Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json)
Hash identifier: X9AKEAr7JbOHcu006sFZWJa9B20j+NNUFseCNTRXPN8=
Subject key identifier: BD:23:A2:3E:F0:82:9D:9E:62:D7:10:EC:0A:18:F1:6E:E5:D8:09:EB
Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Certificate serial: 0199228CAFFBCF32A9B8879F147F954131F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
Manifest number: 1418
Signing time: Sun 07 Sep 2025 05:01:09 +0000
Manifest this update: Sun 07 Sep 2025 05:01:09 +0000
Manifest next update: Mon 08 Sep 2025 05:01:09 +0000
Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=)
2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: 9MlJA17vdQckH/frVb4pUG3QHkumzrW2rh9xI9xfcJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:af:fb:cf:32:a9:b8:87:9f:14:7f:95:41:31:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Validity
Not Before: Sep 7 05:01:09 2025 GMT
Not After : Sep 8 05:01:09 2025 GMT
Subject: CN=bd23a23ef0829d9e62d710ec0a18f16ee5d809eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:9c:84:f2:29:6c:f4:c9:b5:66:a6:61:48:
5e:b8:35:5f:b6:40:a7:13:f5:b0:b3:1a:a2:6c:4a:
40:59:11:bc:c5:15:c1:61:fd:a0:73:33:ea:87:fd:
1e:58:84:44:80:00:a3:61:3a:63:3a:96:92:90:48:
21:0d:6a:13:6a:da:26:cf:7d:95:b2:87:3d:b8:69:
ca:b6:44:fc:c1:83:d8:0e:ca:21:ba:aa:81:54:c5:
42:a6:26:1f:c8:62:27:60:cb:19:61:97:35:3d:18:
91:20:5a:4a:c4:c2:0c:ce:37:c3:b1:e7:a1:d8:0c:
b6:50:fc:b3:e6:01:a5:4c:c4:65:92:7e:40:f7:74:
3e:fd:a3:f1:f9:78:d2:50:04:8b:61:0a:88:76:f4:
09:3a:a1:57:90:22:0f:89:26:4b:54:92:cb:99:3d:
25:c3:88:95:60:17:59:80:f6:c7:8f:b4:9b:68:9d:
e1:f6:92:bf:70:a2:e3:fa:28:a1:41:1b:21:3b:e9:
b1:d5:5d:16:f0:61:81:9b:bb:e6:1c:18:4d:81:d4:
d2:c6:7a:f5:dd:43:4b:dd:1b:1b:f3:ee:ae:f0:0e:
b8:f7:ab:bc:93:63:bf:90:44:1d:f8:a4:57:b9:63:
64:e5:80:c9:00:60:17:4d:9e:26:36:c8:d7:bc:7b:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:23:A2:3E:F0:82:9D:9E:62:D7:10:EC:0A:18:F1:6E:E5:D8:09:EB
X509v3 Authority Key Identifier:
keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:70:48:e5:f5:7f:6e:2c:38:b9:3b:c9:f9:4e:12:e9:c6:b9:
c3:28:c2:98:f7:ad:02:09:db:21:20:be:dd:16:ef:88:cc:f1:
4b:f9:b7:23:d4:53:87:85:27:53:c0:23:a0:32:c8:8c:7b:2b:
72:a5:18:50:55:b9:bc:d2:47:fd:95:59:a4:35:83:39:3e:d8:
ee:09:c8:6f:e2:d0:ea:e8:ee:5f:b2:df:dc:1b:2a:1f:6b:26:
5f:22:b1:49:43:1c:0d:dc:e1:1a:62:93:e5:33:7a:2f:a3:a6:
25:82:3a:e9:e1:97:0f:55:5e:f3:c8:9a:41:dc:71:ed:3f:04:
8d:ff:14:cb:e1:bc:08:66:da:e6:9f:f8:32:9f:27:6e:5a:50:
05:31:fa:74:61:19:f3:a6:35:b3:96:d1:52:e7:ef:2d:7e:cc:
27:76:a4:a3:0b:38:77:26:91:3e:34:07:db:8b:66:f8:e2:49:
5f:22:18:f4:28:12:63:be:fb:6c:86:9e:e6:bb:d2:39:f7:08:
ae:a8:6a:00:75:5f:cc:c8:4e:79:0c:91:e9:85:7d:a1:0b:c1:
bc:53:f7:35:01:b2:a4:4c:7a:99:a5:f3:6d:62:aa:b1:be:7d:
88:94:64:69:87:74:60:6e:f7:99:64:c5:c6:71:b7:fd:8b:ab:
a1:a0:d1:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijK/7zzKpuIefFH+VQTH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZDZjODYwMzQyY2M3OTljMjgwNzRmNjk5NzY4YThlY2Jk
YWE1MmUwHhcNMjUwOTA3MDUwMTA5WhcNMjUwOTA4MDUwMTA5WjAzMTEwLwYDVQQD
EyhiZDIzYTIzZWYwODI5ZDllNjJkNzEwZWMwYTE4ZjE2ZWU1ZDgwOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GechPIpbPTJtWamYUheuDVftkCn
E/WwsxqibEpAWRG8xRXBYf2gczPqh/0eWIREgACjYTpjOpaSkEghDWoTatomz32V
soc9uGnKtkT8wYPYDsohuqqBVMVCpiYfyGInYMsZYZc1PRiRIFpKxMIMzjfDseeh
2Ay2UPyz5gGlTMRlkn5A93Q+/aPx+XjSUASLYQqIdvQJOqFXkCIPiSZLVJLLmT0l
w4iVYBdZgPbHj7SbaJ3h9pK/cKLj+iihQRshO+mx1V0W8GGBm7vmHBhNgdTSxnr1
3UNL3Rsb8+6u8A6496u8k2O/kEQd+KRXuWNk5YDJAGAXTZ4mNsjXvHsxUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0joj7wgp2eYtcQ7AoY8W7l2AnrMB8GA1UdIwQY
MBaAFJvWyGA0LMeZwoB09pl2io7L2qUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMt
NDJlM2VmNGY4YjkxLzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMtNDJlM2VmNGY4Yjkx
LzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnBI5fV/
biw4uTvJ+U4S6ca5wyjCmPetAgnbISC+3RbviMzxS/m3I9RTh4UnU8AjoDLIjHsr
cqUYUFW5vNJH/ZVZpDWDOT7Y7gnIb+LQ6ujuX7Lf3BsqH2smXyKxSUMcDdzhGmKT
5TN6L6OmJYI66eGXD1Ve88iaQdxx7T8Ejf8Uy+G8CGba5p/4Mp8nblpQBTH6dGEZ
86Y1s5bRUufvLX7MJ3akows4dyaRPjQH24tm+OJJXyIY9CgSY777bIae5rvSOfcI
rqhqAHVfzMhOeQyR6YV9oQvBvFP3NQGypEx6maXzbWKqsb59iJRkaYd0YG73mWTF
xnG3/YuroaDRMA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:32 2025 by rpki-client