Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
File: m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json)
Hash identifier: yh/HDCGn2lWWFrfZX/LJRoIjX/zyJtFub8glqjCRqHs=
Subject key identifier: 13:42:4A:25:82:4A:C8:8A:F0:6A:BA:85:E5:E0:09:2D:B9:F7:F2:32
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial: 01992331130D740E02781F3B8C9F1E4BBC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:42 +0000
Manifest this update: Sun 07 Sep 2025 08:00:42 +0000
Manifest next update: Mon 08 Sep 2025 08:00:42 +0000
Files and hashes: 1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=)
2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: kh7a3UOqrfjQIwBRr7B4a8iWhtH5dHmPcb/yKeTO9zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:13:0d:74:0e:02:78:1f:3b:8c:9f:1e:4b:bc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
Validity
Not Before: Sep 7 08:00:42 2025 GMT
Not After : Sep 8 08:00:42 2025 GMT
Subject: CN=13424a25824ac88af06aba85e5e0092db9f7f232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:92:0f:cb:94:d9:67:bf:45:cb:63:cf:85:
a6:d0:04:a3:80:9f:9d:62:c2:be:7b:a4:eb:04:b4:
c2:f6:e6:ff:b1:05:f4:74:17:3e:94:1e:43:da:e9:
9b:ed:23:cd:4e:61:d8:31:51:d3:82:90:b7:20:ff:
f9:de:b7:14:95:d9:bd:07:e7:c0:ef:8e:82:26:8d:
09:e7:a0:fd:74:99:df:1a:48:13:5a:0c:40:c0:ad:
f5:95:3a:1c:01:02:dc:9e:9b:ab:51:c3:00:d6:ff:
8f:6f:70:dc:57:3a:b0:0e:22:39:2a:58:97:92:a2:
13:c5:d1:09:22:e8:aa:5e:b4:4a:ed:b5:b9:d5:30:
c7:75:de:89:76:4b:a6:10:30:c3:75:45:2a:f8:41:
5f:bb:12:16:d8:c2:a1:02:c3:d2:54:6f:ba:09:1c:
89:76:a1:91:b3:c9:1c:b8:b1:87:98:0b:de:c6:02:
13:47:e1:bc:33:4b:46:3b:04:50:f3:cc:fb:47:e5:
3f:6b:7b:d2:c9:28:48:ee:ea:27:d6:97:b6:e7:3c:
87:bf:67:bf:3a:43:35:ff:4c:78:46:6c:de:b2:b8:
e6:1b:8a:05:ee:07:b1:b0:e6:64:7b:1a:33:2a:ce:
fa:3c:2e:10:1b:9b:c9:8f:9d:e1:a3:fd:a9:f9:1a:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:42:4A:25:82:4A:C8:8A:F0:6A:BA:85:E5:E0:09:2D:B9:F7:F2:32
X509v3 Authority Key Identifier:
keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:ab:ab:3c:20:6e:35:d0:03:3b:e8:d8:a1:18:a9:e1:0c:
4e:80:6f:0a:8f:5f:92:d0:b1:84:4a:4f:05:40:8d:7d:c8:f0:
6b:5c:04:99:c3:0a:cb:23:2c:f2:97:6a:b3:96:92:df:cc:94:
1f:b0:62:98:41:89:b9:1f:a1:7c:61:d9:0c:6d:8d:37:1e:45:
bd:c3:7b:eb:54:7c:d2:96:f9:67:1a:1f:f4:05:9a:73:32:03:
03:a4:89:8a:1e:cd:50:c4:89:93:05:86:e3:fc:8b:49:09:c4:
00:f9:67:99:c1:bb:aa:90:fb:89:55:da:6e:d0:c9:20:70:37:
af:d4:c5:b2:6f:1a:8c:6a:e6:2e:d6:a8:a4:d3:c4:eb:d5:82:
89:2d:ea:f4:69:31:c3:95:54:c1:ec:6e:cd:b9:5c:97:78:c3:
60:b9:2d:91:0d:e2:f0:83:9d:d5:83:92:44:10:cc:ee:70:60:
f8:bd:64:15:24:69:8e:0e:d3:d9:fb:73:83:49:a1:38:d2:98:
d0:44:41:95:de:e4:a9:c8:21:d3:82:e7:89:24:0f:72:61:78:
21:23:37:d9:4d:30:cc:37:96:cc:75:3f:55:d7:b0:f6:0a:85:
87:cd:8a:f1:45:7c:49:00:70:6b:c5:5f:71:3a:5f:4f:df:96:
d1:4e:74:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:47 2025 by rpki-client