Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: N7Y7O1T8Or9bieoB4GxhyQbwbQI9aWQCJTIH4zQxHUw=
Subject key identifier: DA:10:60:0C:6C:B5:C5:A2:E4:BE:2F:B4:E7:46:AF:3F:DC:5D:68:B8
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 019854FBEF49E6AE9789EADBCB41B0920DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0A4B
Signing time: Tue 29 Jul 2025 07:00:53 +0000
Manifest this update: Tue 29 Jul 2025 07:00:53 +0000
Manifest next update: Wed 30 Jul 2025 07:00:53 +0000
Files and hashes: 1: aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa (hash: tukb95Gwd6x2BRzhLsZA0PSUEck+o+zvt8A2/7nuQh4=)
2: aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa (hash: o539XDvH7v6Q1Bwgk0cJJENARzLE2fligJ+8v8cr/cU=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: b2kmFvGvmfeAPjBb2rFP90WS7JLpZ2jjxVwQu+9E5T4=)
4: tI9ka3nY65XI0hS6cPovdv7yr60.roa (hash: +06LGDfkS/BJNhqCcOcJbY1vvOjfeeWWAoEc0fhS6DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:ef:49:e6:ae:97:89:ea:db:cb:41:b0:92:0d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Jul 29 07:00:53 2025 GMT
Not After : Jul 30 07:00:53 2025 GMT
Subject: CN=da10600c6cb5c5a2e4be2fb4e746af3fdc5d68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:9b:a2:5b:b6:c7:0a:ec:f6:0e:60:a1:a7:
a0:a2:54:58:48:3d:f0:84:3d:6c:78:0b:88:84:49:
05:4b:34:8e:ef:78:26:2e:67:de:be:fd:38:26:bb:
d7:7c:30:f6:68:cf:39:81:4c:cc:41:a2:e7:30:f8:
f6:73:56:96:6d:f9:6c:00:89:e9:c6:ea:1f:df:d4:
aa:63:28:7e:0c:97:c2:e1:4f:e2:98:78:cd:61:ef:
e3:d1:1b:68:f2:e2:74:59:50:5c:b8:58:58:d2:6d:
5d:f7:14:87:9c:27:63:c0:ec:4e:45:34:4a:2a:b4:
b6:8b:ac:a7:52:de:fc:76:60:3c:1f:df:17:2d:4a:
10:72:5c:93:ab:cd:89:e9:b6:cb:b8:db:83:43:83:
3a:03:22:d6:21:4f:73:66:e1:f9:47:f9:91:c5:34:
ff:de:8e:53:95:c0:f8:2f:af:6c:16:57:fd:d4:24:
73:f4:3e:ca:10:94:ce:6e:c4:6a:d5:02:27:d5:79:
a2:aa:a4:aa:bf:c5:19:ad:cc:6d:a2:87:05:8d:2b:
ed:03:0d:cb:8f:3d:cf:4a:45:6f:06:88:ea:19:a7:
09:d0:80:1a:58:3c:39:3a:06:82:5a:90:d8:5a:a0:
02:6e:1a:86:27:f9:b2:6f:cc:2c:bd:e5:2d:5a:cb:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:10:60:0C:6C:B5:C5:A2:E4:BE:2F:B4:E7:46:AF:3F:DC:5D:68:B8
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:46:b2:6b:0f:65:2c:34:f1:b0:b7:f0:64:25:14:70:c7:fa:
97:71:fd:f2:92:1c:e5:25:ef:35:f1:47:6f:f8:af:db:c3:47:
25:86:55:26:94:77:f3:dc:b3:43:28:76:be:65:b5:49:5c:bc:
18:21:ba:68:3a:31:34:ff:4a:11:78:b3:2d:d7:14:d2:b9:5b:
d8:ec:6d:57:95:4f:eb:0c:99:8b:c1:88:fa:fd:83:cd:18:bd:
87:82:3a:56:19:0c:f1:27:17:fb:7a:8b:ba:30:75:b1:64:17:
87:c5:c0:7b:3f:03:8f:3b:75:13:5b:31:e5:e8:af:94:98:a0:
27:b7:a0:02:6c:94:6b:a2:fe:45:1f:74:63:8b:da:44:0b:05:
c8:56:ef:b3:53:ae:be:63:92:47:c7:e3:d7:29:79:1a:e5:85:
c0:86:e2:d1:e1:87:a3:72:8e:79:6d:e1:88:62:7e:0c:a4:98:
df:26:b8:c3:9c:8b:7c:81:37:a5:62:3b:dd:91:c7:3d:cd:cb:
cc:77:f4:e2:a8:a5:f0:0b:1a:f4:2d:38:b0:62:c9:52:0e:07:
ef:0e:cf:c9:27:f1:7f:66:9f:79:0d:44:1c:aa:23:2f:0f:e5:
45:c9:6a:47:1e:e9:0a:4b:27:9f:ef:63:9e:73:bd:0f:66:20:
20:76:72:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU++9J5q6Xierby0Gwkg3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODZiZDg4MmU0NzZlNDY5ODMxOGYzNzA3MTJmNzFjMmJm
NTBkZmMwHhcNMjUwNzI5MDcwMDUzWhcNMjUwNzMwMDcwMDUzWjAzMTEwLwYDVQQD
EyhkYTEwNjAwYzZjYjVjNWEyZTRiZTJmYjRlNzQ2YWYzZmRjNWQ2OGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU2bolu2xwrs9g5goaegolRYSD3w
hD1seAuIhEkFSzSO73gmLmfevv04JrvXfDD2aM85gUzMQaLnMPj2c1aWbflsAInp
xuof39SqYyh+DJfC4U/imHjNYe/j0Rto8uJ0WVBcuFhY0m1d9xSHnCdjwOxORTRK
KrS2i6ynUt78dmA8H98XLUoQclyTq82J6bbLuNuDQ4M6AyLWIU9zZuH5R/mRxTT/
3o5TlcD4L69sFlf91CRz9D7KEJTObsRq1QIn1XmiqqSqv8UZrcxtoocFjSvtAw3L
jz3PSkVvBojqGacJ0IAaWDw5OgaCWpDYWqACbhqGJ/myb8wsveUtWsvSnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoQYAxstcWi5L4vtOdGrz/cXWi4MB8GA1UdIwQY
MBaAFJuGvYguR25GmDGPNwcS9xwr9Q38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQt
YmZjNzNkZDBiYmI2LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQtYmZjNzNkZDBiYmI2
LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEayaw9l
LDTxsLfwZCUUcMf6l3H98pIc5SXvNfFHb/iv28NHJYZVJpR389yzQyh2vmW1SVy8
GCG6aDoxNP9KEXizLdcU0rlb2OxtV5VP6wyZi8GI+v2DzRi9h4I6VhkM8ScX+3qL
ujB1sWQXh8XAez8Djzt1E1sx5eivlJigJ7egAmyUa6L+RR90Y4vaRAsFyFbvs1Ou
vmOSR8fj1yl5GuWFwIbi0eGHo3KOeW3hiGJ+DKSY3ya4w5yLfIE3pWI73ZHHPc3L
zHf04qil8Asa9C04sGLJUg4H7w7PySfxf2afeQ1EHKojLw/lRclqRx7pCksnn+9j
nnO9D2YgIHZyaw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:36:46 2025 by rpki-client