Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File: m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier: +bXK+1dWNuBDYWZvbk0bfyD32x2KqAKETwO//89pKAM=
Subject key identifier: F3:5C:E2:79:2D:89:43:60:E1:23:9F:12:07:86:8C:C2:D9:E6:E1:39
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial: 01984B543417E156A2E61993F717DD6AE679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number: 0DEC
Signing time: Sun 27 Jul 2025 10:01:06 +0000
Manifest this update: Sun 27 Jul 2025 10:01:06 +0000
Manifest next update: Mon 28 Jul 2025 10:01:06 +0000
Files and hashes: 1: 126M92i4yvgJWpcn8XcIW24xKRw.roa (hash: gvLu6/32Bhn0SToW2HYoFaVXP2rKf3ibNrus5LTj59I=)
2: 2Y-BQWwW7_ggvBXNnc8W9Hw_ByE.roa (hash: JhmK62xSjdy0MLOq5+Y9bNPh5TyhHzNoMKSxAmlyqP4=)
3: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: o6tIzYMwZ7PsZFxE5Ghi/MYROcEdlQM6E6K0JFYnalA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:34:17:e1:56:a2:e6:19:93:f7:17:dd:6a:e6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Validity
Not Before: Jul 27 10:01:06 2025 GMT
Not After : Jul 28 10:01:06 2025 GMT
Subject: CN=f35ce2792d894360e1239f1207868cc2d9e6e139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:61:c2:1d:f5:23:05:14:22:94:de:05:08:
0f:83:85:dd:44:34:3f:0c:52:2b:aa:e2:5a:52:b2:
00:91:83:e8:10:0b:4e:9c:b6:ff:5a:8c:a4:48:35:
06:1e:ad:90:cf:3d:d8:db:ab:17:55:fc:c8:b1:f6:
e8:ee:31:e4:0d:f0:21:b2:24:6e:26:fd:44:b1:dd:
07:4c:13:cf:96:67:43:0c:d0:a6:1f:88:02:9e:b6:
05:ac:76:0c:f2:45:a9:16:04:73:36:1f:b5:1d:1f:
37:15:86:fe:a9:15:39:f0:a5:4a:c9:3c:1f:30:1a:
f8:01:70:73:91:0b:f1:11:4a:4b:b7:59:c7:72:d5:
99:77:1a:da:28:26:01:97:1c:6b:a6:6f:79:83:c1:
4e:5a:32:98:a2:06:a7:47:81:c5:b6:2e:ec:9f:31:
0a:db:d6:da:25:74:f6:d4:ec:dd:ed:5b:11:1b:bf:
96:1f:79:55:6e:1a:02:1f:9d:c6:09:1c:92:be:8b:
78:47:72:de:7d:84:fd:97:58:5f:aa:c6:97:f4:4c:
c8:e8:ee:ce:3a:86:67:c9:48:dc:fa:7e:12:c0:86:
08:f3:4b:f0:4f:87:4b:3f:b5:5c:53:a0:d9:18:b9:
90:e9:66:13:5f:30:d9:10:95:13:d0:40:b9:d5:88:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:E2:79:2D:89:43:60:E1:23:9F:12:07:86:8C:C2:D9:E6:E1:39
X509v3 Authority Key Identifier:
keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c9:65:ac:54:bd:f4:42:1f:75:0e:11:aa:d1:69:d3:fe:fe:
fa:92:5c:63:b8:1f:a2:9c:bf:38:4e:87:ff:66:1c:17:44:ba:
58:fc:b1:da:de:58:e4:cc:82:2a:ae:e0:08:ea:85:42:3c:4f:
21:45:6c:be:5d:f0:fb:3d:f5:a9:ac:54:1e:4a:3c:d0:b2:c6:
8a:de:66:30:10:58:a1:2d:73:d2:17:ef:c5:37:17:3a:0b:3e:
67:1c:de:6c:4f:92:0d:c9:18:50:36:08:99:7e:ef:96:10:d2:
79:06:10:75:ad:8a:f5:00:ab:8a:e7:3d:50:b8:71:60:2e:b2:
cc:08:33:1d:78:13:ed:27:fe:f7:ab:01:69:ff:d6:bf:f5:25:
14:c4:5c:ef:6b:4c:7c:43:66:a4:ed:e6:b1:05:a4:e2:d0:27:
5d:90:27:d2:4d:eb:d6:a8:46:a7:94:20:40:f9:67:a6:0c:d7:
d7:c1:37:e8:fd:40:43:15:4a:71:c4:39:5f:62:5e:a8:fe:a7:
f2:ac:1d:e1:dc:ea:40:3c:97:d7:18:8c:1e:5e:37:eb:0c:16:
eb:5e:d3:11:f9:b8:42:bf:9f:df:79:47:76:2b:d0:6a:72:9a:
63:ae:be:aa:dc:dc:df:f5:07:29:ac:e4:19:cb:b7:65:6a:01:
d7:54:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:37:18 2025 by rpki-client