Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File: M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier: F/NgGa9KLXbNFO77j8yz/Ryyk+fYygMysC6FVrzTRWQ=
Subject key identifier: 9D:10:95:A9:89:34:5B:30:A1:2B:52:30:C1:66:13:98:D8:89:BB:D0
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial: 019921B04E3B935689175955B50B826D7D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number: 0AED
Signing time: Sun 07 Sep 2025 01:00:26 +0000
Manifest this update: Sun 07 Sep 2025 01:00:26 +0000
Manifest next update: Mon 08 Sep 2025 01:00:26 +0000
Files and hashes: 1: 2VDjJz9n7fNb41CHgZLbe3-QdD0.roa (hash: NTSasPJavqqAm1Q5mw/3+6GrzCofhHPMKBh40Uo0ZUU=)
2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: 2wInRZdSsfn+NRs7hP2dutfwBstiCfiQ8GgIrsrJ1Mo=)
3: NMTc166VLRQ_ryCoHTFRsR83UNY.roa (hash: BF6b/jv7hOFjJwviuax9djqsB1bZ01DAfPp+52Wk9Hs=)
4: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (hash: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=)
5: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (hash: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:4e:3b:93:56:89:17:59:55:b5:0b:82:6d:7d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Validity
Not Before: Sep 7 01:00:26 2025 GMT
Not After : Sep 8 01:00:26 2025 GMT
Subject: CN=9d1095a989345b30a12b5230c1661398d889bbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:9e:5f:18:a8:a9:b6:87:4b:02:03:2b:2b:
e0:21:f3:19:c3:67:ab:a6:67:c9:52:c5:81:c5:bf:
96:2c:e8:69:0d:bc:02:c8:e6:9b:46:06:38:9a:25:
9c:35:36:1d:9f:8f:49:2e:a7:5e:b7:7b:a1:4c:49:
b6:88:5d:f5:cb:1e:e4:a8:37:40:1f:aa:6b:e6:60:
64:75:03:1b:dd:bb:4a:5c:ac:e3:bd:78:38:7a:43:
21:e7:7c:8f:ba:d8:7d:b7:2b:2b:15:be:35:70:d8:
41:0d:b8:3d:a3:a9:67:5e:09:60:57:5f:8a:bc:43:
36:b9:98:98:47:9b:b8:4b:b7:d7:73:c0:92:9f:3d:
fa:a7:e9:ad:1f:cb:35:01:a4:7f:26:14:27:05:2f:
af:5b:90:ae:47:31:38:54:d6:6c:10:b4:e3:a0:d9:
82:cc:1f:59:19:60:ab:b0:72:51:e3:66:83:64:ce:
2d:d3:bb:79:7c:5e:f3:ad:66:8f:a1:e5:38:86:68:
76:93:6d:a8:ee:64:bd:74:18:8a:a1:1c:29:87:46:
9f:7c:d4:80:4d:f6:2d:ac:43:7a:08:36:d5:bf:04:
26:1f:bb:13:fb:3d:4a:1e:d6:b2:05:87:00:ee:15:
6d:d9:1b:fb:75:98:d7:c8:d0:c6:2f:2c:4c:63:00:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:95:A9:89:34:5B:30:A1:2B:52:30:C1:66:13:98:D8:89:BB:D0
X509v3 Authority Key Identifier:
keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:15:6c:d1:2d:0d:a8:e1:a1:b7:42:41:92:d3:55:05:ba:e8:
24:16:8d:c5:cf:9c:61:cb:fb:6a:1f:76:9f:f0:52:ee:b4:14:
6e:3e:6a:1d:a4:bf:81:0a:d2:c9:8c:29:09:33:d8:8b:d7:9f:
aa:91:4f:7e:1a:e4:c7:c2:7d:af:27:63:0b:64:2c:00:cd:87:
65:3f:6f:6c:6c:e8:ec:06:be:d3:fc:53:6f:ba:20:95:4a:f1:
cf:ee:83:00:21:84:28:12:a2:3f:68:06:44:e4:3c:be:08:28:
fd:5d:8d:a3:2d:ef:20:cc:e5:44:f1:0b:db:65:46:ac:6e:66:
62:0b:be:4b:77:f7:db:d5:02:ff:3b:22:8a:7a:f5:46:3d:44:
0b:dd:e5:ed:7a:ce:60:a9:20:ef:9d:50:e1:9f:95:12:16:e8:
c1:60:0b:7f:b7:8a:8f:68:fe:d6:78:b9:f3:04:b7:41:62:8f:
26:bb:82:d3:24:7d:da:d2:3d:8b:8a:2d:d1:51:cf:bd:02:87:
ce:a7:c3:09:3f:fd:69:2d:e0:0f:22:5a:8b:cd:a7:4d:e2:fa:
a7:08:3b:9a:d9:c5:f1:a5:f1:35:59:c5:91:64:b1:e4:2c:b6:
ac:33:ee:c3:cb:21:86:2d:4d:42:d8:a9:11:b3:ed:b3:dc:3c:
c0:60:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:33 2025 by rpki-client