Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File: m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier: lL8QFr8Q8MQWXHIadn0DeqpNoUWJ/IDyPcQdTdSHHIQ=
Subject key identifier: DE:15:95:19:82:EC:62:75:7B:45:52:7B:7F:0A:CF:8F:F2:45:1F:FF
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 0199326D6E84CF2C38619883E16352B8E297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 07:00:56 +0000
Manifest this update: Wed 10 Sep 2025 07:00:56 +0000
Manifest next update: Thu 11 Sep 2025 07:00:56 +0000
Files and hashes: 1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: bE1J2gA11lpqbvghAg7IleWNxYgdfouQS5Eyoyq2hys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:6e:84:cf:2c:38:61:98:83:e1:63:52:b8:e2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Sep 10 07:00:56 2025 GMT
Not After : Sep 11 07:00:56 2025 GMT
Subject: CN=de15951982ec62757b45527b7f0acf8ff2451fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:12:51:86:97:b3:1c:2b:47:12:7c:96:84:
37:ce:ad:9d:87:e9:78:25:d7:fa:b7:5a:26:50:25:
67:09:96:58:8e:dc:54:e4:ca:c2:73:87:ef:33:c7:
50:91:41:8c:82:e3:1e:11:c3:e5:4b:ba:e7:ec:1e:
e6:64:89:52:f4:16:ca:78:a4:42:51:57:88:b1:ef:
07:a3:ab:66:0b:59:97:ed:60:ff:43:bc:f4:ae:b7:
eb:c7:86:ad:03:0d:19:1d:0d:0c:26:8e:0a:dc:a0:
3b:4f:4f:db:32:d0:c5:d5:18:cd:61:2c:73:d7:13:
e1:fd:10:5a:df:d7:12:3d:1b:4e:bf:0e:a2:a6:da:
e3:11:4d:d8:99:ef:ed:94:3b:ad:ca:e5:56:34:76:
b8:85:43:29:32:66:b1:69:90:1e:d3:56:00:bc:93:
2b:27:3e:f8:04:e4:c9:88:80:d3:a0:68:e1:5e:5a:
ed:14:95:35:c3:e9:56:57:77:ca:30:d9:9a:c7:06:
e1:63:f0:9f:4b:70:6d:15:15:26:28:f0:77:5d:64:
b6:5a:9c:56:15:36:fc:9f:07:55:c2:2c:33:5a:9e:
b6:2d:8b:3b:16:9a:44:8a:7e:67:49:d5:d8:7b:00:
bd:05:68:1b:f2:da:b4:1a:14:ee:8b:ca:09:a9:34:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:95:19:82:EC:62:75:7B:45:52:7B:7F:0A:CF:8F:F2:45:1F:FF
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ec:1f:a2:01:44:fd:17:bc:9c:15:59:84:86:c4:d2:8b:6f:
86:c9:65:13:ef:11:ef:b6:dd:28:b0:4c:ad:f1:33:9a:fc:97:
cf:d2:f9:f0:82:b9:b4:1f:5b:f2:bb:9f:fa:b0:fe:a6:03:79:
f9:d4:45:d0:39:a4:38:90:1d:bf:1a:ca:0d:24:c3:4e:1e:89:
f3:7d:c8:5f:9c:54:3f:90:c5:7d:2e:34:7b:49:f9:ee:0c:4c:
ed:64:b6:c2:f4:7e:49:29:2f:1a:6b:5e:e6:25:f6:a3:8b:27:
3d:69:9b:30:60:9b:43:da:05:37:b3:bb:4e:40:84:08:7a:24:
99:ee:81:39:0a:3d:e7:04:07:8f:82:e9:f9:4b:4d:e0:e6:a7:
cc:26:72:94:48:cd:c3:06:9f:b1:6d:58:62:82:f2:92:0e:ae:
14:96:70:4d:b3:ee:6e:72:38:b7:f9:2e:40:fe:d4:7d:a6:aa:
33:3e:0e:0f:73:34:e1:6d:ef:4f:70:d5:fd:f6:b6:97:ee:6e:
0c:bf:1f:54:bd:4b:3a:7e:7d:77:20:05:69:e0:27:41:f3:71:
ab:03:75:09:de:be:5d:b1:32:7d:23:70:7f:6d:41:45:68:43:
a9:99:bf:e8:05:42:1a:9e:56:7c:f4:2a:f3:ae:53:93:b8:42:
ed:e7:24:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:38:27 2025 by rpki-client