Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: trbO7MJDQ07HosJoqFPOzlRQPI49tgl423gyZqDyId8=
Subject key identifier: 8B:FD:2E:2E:02:69:27:09:E2:84:D7:AF:C5:19:6E:4E:AF:B2:60:3D
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 019921E7AECB6F2C4D9B60A5AE737A1CC7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 1370
Signing time: Sun 07 Sep 2025 02:00:55 +0000
Manifest this update: Sun 07 Sep 2025 02:00:55 +0000
Manifest next update: Mon 08 Sep 2025 02:00:55 +0000
Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: ACQd3EZOO88uqEBnQeht6ONNCH2qPgh+QTwpkP7HZUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ae:cb:6f:2c:4d:9b:60:a5:ae:73:7a:1c:c7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Sep 7 02:00:55 2025 GMT
Not After : Sep 8 02:00:55 2025 GMT
Subject: CN=8bfd2e2e02692709e284d7afc5196e4eafb2603d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:df:bc:f6:cb:3f:5f:77:9e:59:40:62:af:
21:6f:1f:a6:17:90:97:7b:a9:68:0a:16:80:f7:dc:
47:21:35:f3:33:aa:eb:f1:7f:0b:3b:5d:6d:1e:8a:
35:d9:11:f4:d0:53:b3:e0:70:4f:65:a6:1b:af:08:
aa:19:fd:09:ca:87:dd:cc:c8:8a:0b:32:5f:c5:c9:
4a:d1:88:a7:98:e7:14:87:f9:28:e7:28:0e:a9:cc:
68:9e:f9:77:1c:59:2e:9d:f2:7c:d4:92:f5:78:42:
4d:1d:17:61:9c:b6:3e:d9:5e:b1:b0:f9:4d:87:76:
5b:04:0a:44:78:73:85:09:96:9e:6a:7c:10:a5:71:
d4:01:0f:f2:2f:4e:f7:f0:40:fc:14:13:aa:bd:9a:
c6:c9:6d:af:32:d3:8e:eb:9b:af:fe:a5:10:e8:68:
07:00:a3:9c:d1:df:43:2c:8c:bd:ac:e0:2e:88:1c:
a7:2d:33:a5:e5:da:c9:80:2a:19:43:1f:d8:80:2b:
df:95:7b:d4:b7:c4:d9:c4:4d:fd:74:ac:98:95:20:
a1:b4:e1:62:c8:24:8b:73:5e:dd:72:e1:d4:dc:7c:
d6:71:a9:ff:2c:85:6e:79:b8:bb:6a:f7:69:55:a6:
a1:9e:27:74:32:e5:d9:c9:5a:16:f7:6d:72:67:d5:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FD:2E:2E:02:69:27:09:E2:84:D7:AF:C5:19:6E:4E:AF:B2:60:3D
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f5:26:55:cb:9f:00:76:f5:f0:8b:ed:0a:d2:1e:73:19:c4:
0f:1c:f4:c6:8d:5b:54:c4:67:e9:ca:7a:e7:8d:6f:9a:e1:64:
03:d6:cf:b7:c3:b2:d6:d5:e2:1f:4c:bb:ec:c3:b0:f1:93:18:
bc:38:5f:b6:a2:8d:27:15:69:28:5d:88:e2:01:4d:d2:4f:e0:
f3:61:0a:0d:ad:69:3c:49:c0:48:1c:fb:96:84:5f:75:fb:ff:
0a:bf:4e:c1:c4:21:0e:51:a8:53:b9:75:85:0b:b0:a4:c5:18:
4c:4c:3f:e6:47:e8:36:72:a9:2a:c2:41:1a:2d:fa:33:a2:30:
9b:9a:4c:38:76:81:33:0c:32:ce:ff:e8:ea:8b:9e:48:a7:c2:
e7:f1:6d:10:4f:1d:27:08:a7:9c:92:f5:d7:6a:61:5e:a5:cc:
90:da:14:6f:6e:c5:f7:2e:65:13:00:69:6d:34:79:bf:40:98:
b1:74:cd:40:26:a7:f8:c9:72:bf:61:b3:ea:8a:6f:60:a2:f8:
f5:0c:64:f2:18:6b:11:50:0f:2b:00:b5:8c:57:93:1f:19:66:
6d:04:64:91:5d:e1:fd:33:9d:d0:04:a3:51:e5:ba:a8:a4:ed:
80:4b:5f:50:77:1f:de:ed:8c:2f:de:b6:f0:7d:e1:9c:88:64:
02:71:3a:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh567LbyxNm2ClrnN6HMfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzM1MGJjNjEzZDA1ZGU5MTBhOGRhMjZjOTFjMjk3MTcx
MDc4YjYwHhcNMjUwOTA3MDIwMDU1WhcNMjUwOTA4MDIwMDU1WjAzMTEwLwYDVQQD
Eyg4YmZkMmUyZTAyNjkyNzA5ZTI4NGQ3YWZjNTE5NmU0ZWFmYjI2MDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWffvPbLP193nllAYq8hbx+mF5CX
e6loChaA99xHITXzM6rr8X8LO11tHoo12RH00FOz4HBPZaYbrwiqGf0JyofdzMiK
CzJfxclK0YinmOcUh/ko5ygOqcxonvl3HFkunfJ81JL1eEJNHRdhnLY+2V6xsPlN
h3ZbBApEeHOFCZaeanwQpXHUAQ/yL0738ED8FBOqvZrGyW2vMtOO65uv/qUQ6GgH
AKOc0d9DLIy9rOAuiBynLTOl5drJgCoZQx/YgCvflXvUt8TZxE39dKyYlSChtOFi
yCSLc17dcuHU3HzWcan/LIVuebi7avdpVaahnid0MuXZyVoW921yZ9Un1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIv9Li4CaScJ4oTXr8UZbk6vsmA9MB8GA1UdIwQY
MBaAFJvDULxhPQXekQqNomyRwpcXEHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMt
MjJkMTA2MzVmMGM0LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMtMjJkMTA2MzVmMGM0
LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofUmVcuf
AHb18IvtCtIecxnEDxz0xo1bVMRn6cp6541vmuFkA9bPt8Oy1tXiH0y77MOw8ZMY
vDhftqKNJxVpKF2I4gFN0k/g82EKDa1pPEnASBz7loRfdfv/Cr9OwcQhDlGoU7l1
hQuwpMUYTEw/5kfoNnKpKsJBGi36M6Iwm5pMOHaBMwwyzv/o6oueSKfC5/FtEE8d
JwinnJL112phXqXMkNoUb27F9y5lEwBpbTR5v0CYsXTNQCan+Mlyv2Gz6opvYKL4
9Qxk8hhrEVAPKwC1jFeTHxlmbQRkkV3h/TOd0ASjUeW6qKTtgEtfUHcf3u2ML962
8H3hnIhkAnE67Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:08 2025 by rpki-client