Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
File: m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json)
Hash identifier: IlNT+6JDQd2uP5+KRmziHA0HNFtLt+YgQyfXYng/Tc4=
Subject key identifier: F9:A3:3F:FE:D0:88:69:F6:36:10:EF:A8:58:08:C2:DE:27:D3:74:9E
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial: 01987D1C03FF51FA17AAFF2A118CF86A3612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:00:44 +0000
Manifest this update: Wed 06 Aug 2025 02:00:44 +0000
Manifest next update: Thu 07 Aug 2025 02:00:44 +0000
Files and hashes: 1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=)
2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: XVDgIZF96heg+rquGHAPHzFwI4wQnhu6mqXRZLn3nPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:03:ff:51:fa:17:aa:ff:2a:11:8c:f8:6a:36:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
Validity
Not Before: Aug 6 02:00:44 2025 GMT
Not After : Aug 7 02:00:44 2025 GMT
Subject: CN=f9a33ffed08869f63610efa85808c2de27d3749e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:fc:f2:ae:1f:f5:23:d7:a8:49:68:66:1e:
9b:ef:85:ca:21:8b:30:45:96:20:31:6f:04:b5:49:
17:03:bf:ae:26:8f:8a:88:df:53:86:ce:a4:30:9d:
6c:67:7a:36:b9:a1:19:eb:70:a4:88:56:8e:a9:ef:
3f:98:44:72:3f:b3:cb:26:67:60:52:f7:6a:aa:55:
ca:1e:ae:56:b1:15:84:be:fb:16:1e:d0:97:fb:a3:
2d:c6:12:70:a2:0a:a3:43:36:10:0d:74:08:1a:a4:
da:41:84:fd:07:ec:ff:f1:68:77:f8:4c:e8:ab:25:
60:e0:22:4d:a7:f2:f2:4c:60:05:5e:9e:d7:dd:3f:
4a:b8:ff:44:ce:11:f5:64:de:ca:3f:7c:e4:98:3d:
df:9d:60:02:ee:a0:32:7a:bb:8a:92:27:4e:f5:11:
50:f2:ff:32:f1:9f:ff:72:4b:63:e0:68:03:d7:bd:
e0:7a:30:d2:f9:c1:f0:4f:da:64:d0:fc:01:80:ba:
de:5a:93:b0:5d:f1:70:16:2d:18:68:3e:e3:90:e4:
bf:c8:44:11:b2:96:6d:81:4c:fe:35:57:89:1b:84:
0a:35:b6:6d:21:52:f0:55:80:17:0d:f7:8b:0c:20:
72:37:b9:b9:1b:7b:41:b7:f5:b5:c1:0b:28:84:51:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:3F:FE:D0:88:69:F6:36:10:EF:A8:58:08:C2:DE:27:D3:74:9E
X509v3 Authority Key Identifier:
keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:14:6b:d9:95:ed:ec:19:39:8d:1a:49:37:28:62:7a:28:dc:
4d:81:3a:95:2b:1b:dd:64:19:9c:78:7c:26:ec:0d:0a:b3:84:
38:1d:21:21:75:f2:09:71:fc:1b:9d:eb:b3:24:7c:67:29:d4:
90:a2:4c:1d:fc:eb:79:4d:49:0f:88:fd:9d:02:95:9a:64:04:
21:51:7a:88:2f:b6:2f:d1:32:4a:c7:a3:cb:f2:47:8c:58:68:
ca:15:53:08:f7:ef:d4:70:09:b0:8b:fe:a7:f5:be:96:ab:ed:
bc:1a:47:af:32:ed:2d:c5:d8:06:f5:ac:63:5d:0f:f1:21:69:
32:5c:41:f6:18:fb:ab:c0:c7:d1:c5:8f:a9:fb:80:d3:d9:f8:
6e:80:a9:a7:ef:10:aa:e5:fd:78:4a:6b:0d:82:10:b1:e6:42:
2e:c0:59:f7:77:83:dd:6f:43:d7:6e:fc:db:e7:91:9e:17:a8:
f0:b4:cd:0c:4a:56:9d:a2:94:36:df:98:7b:5e:34:8d:e0:1b:
62:44:21:98:98:17:ec:e8:59:2a:f7:e0:00:53:f0:85:40:02:
99:4b:b9:be:6e:a5:c5:19:1c:49:06:90:28:04:fc:f9:e9:fd:
51:58:0a:14:65:3d:fd:ea:22:dc:4f:6d:ec:2c:a0:21:3f:3b:
a7:c3:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:39:55 2025 by rpki-client