Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: f9zRUZWSostxh0AGpCAgEMT2Ff2betj9JpZnGSCDnsI=
Subject key identifier: 52:87:C9:D4:CC:3E:A4:48:1B:59:26:02:F6:F5:48:FD:5A:B9:89:C1
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 01984D42621EB8EE9DBA86355CFC0A521079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 19:00:52 +0000
Manifest this update: Sun 27 Jul 2025 19:00:52 +0000
Manifest next update: Mon 28 Jul 2025 19:00:52 +0000
Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: sepFAXQBNzFWvOlYor9C5kJxH8eYAQmslYYiNikQ1Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:42:62:1e:b8:ee:9d:ba:86:35:5c:fc:0a:52:10:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Jul 27 19:00:52 2025 GMT
Not After : Jul 28 19:00:52 2025 GMT
Subject: CN=5287c9d4cc3ea4481b592602f6f548fd5ab989c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:ff:dd:33:eb:5e:c1:d6:88:66:98:39:83:
de:a3:7d:5a:fc:16:7e:33:54:2d:57:aa:53:e7:20:
74:28:44:89:fc:16:85:ff:22:16:48:5c:78:68:6c:
6f:e1:44:f6:31:2f:6b:8f:6a:be:94:e1:15:a8:68:
49:e6:e5:b8:74:af:f9:63:d6:7f:4b:4b:e9:60:ad:
b2:4e:67:93:41:e5:97:5d:44:23:ec:5f:e8:63:7b:
05:c0:12:96:67:1c:f9:fe:3d:fa:a2:99:d9:49:25:
04:f1:03:f8:f9:f2:e6:00:80:68:ae:11:9e:22:ee:
cc:01:ec:d1:92:88:ca:aa:7e:f5:bf:ab:c7:f8:63:
ad:8a:9d:99:b7:e6:78:fc:e2:4d:22:72:27:ae:76:
2e:d0:a9:07:92:2c:8b:8c:75:c8:fa:e3:4a:69:17:
2f:61:92:cb:2f:78:5e:c1:e7:5b:3a:cc:b0:84:c8:
27:75:4f:06:1b:ea:0b:42:3e:cf:53:3f:be:86:a3:
9a:bc:89:7e:92:6c:9a:c4:26:13:4e:61:3b:ca:3b:
c3:5b:2b:ce:29:a1:3b:e8:4f:68:a5:d2:39:e0:e5:
4c:66:0a:26:61:1f:5b:1e:1c:62:7a:59:fa:b5:7c:
b9:fb:2c:09:e7:1c:3a:27:17:ac:0c:15:96:c7:c6:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:87:C9:D4:CC:3E:A4:48:1B:59:26:02:F6:F5:48:FD:5A:B9:89:C1
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c4:9c:f8:cb:5d:ec:25:c6:0b:0d:99:2e:e5:bb:49:7a:63:
a4:d0:3c:fc:2e:25:07:4a:58:a1:43:87:c2:06:4f:75:7d:93:
a1:c2:92:71:1c:9b:35:73:71:f4:b7:91:36:84:5c:94:c6:fd:
9b:4f:6c:42:64:65:18:ba:72:d6:55:a3:be:c4:b5:c5:59:90:
8a:f8:38:19:c3:8c:b8:83:57:8d:31:ca:b0:94:75:76:9a:b1:
dd:71:c9:2f:b8:ed:03:e3:74:5e:67:66:96:24:41:67:bf:e6:
a4:2b:c7:97:50:90:36:9f:10:ef:5f:4c:88:86:b5:0e:c4:89:
3c:bb:ae:40:aa:6a:51:2d:4c:30:9b:78:3c:4f:5b:e2:fe:02:
a1:a8:35:e8:03:71:ac:80:7a:20:90:2a:0f:3f:ea:ce:dc:d8:
56:fb:5f:50:8f:a8:e1:6f:c8:21:a8:77:31:2b:24:12:a1:c0:
b4:15:e1:2b:ec:d1:73:70:53:8c:0f:bc:82:7e:21:8f:a3:dd:
18:16:47:2c:23:53:04:85:67:62:59:2a:a4:11:77:4e:83:d7:
6f:40:e9:0f:73:63:4f:f0:a4:21:9f:e8:2a:7c:1a:e0:92:3f:
92:69:5d:8f:6e:cd:fd:04:76:ce:cc:9e:8b:dc:c7:7d:43:48:
ca:c0:20:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:44:07 2025 by rpki-client