Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
File: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft (raw, json)
Hash identifier: 7fC7SRN9zKPnc+1SAq5JbO73Vg7lO0VwvhlK8L4EhhM=
Subject key identifier: F9:FB:4D:F8:B1:C8:4D:29:FB:01:F6:33:E2:4E:7F:DD:ED:30:D0:9A
Authority key identifier: 9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
Certificate issuer: /CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Certificate serial: 0198499BECC9BD6026532B3EE8D63E014EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
Manifest number: 1407
Signing time: Sun 27 Jul 2025 02:00:12 +0000
Manifest this update: Sun 27 Jul 2025 02:00:12 +0000
Manifest next update: Mon 28 Jul 2025 02:00:12 +0000
Files and hashes: 1: 1-gKSfvIN-nj0ZloNW8DzQVcPMUI.roa (hash: jjlcCOoXxhW/QhUDEGdmxYJMbYMGzmfukEFaEb16efs=)
2: Q5geBAbDdm6rceW2SdCihO9xnZc.roa (hash: qZEJzIP9JlpWgbCaDR3U8w6e1Yf/y2ElsSB5u5JRzoI=)
3: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl (hash: +b/l+tHVosxH/nJalYYeBnrWINc3/IFe9rPlHq7KPn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:ec:c9:bd:60:26:53:2b:3e:e8:d6:3e:01:4e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca
Validity
Not Before: Jul 27 02:00:12 2025 GMT
Not After : Jul 28 02:00:12 2025 GMT
Subject: CN=f9fb4df8b1c84d29fb01f633e24e7fdded30d09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:33:5f:38:f8:25:e7:69:3f:b5:25:7a:c8:
01:23:3a:24:e0:f6:a1:07:12:dd:59:7f:80:09:d3:
2e:f2:09:74:0b:a9:c5:64:32:23:00:6b:26:c3:98:
81:4a:84:6a:2f:8d:11:a9:08:a1:32:07:88:55:98:
c8:aa:ed:2f:63:d3:02:a9:9d:d1:d7:ab:78:53:dd:
92:10:f0:6f:02:be:0e:b9:96:32:b4:b2:bd:9b:6c:
df:75:d9:36:9b:df:7e:4e:e8:d0:a9:71:de:a1:cf:
1d:5e:68:0d:bf:97:82:ff:d8:db:fd:5d:c4:44:c2:
c9:c2:e9:fc:e5:27:ed:16:46:95:d3:a0:1a:04:4a:
50:b6:9e:69:39:d2:53:68:9d:0f:14:b4:ed:6f:68:
5a:b3:a3:55:29:90:17:eb:11:13:ea:1c:e4:77:0d:
10:89:f2:57:fc:1d:4a:8e:b8:59:91:14:6f:f9:e7:
d6:4d:3d:9b:15:82:03:1d:8a:44:80:23:ce:ec:fb:
c6:8b:9a:59:39:29:bc:89:e4:ae:75:9d:cc:4f:c9:
b2:44:16:7b:35:ed:8c:a2:47:1c:11:98:e0:ce:75:
43:40:40:2e:90:74:bc:a8:d8:06:61:5f:c4:3f:d3:
5f:92:32:9e:10:e8:f7:3f:a0:ea:82:18:99:05:f4:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:4D:F8:B1:C8:4D:29:FB:01:F6:33:E2:4E:7F:DD:ED:30:D0:9A
X509v3 Authority Key Identifier:
keyid:9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:49:36:12:53:35:31:de:d0:66:9a:96:fd:42:d0:f9:64:67:
2f:83:72:39:ba:ac:56:54:83:4b:a3:11:2b:c6:89:df:e7:9b:
26:ca:f9:34:98:6e:65:56:cc:43:8a:d5:53:4f:88:86:e4:51:
b2:7d:9c:e0:3a:11:e4:a8:1a:31:9e:ac:e8:4a:74:00:a9:b3:
a3:0a:1c:3a:7a:60:44:ab:a1:e9:5d:09:93:3b:8f:fb:0e:77:
bf:a8:c8:db:d9:89:5d:d0:07:8c:2f:1a:db:14:1d:1b:d8:69:
05:6b:41:fe:25:5d:7c:a8:e3:b4:17:fc:f8:62:a4:1e:b2:ba:
21:e6:4c:e2:04:d9:6c:7e:db:33:8e:79:51:b5:a4:73:a4:43:
b9:ee:57:33:df:fb:06:28:19:53:e3:49:98:f8:4a:da:c3:a8:
ef:af:04:5e:18:40:98:61:49:6c:ad:3e:9e:f9:58:ea:29:63:
7c:4b:6e:83:e6:c8:b3:ad:ea:01:14:8f:19:40:5b:e7:7d:09:
6b:cb:c6:f2:00:46:dd:69:6c:a8:dc:f1:dc:63:9e:ec:db:ee:
4a:3d:f2:ee:75:6e:2a:52:6a:84:3c:49:79:43:40:00:5b:8a:
a6:70:22:72:e9:30:67:10:51:78:b3:bf:07:97:c2:5e:ce:2f:
71:68:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:39:07 2025 by rpki-client