwKg5o4XI6xAg35OGFPNWJjlv
plubh6NeiIp7E9kwFluwK+6m2joLRiyY+DJ5Mbsr4+AigdAd9RJC/GwIFpXlMTDV
1035atA9MDpU9IzSh6Bya+HvRNh2Zc1dIRZxDPgwo/Q6/kgUAJqVOWfh8SfbfqFE
1GAwYCdtSjgHHG7mLwBjZYdePS6T5Q4lsPXyCBmnVRrJOi8oGzfb3YXSkohaxTl3
TeL0SV6Wjja/X+JRNr2jbUoSV0vHYI1dhDocWJhQLWHbbxCMvyfwJy7HKLDdoGrk
nmtn86B650wBm/ArZX4OH1tgUAIIcaRFnBnq/QARDZRYxGR5YYp7Sx1qaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPg4793K+NtqgA1iSsaeQKYVaXdnMB8GA1UdIwQY
MBaAFJvbqVKQqYWml3Y9MKtC+cN4QHiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQt
ODBhNjZjMGZjODg0LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQtODBhNjZjMGZjODg0
LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWPsDZT0
VA0A4ok5poSAEsbPLZqaf7DCD5y9/pGQQDOkwBZ7whdpumZx9PjRxx00wEGmapIk
7cEzI3cQk6RCnRmkY9jml2Zh4/6LHKphNscz7PzfB20XpvMlPcaL33kPc0Hk/Wkz
j9xEhFieO7bgTYr6HkOzPEcZN2ryihlL87p494ZaJrZuyIGzeZpign6gsulCXZXt
yFaoLl/X7i8yD0c3Uo9Cu83Da4IRx7fJ3TiiylpqudgGYXoRjFjnhv4n3DQ8t2W6
lonGFEeynYqcAfi1qU+qPOMlhGEX36F/yjVKMtS8gy7Rof4cILEoHppC0bCn2tO3
rGlyd3w8ax4L0Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:47:07 2025 by rpki-client