Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
File: m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json)
Hash identifier: tXDrofAY/x1YCvvgZs9q1hHngJyVlFqfsuHul+ohE4U=
Subject key identifier: B9:34:97:87:9C:6A:D6:60:35:30:88:9D:DA:D6:F4:38:F3:DB:5A:83
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Certificate issuer: /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial: 019A71EEB1B5BC19AE4E88DDA3ECC88D984C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
Manifest number: 0A7F
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: 4AyeZ6UgoSX9es2BbU_DizGhUdY.roa (hash: VWKfnEijREHtHZ2eztHBUGUXBqi65LO9HiloDpo6nX4=)
2: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: N0+rH1Pza8+FJbrb2cFw29w4RQEb/fIsFb574Tp0gic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b1:b5:bc:19:ae:4e:88:dd:a3:ec:c8:8d:98:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=b93497879c6ad6603530889ddad6f438f3db5a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:5d:16:50:14:e6:a9:b9:a5:47:7f:bf:5f:
22:78:0a:b4:0d:6d:86:6f:be:63:e5:e6:f7:9e:dd:
af:7c:6a:b9:39:04:c9:d2:80:35:50:0c:ba:4a:a0:
91:55:48:d3:4e:66:f7:84:44:a6:12:30:62:d4:39:
ee:e9:cf:df:2c:b4:75:87:09:7b:12:fd:b2:2e:06:
03:6d:b2:61:b1:bb:61:bc:c1:9a:63:60:95:ac:b6:
37:40:d3:cd:0f:5a:5f:37:93:76:03:5a:3e:3f:1c:
0b:0e:40:c1:21:bf:b3:2f:41:8c:ef:8e:ca:15:c1:
9c:48:fd:01:d0:dc:c0:2a:2f:37:8d:16:bc:25:ff:
5d:ef:22:57:e5:7c:7e:84:d6:36:1d:a1:f1:f2:9b:
11:3b:c5:6d:99:4a:4e:2f:0d:e8:0d:a4:61:18:6f:
f3:6b:72:ce:97:3f:c9:7a:8f:18:fc:ac:e0:10:cf:
f4:63:40:f0:54:a9:91:b7:8f:cf:4d:2c:bb:8b:f8:
e9:a6:69:55:30:2d:d9:29:71:8a:e4:81:fe:0e:c1:
22:93:64:df:8b:b7:3d:2d:cd:49:69:98:37:91:92:
27:b4:02:f3:c7:6e:c5:29:9a:41:b4:b3:36:44:03:
5c:88:fb:75:e1:83:1b:30:c7:c6:11:87:26:95:28:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:34:97:87:9C:6A:D6:60:35:30:88:9D:DA:D6:F4:38:F3:DB:5A:83
X509v3 Authority Key Identifier:
keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:88:78:fe:8f:64:18:8d:6f:64:31:12:f5:b4:2c:d0:39:ec:
2f:16:43:fe:8a:b2:9d:6b:81:d1:3c:d4:88:df:43:7e:45:ff:
52:8b:c5:db:b8:de:c1:7b:73:f6:8d:6d:23:c3:93:8e:e0:14:
68:f7:41:a8:3e:2e:bb:06:cd:ca:33:5e:f6:8f:c7:13:6f:ac:
8e:9b:4b:39:4d:ca:3b:a2:cd:99:42:68:15:98:94:13:b8:41:
82:4d:a2:c7:37:78:d2:3e:4e:6f:54:39:17:2b:2d:77:e2:b3:
16:17:2e:1e:38:f3:64:71:da:e8:1d:c1:23:76:79:4f:ff:95:
b9:e4:ab:62:e7:65:df:42:d8:90:81:76:69:7b:c8:49:e6:64:
5d:63:b4:64:0a:50:de:ce:8b:62:c0:d1:2e:aa:93:ca:d1:20:
db:85:7a:28:b9:24:76:10:55:72:7e:7c:e7:8a:68:6d:c5:9e:
b2:cf:3d:49:bb:7a:87:66:5f:80:f4:04:a3:eb:8b:ea:fe:40:
4f:0c:2a:62:91:5d:b8:1b:27:40:6f:4d:a2:dc:f4:9c:71:98:
ca:8b:25:05:06:e4:e6:7c:b8:cf:b4:99:85:82:51:8e:c1:3d:
f4:2e:73:75:4b:d8:96:ca:ce:ae:eb:b4:4c:25:76:a0:dc:62:
a9:2e:2b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:42 2025 by rpki-client