Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
File: b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json)
Hash identifier: yofq8CnvT7vQ9S8uMlV2JdCFp2GKMJ2TotD2/TPY1iI=
Subject key identifier: 60:4A:66:94:DC:E3:E3:5F:FD:6E:27:84:87:9E:D4:26:4C:B3:DB:F3
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Certificate issuer: /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial: 01993424C68024DF166D3795E7B2FE93113A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
Manifest number: 0FE6
Signing time: Wed 10 Sep 2025 15:00:49 +0000
Manifest this update: Wed 10 Sep 2025 15:00:49 +0000
Manifest next update: Thu 11 Sep 2025 15:00:49 +0000
Files and hashes: 1: QgZP-cnsGLbXLiB8i-j6fiH8Sys.roa (hash: S2EGBlisrDeYdPuuPvmxq5XQnasXOcn30j5uFZy7zjM=)
2: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: gwB1hD/FJtugUGzqDFqwiT6FR1kJnG83r1NIsI0NYtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:c6:80:24:df:16:6d:37:95:e7:b2:fe:93:11:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Validity
Not Before: Sep 10 15:00:49 2025 GMT
Not After : Sep 11 15:00:49 2025 GMT
Subject: CN=604a6694dce3e35ffd6e2784879ed4264cb3dbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:22:01:93:4f:fb:d5:a9:a3:7a:e1:75:ce:
ea:7d:b6:41:3c:3d:96:d9:2f:da:67:5d:c3:cd:0f:
55:42:71:78:a1:e4:d3:60:0f:e4:6b:b8:ca:67:5c:
ba:4d:97:79:9c:7a:5a:f5:6e:5e:02:19:6a:1b:fe:
87:ce:8d:8f:be:ec:8a:32:63:35:03:15:33:83:7a:
5c:cb:fa:9b:74:c0:77:1f:b3:b8:9d:36:63:61:61:
9b:fd:a2:4b:7f:56:aa:98:00:58:10:3d:c5:44:1c:
a1:f5:46:b0:7d:e8:ae:88:28:01:ac:a0:64:58:7e:
bd:0c:57:fe:a4:ba:90:78:82:3e:4f:5a:6b:c1:47:
32:bf:82:ac:e6:92:47:ac:ef:69:bf:a9:a3:e2:13:
00:dd:96:a8:ed:94:8a:d6:6c:bd:44:cf:18:2e:98:
8c:6a:0d:a6:48:a8:36:eb:6f:ed:d2:61:18:39:df:
6c:96:c4:5c:67:c9:33:d7:22:fb:6d:c0:7a:2f:e7:
60:bd:21:bd:41:de:66:06:0e:87:c4:eb:a1:d1:0c:
49:a2:52:f1:f7:70:55:c9:cf:59:79:18:7a:b4:70:
15:89:fd:ee:bb:45:6d:3f:26:37:92:16:6b:58:0b:
ff:88:79:07:24:9a:a0:46:95:6d:23:44:cd:1c:d5:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:66:94:DC:E3:E3:5F:FD:6E:27:84:87:9E:D4:26:4C:B3:DB:F3
X509v3 Authority Key Identifier:
keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:4d:54:75:36:2d:20:e3:19:ef:e3:fc:39:7d:d4:ff:28:
39:a1:4d:71:d5:1d:51:74:6a:f8:10:2c:b8:30:ea:21:cc:72:
04:68:c8:a6:a5:8d:49:12:4c:60:9d:60:f8:2d:44:86:1b:c1:
67:a0:ca:53:ef:f3:1b:cf:fd:ee:95:ea:ac:c0:cf:01:a0:84:
90:0a:4c:21:f4:56:51:20:af:0d:06:c4:e0:b3:3e:be:23:e9:
28:74:74:63:07:04:09:03:95:7c:a1:83:57:e6:ff:eb:5b:cc:
7d:b2:36:fe:b9:f3:69:80:5a:c2:58:65:7a:63:5e:60:f2:98:
d2:02:ff:c5:d2:9b:b3:17:19:b1:16:12:46:b1:18:a7:21:ca:
d6:e7:9a:14:ce:3a:2b:68:6f:6f:96:b1:38:31:7b:84:c1:32:
2b:94:d0:c5:81:20:a0:f8:37:b0:0d:38:87:0f:8a:30:28:d6:
e3:98:4f:d0:87:0b:f8:28:ff:45:93:aa:e9:10:09:c8:35:c9:
12:e5:74:2e:3f:29:f6:3e:99:97:dd:ed:97:c2:d2:7d:bc:65:
5c:9a:fc:12:22:b5:d3:85:56:45:29:8a:82:60:bf:f5:f1:99:
60:1e:49:82:7f:09:3f:10:f3:93:01:14:b5:06:00:fb:f9:24:
31:8f:e8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JMaAJN8WbTeV57L+kxE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZDMzZjllNjg1NjhkZDYwNWJjOTJhZmMxZWY2YjY5ZTEy
N2FiZDgwHhcNMjUwOTEwMTUwMDQ5WhcNMjUwOTExMTUwMDQ5WjAzMTEwLwYDVQQD
Eyg2MDRhNjY5NGRjZTNlMzVmZmQ2ZTI3ODQ4NzllZDQyNjRjYjNkYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztYiAZNP+9Wpo3rhdc7qfbZBPD2W
2S/aZ13DzQ9VQnF4oeTTYA/ka7jKZ1y6TZd5nHpa9W5eAhlqG/6Hzo2PvuyKMmM1
AxUzg3pcy/qbdMB3H7O4nTZjYWGb/aJLf1aqmABYED3FRByh9UawfeiuiCgBrKBk
WH69DFf+pLqQeII+T1prwUcyv4Ks5pJHrO9pv6mj4hMA3Zao7ZSK1my9RM8YLpiM
ag2mSKg262/t0mEYOd9slsRcZ8kz1yL7bcB6L+dgvSG9Qd5mBg6HxOuh0QxJolLx
93BVyc9ZeRh6tHAVif3uu0VtPyY3khZrWAv/iHkHJJqgRpVtI0TNHNUDYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBKZpTc4+Nf/W4nhIee1CZMs9vzMB8GA1UdIwQY
MBaAFG/TP55oVo3WBbySr8Hva2nhJ6vYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjlNX25taFdqZFlGdkpLdndlOXJhZUVucTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hMWM3ZjUtMWVhOS00YTFmLWEzZTQt
OGMyN2M5NzY2M2RjLzEvYjlNX25taFdqZFlGdkpLdndlOXJhZUVucTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hMWM3ZjUtMWVhOS00YTFmLWEzZTQtOGMyN2M5NzY2M2Rj
LzEvYjlNX25taFdqZFlGdkpLdndlOXJhZUVucTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVupNVHU2
LSDjGe/j/Dl91P8oOaFNcdUdUXRq+BAsuDDqIcxyBGjIpqWNSRJMYJ1g+C1EhhvB
Z6DKU+/zG8/97pXqrMDPAaCEkApMIfRWUSCvDQbE4LM+viPpKHR0YwcECQOVfKGD
V+b/61vMfbI2/rnzaYBawlhlemNeYPKY0gL/xdKbsxcZsRYSRrEYpyHK1ueaFM46
K2hvb5axODF7hMEyK5TQxYEgoPg3sA04hw+KMCjW45hP0IcL+Cj/RZOq6RAJyDXJ
EuV0Lj8p9j6Zl93tl8LSfbxlXJr8EiK104VWRSmKgmC/9fGZYB5Jgn8JPxDzkwEU
tQYA+/kkMY/oFw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:00:29 2025 by rpki-client