Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: LCxcOOI5TWxuHa5YJryDUvv2aMS3Y4oHYhWWpTJHMWg=
Subject key identifier: DB:40:5E:10:73:B2:AB:4A:38:8C:B0:3C:03:B6:96:0D:02:32:96:B2
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 01994F2E74BDA5B8034B2528666E051BAA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0ED8
Signing time: Mon 15 Sep 2025 21:01:08 +0000
Manifest this update: Mon 15 Sep 2025 21:01:08 +0000
Manifest next update: Tue 16 Sep 2025 21:01:08 +0000
Files and hashes: 1: 5GniNEhMinY30K7EXaIu9sAOhOQ.roa (hash: QfzSo55A79YZ0l6NKBygH+Tw/Dr7wh1jiZA/eg3De/Y=)
2: XQF1gy_GwOpRDFXNG6GoJ-bdHmU.roa (hash: 2eDBAsY9Cf7EZVCxOyjj6e6wsGijuJlQgQ3d0xmYCt4=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: D5qGGVdlqbOiT0xaikA3WWv2hFjrfwUhjj/IzpZKQZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:2e:74:bd:a5:b8:03:4b:25:28:66:6e:05:1b:aa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Sep 15 21:01:08 2025 GMT
Not After : Sep 16 21:01:08 2025 GMT
Subject: CN=db405e1073b2ab4a388cb03c03b6960d023296b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:61:c1:05:29:92:57:9c:de:de:ce:6e:c6:
cb:6f:60:56:7e:19:0e:4a:c9:31:b5:f4:f9:40:29:
b3:30:ce:20:b6:6d:94:a2:25:d3:d3:85:a4:f5:20:
47:fb:22:a4:77:83:0e:90:ed:6c:50:8e:2f:f6:bb:
d2:a3:0f:eb:c5:ce:90:7c:6a:62:ac:d5:91:df:ca:
02:d4:93:e5:e5:0e:27:ad:d5:1a:b6:7a:08:b1:6f:
39:b6:3a:90:e0:e2:21:20:d0:d2:e2:c3:b4:60:01:
8d:3a:eb:35:46:5e:24:74:9c:e0:36:4e:8f:62:1f:
36:c2:cb:db:09:de:8a:57:57:29:7a:19:83:ce:38:
8f:8f:1a:b9:96:37:5c:54:55:7b:b4:38:61:cc:2d:
ba:5b:4c:5d:5b:86:20:04:45:2c:8e:98:06:bb:12:
5c:62:11:7d:82:c6:bf:2f:94:2c:46:f5:01:ca:50:
2b:bb:7e:bd:a7:8d:cc:b8:4d:2c:56:4d:84:d6:a9:
6f:20:de:5e:d7:5e:51:23:af:a8:28:8c:41:b0:a6:
5e:e3:61:55:ba:0f:6c:5f:68:d2:48:37:a2:ad:2f:
c6:35:e4:8c:bb:9b:73:59:37:95:06:af:a0:1e:01:
76:2a:5f:50:c8:18:7b:6b:ce:e6:10:19:9d:0f:30:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:40:5E:10:73:B2:AB:4A:38:8C:B0:3C:03:B6:96:0D:02:32:96:B2
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fb:dd:44:ea:14:78:7d:19:03:de:4d:12:88:1f:a3:42:4d:
ea:94:2d:c3:1f:f9:38:16:bb:fd:6a:47:4c:1b:5f:81:86:f5:
0f:a2:8b:01:22:02:e0:1c:c1:90:9f:2b:ca:42:8c:3c:0e:c3:
42:59:c5:d2:c6:72:51:52:91:69:f0:49:70:93:cd:1f:bb:9c:
c0:1f:3c:1f:94:88:80:2f:c9:d3:b9:93:31:b0:91:d5:82:0c:
4c:65:6d:d7:49:c7:ee:81:e6:f9:c0:92:7f:2f:7c:f4:f7:30:
0a:67:6c:96:cd:73:f0:f9:73:56:b5:f0:be:f3:dd:60:39:b2:
99:fa:f0:d8:55:f3:45:51:15:ea:7b:21:38:d6:c9:2b:99:98:
7b:09:ba:a1:72:83:c7:50:42:b3:9f:8d:64:c4:05:03:23:f9:
d5:83:0f:43:0a:61:3a:6b:c9:9c:f6:3f:18:87:56:44:b4:75:
2b:11:67:e9:8d:80:ed:a7:e0:e8:01:cf:8d:c2:0d:7a:64:a8:
b7:3d:62:3c:d1:36:ab:a2:c6:3f:c9:8a:33:26:9b:51:fc:61:
60:a4:d8:76:4c:1e:08:ac:60:18:a8:ff:11:76:0a:50:d9:22:
4e:b3:b6:b1:ec:55:11:f4:06:f6:eb:b1:2c:02:53:8b:53:61:
74:29:ef:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 01:22:25 2025 by rpki-client