Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: sQJHTs1X3P8kXDsh2hcicuJSm7L/TL5mE2DfVy6Y9dQ=
Subject key identifier: B8:AE:BF:9F:20:47:D2:C1:34:C0:2D:15:C2:20:A5:60:54:CC:C8:56
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 019873E3890CF84C41E541FDD790F67D5468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:28 +0000
Manifest this update: Mon 04 Aug 2025 07:02:28 +0000
Manifest next update: Tue 05 Aug 2025 07:02:28 +0000
Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: cBQXPaqW13Zol5nfrwggq6csFdieoAO5lFITc5OGCvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:89:0c:f8:4c:41:e5:41:fd:d7:90:f6:7d:54:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Aug 4 07:02:28 2025 GMT
Not After : Aug 5 07:02:28 2025 GMT
Subject: CN=b8aebf9f2047d2c134c02d15c220a56054ccc856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:42:22:0c:d6:fb:33:60:00:ad:b0:74:fa:eb:
73:55:61:21:91:53:86:d9:3c:de:33:ad:a1:01:13:
f0:a5:e9:ba:d4:a9:48:62:98:12:4e:da:34:f8:34:
8c:d5:e9:30:be:75:ee:32:91:1a:0b:9c:28:96:ca:
7e:b2:c7:5f:a2:15:8e:68:ef:9a:25:73:90:a3:68:
29:ea:28:e2:dd:eb:14:81:f6:81:04:c9:96:b8:69:
49:b4:43:64:0d:9f:c4:df:2d:bf:98:9d:f0:9d:49:
c8:fd:e3:90:ab:d5:dd:1d:cf:5e:43:b9:60:c4:18:
af:49:1c:f5:41:a5:bf:fe:1d:43:76:c6:c3:b7:30:
b8:4b:a1:a2:85:96:eb:4b:6f:f6:91:8c:06:91:f8:
99:a8:a6:f4:b1:19:8f:f6:07:71:7e:83:b3:c8:b2:
5e:3f:98:1a:e7:49:10:66:cf:af:66:13:30:4c:b1:
90:65:d8:ff:5e:94:f2:37:02:eb:64:b2:cd:37:f6:
f6:61:da:98:e8:9b:c3:cc:12:ac:8a:07:65:a8:d0:
2a:4e:fa:b2:81:fb:8d:15:21:d0:d3:70:a6:72:c2:
ab:bc:85:40:33:89:bc:99:74:0e:33:69:46:51:8f:
20:1e:c1:13:00:dd:c7:b6:ae:61:3f:b0:6d:ed:fa:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AE:BF:9F:20:47:D2:C1:34:C0:2D:15:C2:20:A5:60:54:CC:C8:56
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:79:de:f4:11:b5:35:c7:41:a4:2f:f4:b1:bc:ed:52:69:a2:
e0:13:f3:a1:be:f7:19:6b:8b:7d:ce:d6:4a:58:0f:83:b5:02:
93:43:81:19:7c:00:c3:49:9a:a3:7b:ca:03:46:bc:9b:ee:e8:
3f:2f:86:e7:01:cb:4e:85:e6:e3:a1:83:33:39:e2:79:2a:01:
42:35:bd:60:2e:0c:07:10:8b:31:b3:21:11:49:98:d4:be:52:
94:ab:d1:30:e1:fb:f3:1d:34:7b:11:cf:1c:e2:e4:dc:cc:eb:
13:06:9f:8a:99:45:d9:c9:87:f7:53:c6:50:b5:ca:9d:4c:e4:
a8:7c:d1:98:2e:5d:05:dd:e6:66:0b:a5:2c:ed:49:f4:97:e4:
29:57:cb:25:da:1c:ed:5f:16:e8:8a:6f:8d:c1:57:44:3f:29:
e0:c5:b0:3b:46:ec:18:7c:06:60:a2:c6:63:81:e1:d1:3f:5b:
39:22:1c:63:1a:7d:27:e4:b2:27:20:60:86:80:6a:94:ff:c9:
02:f8:fa:da:10:ca:4b:e4:3a:6b:c2:6a:9b:bb:0d:58:a5:39:
1a:25:43:5c:56:2b:48:1c:6a:ac:4b:ff:4a:65:12:2d:b1:0b:
f8:03:b0:c5:67:2e:e1:78:ee:5f:ce:2c:39:8a:b8:d2:6f:2d:
44:da:c2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:59 2025 by rpki-client