Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: cRSBP1LTPsXHeSoqERGzVSwVRBlXkcip9rmjOGNbA2c=
Subject key identifier: 25:C3:8E:53:74:C5:E0:75:B0:70:B1:BB:01:89:90:B2:13:F3:92:B9
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 019889FC6AF3170C0FD150FE6BFA7D50FB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 14:01:17 +0000
Manifest this update: Fri 08 Aug 2025 14:01:17 +0000
Manifest next update: Sat 09 Aug 2025 14:01:17 +0000
Files and hashes: 1: U6nb6DpUzJV_xi4UhiA5O3aKdZE.roa (hash: at4iy2FPtAChzVS5IZxWuVWW9v3c10T2DEm7KMEtSwY=)
2: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: BWfQ56WGIDodAfKTxSDCp5FGzhQyMWO5LA7CFL04FHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:6a:f3:17:0c:0f:d1:50:fe:6b:fa:7d:50:fb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Aug 8 14:01:17 2025 GMT
Not After : Aug 9 14:01:17 2025 GMT
Subject: CN=25c38e5374c5e075b070b1bb018990b213f392b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:3a:28:40:56:d1:61:b7:90:79:92:3d:18:
6a:26:9f:3f:65:23:25:d1:75:12:f2:ab:14:c5:2a:
da:4a:7f:98:11:5b:b9:40:45:1b:9f:a7:fb:4b:08:
34:84:99:fa:b0:18:5e:21:e9:3e:64:c4:b5:2a:04:
d1:3f:53:50:65:8f:f8:21:d1:81:fc:84:d6:33:51:
24:72:3d:f2:68:58:83:06:40:5e:8b:8f:85:cb:1d:
d8:77:bf:48:da:31:04:81:d7:ea:b7:3a:91:7a:bd:
88:ff:0e:de:ea:6a:4b:a0:94:e8:c7:16:21:7f:b6:
d8:52:32:bc:90:88:0f:50:07:08:5a:c7:bf:ed:9d:
39:b2:35:32:b1:2a:56:39:19:67:de:1f:b3:f4:0a:
9c:ef:12:ee:77:f9:8a:de:9e:c8:db:a7:1a:ba:35:
57:d9:1c:a1:0e:7f:9d:95:df:6b:84:a7:e6:b4:5d:
5f:06:f5:9d:2b:23:c1:d9:98:0d:1b:86:50:2f:2f:
c2:11:c1:33:db:90:be:e1:c8:d7:71:58:08:59:7e:
d2:11:e8:d7:b5:17:c5:fe:6c:2c:d6:fd:49:11:60:
56:90:6b:a1:b5:b1:c2:97:c0:d4:8b:36:41:b6:3d:
bb:49:07:41:7a:17:46:d8:35:a4:d5:a2:cb:24:2b:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:8E:53:74:C5:E0:75:B0:70:B1:BB:01:89:90:B2:13:F3:92:B9
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:df:3c:24:f5:61:6a:d8:48:00:fb:95:a9:cf:67:c0:99:b0:
c6:3d:62:82:e2:7a:38:ae:a7:8b:ef:72:a0:a7:f7:8c:72:c5:
a5:9a:73:e1:15:77:77:09:66:09:d3:d6:51:3f:b3:cf:e5:85:
ff:95:0e:86:fc:87:2b:8c:c3:56:bb:b3:ba:f6:74:ef:c2:7f:
3d:20:29:c1:57:bf:c5:f8:ca:38:48:a7:4e:b7:2f:11:02:f5:
48:fd:9c:17:86:c4:7a:dd:35:b2:c3:84:9b:03:80:34:ae:90:
88:4d:df:aa:89:55:2f:b4:53:1f:be:fd:86:c4:6d:64:20:ed:
e7:19:96:cc:f2:0d:f0:f0:b8:08:14:a7:0e:48:f9:11:3a:ec:
36:be:58:60:8c:88:de:e0:9f:7a:81:88:2d:40:7c:2e:d4:13:
91:0a:63:93:33:41:ce:c5:5d:61:a0:ca:cc:91:3e:72:ac:5c:
8f:60:0e:8a:73:64:70:5e:ad:e6:0d:55:2f:2c:8f:a1:57:7f:
ed:c3:fa:57:dd:99:04:3e:32:c3:46:6b:a6:e8:ad:b4:b7:59:
45:18:9e:88:d6:6a:dd:f3:7f:f0:fa:6a:1c:76:4b:2d:2a:df:
5e:bb:ff:95:c9:73:d9:c6:00:f3:44:bd:58:d3:79:2f:2c:48:
a9:ad:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:17 2025 by rpki-client