Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File: mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier: ekOWla3+Za4+FrFFUYxb04sLcSMGVEOzoUPqnYOftr4=
Subject key identifier: 08:A7:03:C9:F3:1A:B2:2E:DB:61:19:31:AF:F4:43:6E:AC:49:23:F5
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial: 019922C3C31E8737B888F3C30EAF481FC172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number: 11F3
Signing time: Sun 07 Sep 2025 06:01:18 +0000
Manifest this update: Sun 07 Sep 2025 06:01:18 +0000
Manifest next update: Mon 08 Sep 2025 06:01:18 +0000
Files and hashes: 1: ONDqQfjr9_AJ9RydMAScKqXbPqA.roa (hash: tzIBuHIsI+gH6B58aDq25YyBMDZoGOkfi5bBeLvI+/k=)
2: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: D0Iug0JfQ8YVnQx5WEN9qljhrmkjRiBNl3qYzDDCXvc=)
3: sGdpJ3MGc2JYHlPiUM-Ur_MYt80.roa (hash: Mg+YYDsRO2iqoqy0HjPvZxJm7jFKR4if92J93XJagMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:c3:1e:87:37:b8:88:f3:c3:0e:af:48:1f:c1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
Validity
Not Before: Sep 7 06:01:18 2025 GMT
Not After : Sep 8 06:01:18 2025 GMT
Subject: CN=08a703c9f31ab22edb611931aff4436eac4923f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bd:f4:32:e5:87:66:b4:61:d3:0b:5e:1f:78:
8a:62:8d:f0:91:c5:49:f9:03:64:10:5d:9f:a2:ae:
cc:7e:76:5c:ff:88:bf:e3:b8:0b:0c:59:6f:29:4d:
05:03:82:d2:6e:71:9c:6e:26:39:4c:fc:9e:b7:50:
4b:0a:69:0f:33:8b:3a:83:8c:bf:9f:39:c2:df:b8:
37:b5:93:a3:b3:39:d9:26:80:cd:ab:df:04:de:23:
4f:61:f4:f9:9f:a0:61:ac:64:f7:a8:29:34:d4:71:
49:a7:01:34:d5:ab:f7:78:e2:14:75:52:4a:ae:c2:
9a:5a:96:5c:39:8b:d3:70:12:4e:1f:16:ca:dd:3f:
51:9e:6d:fd:ac:60:87:30:df:60:eb:18:08:c1:2c:
74:f2:1a:2b:b9:87:f6:70:b0:2a:b3:a9:fe:f7:62:
e5:63:12:26:9e:84:86:cb:3b:88:a3:fb:af:ab:d1:
0a:22:84:0f:5b:f2:72:87:ce:5c:21:d6:1b:43:46:
17:c5:34:2c:0e:41:83:bb:44:26:28:16:9e:d7:32:
31:b6:69:d9:fb:92:ee:05:cd:20:a0:e4:77:a2:6f:
4f:9d:80:ef:d7:14:ac:c2:9e:6f:c6:be:c0:c5:2d:
7a:c3:c2:24:7f:66:44:18:c5:f2:df:3e:45:f6:f5:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:03:C9:F3:1A:B2:2E:DB:61:19:31:AF:F4:43:6E:AC:49:23:F5
X509v3 Authority Key Identifier:
keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dc:d6:28:a4:59:41:7e:7e:32:35:70:42:7f:4b:4c:98:59:
43:25:1b:a8:f6:ab:ab:51:56:46:1b:7a:2d:bb:59:84:27:e8:
8c:f3:1b:67:0b:69:bc:66:5e:a1:5a:ea:57:5c:a0:5c:3c:7f:
98:7f:a1:0a:a5:da:49:6a:7b:58:40:36:20:85:6f:08:09:82:
30:d8:81:62:a7:80:c9:f0:48:b1:89:fa:00:f5:cc:ac:10:81:
9c:bc:3c:33:78:8f:d4:12:a8:c8:06:49:a1:85:c6:cc:7b:d2:
96:d1:c4:4c:e9:a4:7c:e4:b8:b6:ff:cd:9c:ec:54:43:12:1b:
3d:4c:06:b9:2b:b7:6f:33:32:55:ea:96:a5:27:7e:b9:fa:f8:
b9:f3:eb:6a:6e:3d:c7:5f:19:a0:cd:e7:15:1e:d9:c9:79:fa:
0f:3e:04:d1:97:97:ec:68:6c:12:99:6f:02:32:82:ec:c2:24:
00:fb:08:99:23:d2:d2:09:a2:73:b9:d8:ca:55:70:d1:a4:47:
f1:f0:a1:ad:05:59:6b:c8:fb:34:6d:14:de:09:f7:ef:88:09:
41:62:4f:7c:f4:af:ae:b1:11:9a:e7:a0:25:2b:51:f3:7f:fc:
0d:d1:d5:a7:5c:98:17:76:60:30:53:b6:65:e9:ac:6c:e7:49:
18:ce:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:44 2025 by rpki-client