Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: TFCQGU3ADqF+XaZT9Ua9rR1JK1hp7Qok9FAVyvfpjKI=
Subject key identifier: 44:0A:06:50:4A:A9:31:63:3E:31:96:64:87:4A:15:FE:57:9D:2B:F1
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 0199240D0142A0BA722FF595C58F9CB3404C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 12:00:55 +0000
Manifest this update: Sun 07 Sep 2025 12:00:55 +0000
Manifest next update: Mon 08 Sep 2025 12:00:55 +0000
Files and hashes: 1: VxhJQDKCdmlccpU7wsiJAEzzTtc.roa (hash: b9Rf82tWGBx56csRc2DtObsZNSgJoQBwhj0rE/YxDoo=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: yd4P8mJHkCC1SClCBerODB3wtlpDFvo5eYsCIgFGQ50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:01:42:a0:ba:72:2f:f5:95:c5:8f:9c:b3:40:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Sep 7 12:00:55 2025 GMT
Not After : Sep 8 12:00:55 2025 GMT
Subject: CN=440a06504aa931633e319664874a15fe579d2bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:89:62:61:f9:f8:8c:45:1b:0d:5c:2d:3c:
e9:bc:8a:dc:17:31:4f:5d:a2:40:5f:c2:f6:b3:a9:
3a:4e:cb:e5:0d:94:41:43:4b:98:b8:c4:0f:8e:37:
0f:34:4c:50:a1:a0:62:e6:27:4d:b1:a0:fd:62:12:
07:35:01:d3:89:3c:1f:e3:3c:c5:82:66:26:5c:5a:
e6:a4:c0:7a:a5:cc:c8:95:af:1e:62:36:b0:7a:63:
7b:aa:03:08:86:8e:ab:cb:ec:9c:9d:4c:c7:cb:26:
33:03:87:00:95:4a:94:7f:ac:2b:c9:f1:5e:64:11:
d4:51:b6:c4:de:43:12:97:3f:9f:3c:46:03:ea:1d:
dd:5b:99:06:da:35:20:b8:ca:eb:9a:f4:ee:9d:44:
e3:a7:9a:e0:4d:68:0e:2a:19:4d:f5:89:20:28:2c:
5b:79:d0:7b:11:9a:4d:4c:f2:61:15:66:a6:39:3e:
ff:8e:aa:c5:d4:75:33:65:85:4e:85:19:98:54:5f:
9d:8d:db:cc:33:a6:e5:a7:73:16:ee:18:ff:d5:92:
0d:22:1f:c9:44:1b:22:3d:73:4f:c3:6f:9d:87:02:
23:40:a0:47:09:0e:42:23:ff:ab:0f:ef:da:ae:7a:
78:ec:39:c5:3f:85:a6:c6:d8:f3:13:62:2e:1e:e6:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:06:50:4A:A9:31:63:3E:31:96:64:87:4A:15:FE:57:9D:2B:F1
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2d:25:4b:bd:7e:d2:58:3c:99:cd:e8:4a:61:f1:a4:97:b8:
9c:e5:00:5b:cc:8b:b7:e7:b7:6b:45:8f:a6:88:d5:76:e6:41:
68:8f:95:ee:06:45:92:2c:95:f0:6e:55:c3:7f:4b:8d:06:30:
96:62:64:fe:74:0a:24:5c:41:b7:38:6d:55:be:53:8c:68:36:
46:0a:8a:95:35:09:e9:e7:42:78:c1:47:c6:d1:eb:4d:b8:0c:
94:10:9c:5b:8e:9e:77:43:f0:43:8c:76:6b:fb:dc:60:bb:b6:
60:74:ea:b1:94:30:45:38:23:30:82:36:48:02:9d:1d:8e:9f:
db:5e:a9:1d:91:1f:4b:28:b5:f8:08:1f:f3:c6:57:cb:25:dc:
7f:4d:14:0e:9d:4a:d7:0e:db:95:2d:4b:f6:05:b5:7d:f5:76:
d4:3e:7c:06:15:87:45:74:34:9d:8c:1a:c9:89:65:2a:c1:f7:
80:d4:dd:69:ed:c7:a3:7d:73:54:48:2b:c8:c9:44:5a:4d:f9:
5d:11:21:59:76:68:dd:ef:f5:7d:c3:ef:6a:fb:e3:61:31:68:
3b:2b:03:9a:f0:5e:9e:92:2d:5c:af:26:a7:37:24:c6:0b:1b:
c6:24:27:9d:3f:2e:d7:1f:1d:61:ec:8a:41:78:52:1e:ad:e6:
01:9e:b2:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDQFCoLpyL/WVxY+cs0BMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2
ZjA4YzIwHhcNMjUwOTA3MTIwMDU1WhcNMjUwOTA4MTIwMDU1WjAzMTEwLwYDVQQD
Eyg0NDBhMDY1MDRhYTkzMTYzM2UzMTk2NjQ4NzRhMTVmZTU3OWQyYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeOJYmH5+IxFGw1cLTzpvIrcFzFP
XaJAX8L2s6k6TsvlDZRBQ0uYuMQPjjcPNExQoaBi5idNsaD9YhIHNQHTiTwf4zzF
gmYmXFrmpMB6pczIla8eYjawemN7qgMIho6ry+ycnUzHyyYzA4cAlUqUf6wryfFe
ZBHUUbbE3kMSlz+fPEYD6h3dW5kG2jUguMrrmvTunUTjp5rgTWgOKhlN9YkgKCxb
edB7EZpNTPJhFWamOT7/jqrF1HUzZYVOhRmYVF+djdvMM6blp3MW7hj/1ZINIh/J
RBsiPXNPw2+dhwIjQKBHCQ5CI/+rD+/arnp47DnFP4WmxtjzE2IuHubnjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQKBlBKqTFjPjGWZIdKFf5XnSvxMB8GA1UdIwQY
MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt
YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3
LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKS0lS71+
0lg8mc3oSmHxpJe4nOUAW8yLt+e3a0WPpojVduZBaI+V7gZFkiyV8G5Vw39LjQYw
lmJk/nQKJFxBtzhtVb5TjGg2RgqKlTUJ6edCeMFHxtHrTbgMlBCcW46ed0PwQ4x2
a/vcYLu2YHTqsZQwRTgjMII2SAKdHY6f216pHZEfSyi1+Agf88ZXyyXcf00UDp1K
1w7blS1L9gW1ffV21D58BhWHRXQ0nYwayYllKsH3gNTdae3Ho31zVEgryMlEWk35
XREhWXZo3e/1fcPvavvjYTFoOysDmvBenpItXK8mpzckxgsbxiQnnT8u1x8dYeyK
QXhSHq3mAZ6yfw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:36 2025 by rpki-client