Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json)
Hash identifier: cf8K/E0TAV1tt3tBzbvT97hLOizPPVlOt5Gn7IMWd5A=
Subject key identifier: 89:C5:26:D8:4D:4C:D1:12:34:2B:81:88:7B:61:25:BB:4F:1A:EE:BE
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial: 01988C8F3D4BD58D939189032B8028AEA601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
Manifest number: B4
Signing time: Sat 09 Aug 2025 02:00:54 +0000
Manifest this update: Sat 09 Aug 2025 02:00:54 +0000
Manifest next update: Sun 10 Aug 2025 02:00:54 +0000
Files and hashes: 1: f1BUILnewKi0pPk0-cUIO9sX1N4.roa (hash: upOHsTvU2HpEvGGaQw5H57ty1Pp8ZO03Lz1+b3tzvFA=)
2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: 2J1oysCw7AgjtlPRdcCrs4eICluTtfBG3b/zwC/+AcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:3d:4b:d5:8d:93:91:89:03:2b:80:28:ae:a6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Validity
Not Before: Aug 9 02:00:54 2025 GMT
Not After : Aug 10 02:00:54 2025 GMT
Subject: CN=89c526d84d4cd112342b81887b6125bb4f1aeebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:92:34:40:50:09:44:8c:c9:75:bd:d7:db:
1a:ab:d5:1d:21:03:0a:e3:08:ff:9e:c6:d3:ca:81:
5c:9d:6b:80:d8:e7:06:d1:45:e0:11:86:5c:e6:13:
4f:7b:39:34:02:5a:b7:04:33:1e:0d:72:34:16:d3:
f9:f4:25:fb:c9:1e:5c:05:5b:11:fe:cd:74:5f:83:
89:73:dd:b5:ef:13:10:ff:9f:4c:a3:7b:3a:c8:d8:
f8:cd:86:7e:98:cb:9f:89:6e:7d:3c:3d:cf:18:c6:
5c:89:5a:d9:37:3f:b4:ee:a3:6c:12:ac:5d:ff:91:
9a:56:04:2a:c7:08:51:dc:c7:9d:4a:6e:07:42:6d:
1a:62:c9:c8:44:87:ac:bd:46:fd:0f:7e:cb:40:f1:
a9:3a:6d:c1:a3:2b:f5:23:e1:eb:a8:6f:58:0c:01:
3f:d3:83:43:3c:a2:a5:52:bf:9d:28:90:23:fc:d0:
2f:8c:84:c9:73:2a:18:5f:25:54:29:48:e0:6c:e0:
61:d0:2b:f9:5d:24:82:38:a6:ca:0e:c8:95:65:3d:
1d:cc:93:b5:ab:79:e9:73:ce:d4:55:d3:6d:3f:09:
53:8a:b6:2a:6d:ae:f2:93:36:c5:65:ae:95:60:7f:
ac:ea:8d:ff:5e:04:c0:76:51:69:fd:fb:4c:1e:da:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:26:D8:4D:4C:D1:12:34:2B:81:88:7B:61:25:BB:4F:1A:EE:BE
X509v3 Authority Key Identifier:
keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1c:95:f3:0c:64:10:74:fb:bb:57:dc:53:34:5b:37:4a:f6:
76:c8:ca:8e:ac:a7:e1:96:b8:92:02:39:66:d8:94:ab:06:62:
b4:b1:37:06:5d:99:30:63:4b:b5:5c:f2:a7:aa:82:3f:fd:ba:
20:02:56:ff:2a:93:de:4c:1a:bc:ac:51:41:0b:6d:55:e4:46:
5e:48:ad:e7:b8:a6:bb:a9:5b:d1:37:b1:a0:98:17:76:5c:f0:
a4:be:9c:13:77:f1:ba:1f:6b:f3:94:8a:59:f6:59:d5:46:a4:
90:4a:22:59:3d:bc:7a:f0:be:28:bf:3c:9f:8a:39:f9:19:90:
af:5f:c4:36:11:ec:1e:ac:0d:b8:64:65:a0:d6:8a:0a:44:86:
59:4c:02:cf:c7:4c:bd:4a:9b:4c:6e:9a:1a:e0:40:37:87:79:
76:68:2f:26:4a:f7:61:20:d7:06:30:fc:4f:03:e9:90:7d:64:
7b:70:76:e1:b8:77:41:f2:1a:88:8c:e8:fb:91:c7:47:dd:8d:
8c:87:88:10:3f:12:90:2b:2d:db:ec:20:67:0d:d0:ac:46:18:
19:c9:11:52:6d:02:dc:c6:85:57:f9:bb:1c:99:72:32:99:5d:
6b:b4:c1:d2:ab:cb:24:c8:bb:75:79:d7:f9:8d:22:22:50:16:
24:74:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:55 2025 by rpki-client