Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
File: m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json)
Hash identifier: hVQTlDSCYBeF4Cll332XxD7+nS4dFEynXzw5sB4LOqo=
Subject key identifier: 28:42:23:6A:5E:AD:A2:BA:71:41:EF:56:13:41:D8:61:B8:CB:CA:96
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Certificate issuer: /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial: 019921E7690DABD8E3AE2C445F5AEE33A29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
Manifest number: 09D1
Signing time: Sun 07 Sep 2025 02:00:37 +0000
Manifest this update: Sun 07 Sep 2025 02:00:37 +0000
Manifest next update: Mon 08 Sep 2025 02:00:37 +0000
Files and hashes: 1: 4AyeZ6UgoSX9es2BbU_DizGhUdY.roa (hash: VWKfnEijREHtHZ2eztHBUGUXBqi65LO9HiloDpo6nX4=)
2: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: kRQGnu4EQ3vHikpjZwks5qnmYnvzRH5iqrMu0vahIMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:69:0d:ab:d8:e3:ae:2c:44:5f:5a:ee:33:a2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Validity
Not Before: Sep 7 02:00:37 2025 GMT
Not After : Sep 8 02:00:37 2025 GMT
Subject: CN=2842236a5eada2ba7141ef561341d861b8cbca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:37:54:08:6d:14:a4:0f:0a:3a:ed:16:2b:
27:26:2b:d0:cc:93:ef:0b:2a:0b:4a:82:bc:58:f6:
eb:47:1c:93:ac:83:9c:9a:06:7c:ff:a2:25:ef:93:
29:63:d4:50:31:86:f3:6e:7f:cb:45:78:7d:79:ea:
1d:43:c0:0f:d2:dd:82:cd:9f:b9:3c:fb:95:0c:b9:
09:bb:06:a7:11:05:8b:91:6e:e2:50:87:f4:ce:d8:
91:f6:23:2e:71:54:40:1d:93:25:86:4a:5c:92:0f:
bb:fb:d5:39:ae:e7:c8:97:18:5c:e9:47:76:e7:4f:
c5:78:2f:16:64:db:da:86:3f:73:cd:83:74:40:24:
14:ba:47:0c:dd:e0:fe:c8:5c:b2:1a:af:08:bc:46:
8a:7b:89:6b:3b:4e:6a:b5:11:e8:a8:4d:a1:c1:23:
04:4b:75:3a:18:85:f0:be:88:7d:de:32:75:eb:78:
64:6e:00:0f:e6:c8:1d:6a:5f:71:2b:dc:7a:42:c2:
e4:50:d9:31:de:db:cc:7d:22:5a:84:22:00:93:5c:
2f:ae:54:08:55:4e:1e:eb:a2:15:4c:6b:80:5a:35:
bf:81:b2:27:af:39:17:7b:d9:ae:c9:e3:c4:89:91:
b1:fa:33:57:bc:b5:27:28:e9:3a:94:b7:c5:3a:0a:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:42:23:6A:5E:AD:A2:BA:71:41:EF:56:13:41:D8:61:B8:CB:CA:96
X509v3 Authority Key Identifier:
keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:f0:34:74:db:3d:c3:4e:69:79:0e:0e:1b:9f:5e:b7:42:
35:42:fb:6a:f1:6b:28:08:cf:f8:a9:1b:bc:c8:b9:e6:f9:0f:
1c:ca:df:19:de:e7:18:a4:9d:dd:b9:3c:a9:60:1e:d6:57:7a:
ac:b6:0e:3e:d4:ef:7b:3b:30:c1:78:b8:46:9d:98:64:25:86:
a3:34:c4:67:7d:81:4f:84:77:8d:fd:a4:f3:c3:28:ee:15:f3:
9f:66:fe:e1:d8:9a:01:73:09:d0:c1:f2:ac:5f:33:42:5b:38:
13:4f:76:7a:e1:7d:d1:5a:04:ad:fb:33:f3:3a:db:47:18:26:
61:54:08:69:45:62:67:67:9e:c2:86:9a:19:32:fe:ee:b0:7d:
5e:40:8d:7e:cc:ef:42:ce:a6:da:7a:b7:16:9e:e1:99:9c:8a:
d5:78:0d:c6:64:dd:f4:be:67:08:1d:b2:6e:a8:0b:19:bc:88:
96:9d:63:b9:1d:d9:b9:2b:dc:30:73:a2:c1:74:a9:0d:3f:ad:
a4:21:c0:11:31:ec:16:56:23:42:a3:2e:34:78:37:3f:18:7e:
2f:27:1f:a2:85:4d:26:34:33:65:4e:6d:48:a7:cb:19:64:73:
5c:9c:2d:f6:1c:b9:eb:4f:60:4c:a7:ad:1c:ed:0d:a6:72:71:
15:9e:6d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:48 2025 by rpki-client