Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File: mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier: zG3w3NMs1FlpjmVEy6tYpWBW+uFBWMQXxutOYajU4WQ=
Subject key identifier: 88:64:62:F0:E7:6B:E7:A4:E2:39:A5:D1:95:97:74:0E:4B:4E:C6:90
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial: 0199228CDCA46FDA3E7C195D3E2B8520318F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:20 +0000
Manifest this update: Sun 07 Sep 2025 05:01:20 +0000
Manifest next update: Mon 08 Sep 2025 05:01:20 +0000
Files and hashes: 1: Zw30iDu4jzobtmXOoRJnqyr607Y.roa (hash: 4CedzSiaWJKzH9a7MTqU1eCaCh1zeNHdX5Usa6vZk+8=)
2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: 6vty21KtEJJSIyO2xF80o/vTkYJUC6PENIFfAB8M8Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:dc:a4:6f:da:3e:7c:19:5d:3e:2b:85:20:31:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Validity
Not Before: Sep 7 05:01:20 2025 GMT
Not After : Sep 8 05:01:20 2025 GMT
Subject: CN=886462f0e76be7a4e239a5d19597740e4b4ec690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:1e:48:7c:15:5a:ab:4d:ca:3c:68:78:58:
1e:08:b4:bb:6a:4d:5e:01:53:68:5c:8f:f8:ac:df:
bd:bd:aa:02:98:4e:66:2d:92:5f:88:7f:48:be:6d:
8e:6d:47:b9:da:ad:67:fb:6e:22:5f:ee:8e:3d:b1:
4c:d6:71:08:13:cd:71:83:24:5a:6e:a4:3c:77:b1:
56:39:ab:7b:1a:76:11:18:ca:7e:54:77:b7:3a:eb:
e9:95:a9:9c:13:6b:71:f4:c1:c3:d7:0f:a6:5f:e0:
d0:26:37:58:0f:39:e3:70:89:46:b6:0a:cb:b9:d8:
3d:7a:31:6b:51:0e:49:da:9c:27:e5:66:23:ea:26:
91:fc:88:57:de:ed:1c:3f:27:f3:57:c3:47:cc:4c:
6e:14:49:7e:6e:ce:ea:8d:b3:72:48:6c:c5:be:a4:
6f:7f:a4:59:1c:09:47:d6:ef:07:9b:6f:cd:ad:ce:
74:77:ec:fa:fb:0e:76:7f:fb:ed:1c:0b:11:44:1e:
d7:df:b8:31:68:73:0c:56:28:db:8d:9f:39:f0:52:
e8:33:6e:0c:be:12:50:7d:69:33:89:6b:66:a5:fc:
a8:d2:42:7f:e7:31:2d:2d:91:49:30:a1:f3:2e:f5:
02:4e:1a:e8:b4:cf:3e:29:47:ca:38:c2:c6:d4:1a:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:64:62:F0:E7:6B:E7:A4:E2:39:A5:D1:95:97:74:0E:4B:4E:C6:90
X509v3 Authority Key Identifier:
keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:25:07:a7:cb:00:0d:e4:24:01:ca:d5:56:d6:f3:99:fe:df:
98:d4:68:ae:86:4e:2c:b7:ac:cf:eb:58:67:bf:4b:22:f5:c1:
0e:06:bb:e5:0d:5c:af:b5:3b:ff:96:98:3b:72:5c:66:8d:90:
11:77:c8:a2:44:db:d5:03:35:14:13:f8:87:18:95:e6:d1:9e:
41:31:eb:de:ad:b1:1c:83:7f:d1:ad:69:9c:7a:98:fb:c3:b7:
80:49:73:38:69:fd:2b:0d:2f:84:58:e8:4f:41:4f:c4:06:cc:
78:52:59:ea:9d:33:39:fb:34:80:b8:33:e8:00:e8:ca:b7:8a:
e7:e3:a6:c7:90:60:3e:2e:c7:00:e7:cc:15:ec:05:52:64:c2:
75:e0:d9:bb:ed:5d:2a:d3:97:f3:77:34:03:09:ab:84:d3:a0:
18:80:13:a0:63:f9:50:0a:74:b4:db:50:57:b5:51:87:9f:65:
b4:08:43:08:07:8d:72:d9:64:bf:b7:ae:c0:05:0b:0f:33:32:
ac:47:82:cd:ff:c0:0d:6f:c2:77:af:b5:4e:76:30:51:05:95:
66:ce:f1:85:ef:c8:42:02:e2:b5:76:8a:7b:9b:8a:11:30:e2:
01:8a:5f:9f:d9:fe:8d:45:f9:c8:59:1a:39:a5:3d:6f:73:01:
f1:76:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:15 2025 by rpki-client