Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier: OUfYU/DqEyTPy1kd+XJn2qrCfVy8UpTGNYywEVdQfYc=
Subject key identifier: 62:50:12:22:D7:0D:E9:8C:42:1E:19:F5:87:D6:86:3C:18:C8:78:1E
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial: 01984AAED8FD7F49DDBE099FFB98926AF392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number: 0EF8
Signing time: Sun 27 Jul 2025 07:00:29 +0000
Manifest this update: Sun 27 Jul 2025 07:00:29 +0000
Manifest next update: Mon 28 Jul 2025 07:00:29 +0000
Files and hashes: 1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=)
2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: qt9fAp7xLfqMJ3KX3r8pLwxGDvqz8xm3EmU3K5PM/UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d8:fd:7f:49:dd:be:09:9f:fb:98:92:6a:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Validity
Not Before: Jul 27 07:00:29 2025 GMT
Not After : Jul 28 07:00:29 2025 GMT
Subject: CN=62501222d70de98c421e19f587d6863c18c8781e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:5a:28:0b:0a:ba:63:56:ff:54:8a:f3:4e:
01:c0:61:6a:bc:fc:b1:a9:cf:cb:3e:57:14:1c:1d:
7b:02:63:d5:69:05:cc:6a:1c:68:6a:3d:90:5b:c9:
6f:e4:0c:5b:87:5d:3e:bd:aa:d6:5c:97:8f:60:78:
b9:96:10:ae:26:22:f2:30:f5:24:a8:10:df:f8:46:
41:1f:1b:4c:d1:db:4d:6f:ef:84:94:16:f9:d4:90:
1d:1a:f1:2e:68:03:87:b8:a3:b1:c2:3d:d3:f2:12:
67:ac:44:00:2e:87:bd:f9:3b:3d:8c:78:14:5a:d1:
d3:d3:6d:67:32:31:1a:2c:ab:e9:75:82:23:7c:b2:
9f:37:d0:59:43:bf:21:9e:09:23:a9:48:a8:8f:93:
07:bc:7d:f8:fa:45:f2:2a:a1:47:18:5a:3d:e6:0d:
c4:68:c4:06:7f:79:8a:e6:86:2a:60:b2:24:02:ef:
d8:c1:9a:13:52:1b:d7:dc:23:7d:13:e1:16:4d:a6:
7f:9b:fd:77:d1:e9:d7:77:b7:e0:8c:36:46:6c:bc:
e9:90:af:cb:ea:71:9b:01:46:d7:29:11:2b:73:8f:
a6:be:2e:d9:33:61:aa:67:41:17:ee:71:b1:fb:08:
36:fe:5e:73:32:09:dd:45:79:82:c3:e0:9a:45:5b:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:50:12:22:D7:0D:E9:8C:42:1E:19:F5:87:D6:86:3C:18:C8:78:1E
X509v3 Authority Key Identifier:
keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:17:45:cf:86:cc:ff:61:a6:68:a5:85:fc:b2:60:99:a8:45:
17:a3:ad:1e:1e:b2:f2:52:ca:ac:73:f8:e4:68:a3:a5:8d:fb:
37:9d:b7:ac:2e:d5:99:b6:c8:db:4e:cf:f0:b4:f1:bb:5c:4f:
18:37:c9:0b:ef:37:0f:1c:7e:88:d5:cc:b6:5b:1d:7c:c2:de:
1c:67:6e:10:66:47:1f:f8:11:02:e5:6d:48:3e:e7:bb:92:9a:
34:5b:e9:5c:c1:47:e7:00:74:41:7c:c3:ab:9e:ac:d9:b7:22:
f3:5d:f3:0c:26:ab:ec:91:7e:ba:9e:a7:d8:a8:fa:e1:64:6c:
9b:da:b4:84:56:90:38:03:74:6e:cf:b3:42:dc:c9:ac:75:d4:
07:c4:1d:c4:58:bc:47:5b:fd:4a:a2:c1:96:37:14:d4:bd:6d:
ad:65:26:e8:91:48:55:14:22:2c:db:c4:a2:a9:37:5d:29:ee:
b4:2d:ae:5f:f4:d3:1e:80:69:2b:94:4b:aa:99:26:cd:ef:62:
7c:07:47:62:69:83:91:92:33:9f:95:a1:4c:da:2a:65:42:c4:
89:e5:ce:30:12:a7:34:78:33:25:86:3c:70:7c:db:78:e6:9e:
72:9b:da:da:f1:57:2a:ec:9f:36:a5:f4:31:79:d1:58:28:14:
14:f0:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:13:17 2025 by rpki-client