Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File: m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier: sALVR5OmZscsAlkxjyMGVjJufivOpVCR1aEErxre1jY=
Subject key identifier: 78:92:EF:1F:B1:9F:74:A4:28:5C:79:C2:CA:B6:5C:69:EE:D6:17:AC
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial: 0199228C94A5EAB3F84D0599EF9F38A87649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number: 0CF2
Signing time: Sun 07 Sep 2025 05:01:02 +0000
Manifest this update: Sun 07 Sep 2025 05:01:02 +0000
Manifest next update: Mon 08 Sep 2025 05:01:02 +0000
Files and hashes: 1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: Fq4K/1hLOBCwhnTN8XptqlGcogMXN24ersD16Mjm7K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:94:a5:ea:b3:f8:4d:05:99:ef:9f:38:a8:76:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Validity
Not Before: Sep 7 05:01:02 2025 GMT
Not After : Sep 8 05:01:02 2025 GMT
Subject: CN=7892ef1fb19f74a4285c79c2cab65c69eed617ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:3b:a6:d4:fd:f6:12:1c:d6:26:44:4f:3d:
6a:30:5d:c4:4d:a7:df:c7:ec:1d:6c:10:53:71:88:
a4:b3:95:e1:e9:4d:12:93:ee:4f:7e:e5:d6:02:ce:
3d:1d:90:5c:82:be:e0:6e:3f:d3:38:e6:8a:07:62:
87:6a:cd:84:5f:38:2a:cd:3b:45:34:72:83:26:a0:
c1:9c:50:6e:86:4a:90:cc:e7:25:e9:dc:80:e8:ae:
9c:a3:69:63:fb:53:48:69:79:5b:83:3b:c5:a3:52:
ed:ce:66:ad:43:b8:01:37:d9:68:55:70:c5:20:a2:
d1:fa:29:46:ec:3d:ab:bf:16:4e:fb:0d:e5:a5:3e:
1e:6f:75:ad:0a:e0:ee:43:ad:01:b8:7b:48:f9:66:
f4:cd:77:74:4f:f9:14:3e:dc:4f:39:9d:eb:c8:65:
b9:e5:d3:da:a6:d3:7d:7f:0c:8a:0b:16:66:26:c8:
d6:35:d5:c8:2c:41:37:b2:50:3c:08:77:b8:33:ac:
18:56:7a:ff:14:1b:b6:7e:ac:a1:17:6e:e5:39:1e:
ca:e4:c7:97:e7:09:74:d6:ff:5d:9a:98:58:fb:84:
ef:24:5b:80:22:c7:83:29:d0:7a:20:8b:46:49:cc:
10:c1:9a:0d:7b:b3:97:8e:c9:4e:b2:ab:8c:02:e7:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:92:EF:1F:B1:9F:74:A4:28:5C:79:C2:CA:B6:5C:69:EE:D6:17:AC
X509v3 Authority Key Identifier:
keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:29:f9:51:64:0d:e7:15:6a:9a:bd:9e:c7:fa:4c:7f:60:
c6:ae:17:7c:81:9d:43:5f:05:fb:01:6d:39:b6:9d:cc:e2:93:
46:af:76:33:e8:4d:9a:d9:c3:20:b8:3a:55:b1:cd:64:e4:ea:
f1:c0:9c:c3:dd:05:7d:4d:d6:c7:87:58:ec:b4:9c:33:97:e7:
2b:d4:93:a8:b4:66:db:9d:51:f1:17:1f:ab:53:19:dc:ae:2a:
4f:df:05:1d:1a:6a:54:35:52:75:4c:01:2d:ce:04:64:af:2b:
59:c4:2d:69:43:02:7c:70:00:eb:0e:55:92:ba:48:96:13:14:
93:07:0a:29:c6:1f:1a:bd:a6:d5:66:98:56:a6:27:86:5f:2b:
63:df:ed:c1:05:21:ba:ce:b9:20:33:5f:45:f1:49:f3:60:5d:
3b:89:5b:36:7e:28:79:1e:70:d0:f5:f3:b0:af:d3:ee:6b:c1:
38:75:41:2d:5f:a6:a7:9f:86:f2:21:8c:bb:a9:b8:8d:9d:01:
49:5a:c7:e4:f2:8c:79:68:ae:2d:20:64:59:36:e5:67:a9:84:
ff:1d:07:68:be:76:b1:7b:fb:aa:fd:dc:f0:a9:ed:35:67:51:
13:59:15:da:fc:b8:6d:b7:5c:aa:e4:dc:74:50:4f:ba:e8:22:
c3:c4:8f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:51 2025 by rpki-client