Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
File: m2CmodoPEXgE8H_hJTh6KtyZiWU.mft (raw, json)
Hash identifier: uw1isfHFPwZ8FWj9QdmVnixfln67yD1xFK0irQVfL2s=
Subject key identifier: 36:82:27:FC:48:BF:D9:EE:E7:4F:4C:E7:49:84:8C:7F:F0:71:69:9F
Authority key identifier: 9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
Certificate issuer: /CN=9b60a6a1da0f117804f07fe125387a2adc998965
Certificate serial: 0198477766EBE4259B0951FD168EB6BDD78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
Manifest number: 09F2
Signing time: Sat 26 Jul 2025 16:01:04 +0000
Manifest this update: Sat 26 Jul 2025 16:01:04 +0000
Manifest next update: Sun 27 Jul 2025 16:01:04 +0000
Files and hashes: 1: m2CmodoPEXgE8H_hJTh6KtyZiWU.crl (hash: c2n80sw9HRD2R31sk6PoNgQbrP4qh/14L8zNHlMRG/4=)
2: rhJcJSm_PMi8Ty8JJNNm9gt0gCs.roa (hash: 35jRPVs6JG51YgnZYUHY+bKhkmjaLSvQRKcI4y/GRMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:66:eb:e4:25:9b:09:51:fd:16:8e:b6:bd:d7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b60a6a1da0f117804f07fe125387a2adc998965
Validity
Not Before: Jul 26 16:01:04 2025 GMT
Not After : Jul 27 16:01:04 2025 GMT
Subject: CN=368227fc48bfd9eee74f4ce749848c7ff071699f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:32:a0:c8:1d:8a:c4:73:85:d2:db:65:73:
23:46:1c:88:a1:31:9d:a5:2c:83:cb:dc:b3:3b:67:
28:8d:ee:58:cb:67:4d:f2:45:67:3c:f0:94:d5:3a:
bd:ec:88:4e:7c:ce:f0:a3:7f:d3:ac:28:c0:bc:4c:
45:e0:4d:45:ce:19:18:5a:27:4e:e8:cc:26:b5:a2:
0a:83:15:25:5c:b3:b2:73:c6:ad:18:64:e8:82:52:
26:83:d2:57:f4:84:86:ef:ba:de:4f:30:1d:c2:c2:
8c:0b:c4:ec:7e:8e:2a:d4:72:2e:ba:82:5d:97:5d:
8a:05:03:16:d1:2c:fb:fb:da:32:ed:45:c1:fb:c6:
19:13:11:bb:38:48:6c:eb:59:51:46:7e:1e:1e:8f:
4c:3d:2e:74:a2:b3:fd:43:c6:f8:25:8b:7d:af:08:
da:24:e1:82:f4:23:1f:ba:47:0f:5c:69:47:0c:cd:
92:44:8c:01:66:74:a7:68:39:71:32:27:0e:86:da:
eb:45:28:69:b8:0f:42:3a:5a:7a:9b:29:91:93:00:
8f:0b:0e:2e:78:7f:c7:8c:1f:5d:c0:ce:37:53:22:
8e:b1:49:63:1c:23:1d:77:1b:05:11:60:df:a9:7d:
b0:55:e4:62:72:39:6d:53:c0:32:f8:80:aa:c7:a5:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:82:27:FC:48:BF:D9:EE:E7:4F:4C:E7:49:84:8C:7F:F0:71:69:9F
X509v3 Authority Key Identifier:
keyid:9B:60:A6:A1:DA:0F:11:78:04:F0:7F:E1:25:38:7A:2A:DC:99:89:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2CmodoPEXgE8H_hJTh6KtyZiWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/497b78-b546-4630-9348-739c85c200b9/1/m2CmodoPEXgE8H_hJTh6KtyZiWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:64:fb:ac:8d:4a:23:03:dd:ea:32:6e:07:f2:a2:36:b9:cd:
38:3c:d7:4b:4a:fa:fb:b8:32:2b:ca:69:54:dc:67:87:a8:28:
03:c6:73:01:b5:6f:1f:ba:4e:06:fd:c4:c8:30:1c:cd:f8:17:
0d:15:cd:d7:94:e7:44:1e:63:6b:dc:4c:ab:1b:18:e2:c1:4f:
ca:56:34:40:39:47:5a:e6:88:ea:4b:72:12:c9:6e:78:1f:d2:
4b:d1:84:ee:04:c8:c2:d9:64:59:a5:cd:6d:df:6a:f0:50:93:
24:40:e9:43:d1:63:c7:b0:ec:9c:74:f3:d0:a5:ae:a2:a5:5c:
55:f2:ce:44:53:8d:d7:70:1d:21:a4:b3:26:69:61:b9:31:dc:
66:ac:5b:db:50:57:84:b1:13:d8:2e:0e:ef:67:fe:7e:f0:72:
23:71:c7:64:57:66:73:b0:99:d6:eb:e7:a8:63:45:4c:e6:17:
2c:8d:fe:08:ce:b4:d9:3d:40:e8:3a:5a:df:80:92:6d:69:0b:
5c:c9:2c:ce:1a:e8:3b:be:5a:1f:0b:c1:e4:9c:66:ca:bf:55:
ed:2e:3d:08:c8:d8:84:80:bb:88:e8:7e:97:53:a5:4a:f3:8c:
74:77:7b:01:ec:ed:33:8a:35:f4:5e:d5:45:26:ce:00:eb:ef:
48:95:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:12:42 2025 by rpki-client