Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: yM/UHlXICb9J3O+zXE62oh0dgrWPlwbypRwgtNSUQDw=
Subject key identifier: 7E:28:67:C2:89:9A:F2:82:34:F4:0E:EA:E1:C8:F4:9A:77:CE:24:FE
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 019927B26990C37DAFE39B1CD138CAABC9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 1677
Signing time: Mon 08 Sep 2025 05:00:27 +0000
Manifest this update: Mon 08 Sep 2025 05:00:27 +0000
Manifest next update: Tue 09 Sep 2025 05:00:27 +0000
Files and hashes: 1: f7PbKdzww9eFqmnrI3piPy2autI.roa (hash: cqid/Jh0JmuzLCy6Bmi9fDCE0NHp5jdaUsxa+HYnuO0=)
2: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: gJTATfU+V5GL575aRzLZen0HLeBxhzzP1yBPncvivLc=)
3: xhmAfLkH5cXdTfyZ-bUPjRF4p2I.roa (hash: xl3A4+W1ikpeq98vDwW24/ZZ/cjGs93cM5HGe2yBy/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:69:90:c3:7d:af:e3:9b:1c:d1:38:ca:ab:c9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Sep 8 05:00:27 2025 GMT
Not After : Sep 9 05:00:27 2025 GMT
Subject: CN=7e2867c2899af28234f40eeae1c8f49a77ce24fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:20:4c:a9:7a:18:29:94:f0:80:62:06:39:
e3:a1:05:8f:38:c5:fe:0b:d2:4c:e0:8c:f9:4a:fb:
4e:56:7c:10:0b:71:b2:00:d5:2c:a3:87:97:a5:2a:
38:a1:52:29:bc:44:c9:86:eb:4c:d8:9d:f9:f5:e0:
92:82:9d:cc:37:82:68:f5:3f:c4:03:9e:2a:13:0c:
a4:54:28:be:aa:89:bf:20:df:7b:05:e2:f2:29:36:
67:20:89:b7:0e:a1:c9:24:4c:6b:8f:24:36:b1:bf:
25:2f:f0:e4:5b:2b:bf:46:14:32:46:6b:bc:4a:b9:
cb:ff:b6:be:d5:8c:e8:aa:1a:25:f7:d4:1b:06:88:
f8:48:c3:91:28:c8:fa:0f:b2:34:26:64:10:cd:cf:
14:f5:fa:d9:f5:71:95:57:e7:da:03:49:2f:9f:15:
66:cd:0c:8f:22:0a:93:ff:f2:4d:25:76:da:f8:6f:
2f:8a:4b:b1:aa:31:e2:ab:15:90:3b:a4:40:32:1a:
64:16:b1:fe:d7:49:61:b8:6f:58:89:eb:5e:fd:e4:
00:b7:47:37:c5:e9:6d:f2:8f:85:75:61:80:aa:90:
0f:e8:e1:a5:a3:de:46:3c:ac:7e:ad:f2:47:2c:cc:
8f:1c:45:74:1f:66:29:9b:1e:22:4e:09:de:1d:de:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:67:C2:89:9A:F2:82:34:F4:0E:EA:E1:C8:F4:9A:77:CE:24:FE
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:88:0d:bb:ad:fa:99:2b:f3:58:b5:05:f2:5f:5a:ab:cb:36:
cd:75:4b:8b:de:4e:c7:8f:bd:02:8f:54:a6:a5:0d:1e:7e:84:
35:97:8b:ae:bf:09:e4:8e:84:0b:3e:97:9b:f8:b2:90:45:49:
95:c9:cb:27:e8:f1:66:6d:41:fc:fb:65:b9:e7:0b:92:b9:1b:
2e:39:a8:3e:f8:15:9a:61:1f:4a:48:6c:16:52:7c:e2:fd:92:
e6:17:f7:92:9c:1a:5a:eb:25:06:8a:8d:41:ec:52:29:54:c7:
1b:f9:59:7b:8f:aa:ad:4c:ae:0c:6d:3b:78:7f:44:0f:0b:b7:
0a:bb:b2:3b:cc:89:b0:18:c4:91:dd:ae:e9:d1:cb:b4:da:ef:
5c:c6:f5:8a:e3:e2:a7:af:91:f5:6d:00:57:e2:df:58:38:1d:
0b:62:e4:f0:ce:cd:9f:4b:ad:9c:ec:76:9e:bb:38:5f:0d:d2:
1f:a9:a8:e4:55:1c:a5:f3:70:a6:b3:e5:2e:83:51:59:c1:6f:
f8:91:e7:40:5b:cf:7b:46:e9:3b:00:53:9d:1d:44:39:81:44:
0f:3c:0f:0d:12:54:bb:25:c0:74:33:32:d8:d0:76:66:cf:65:
d5:cd:16:86:f5:f2:d3:4f:32:cb:7d:30:d5:b9:c3:4e:39:9c:
93:3d:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:47:32 2025 by rpki-client