Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
File: m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json)
Hash identifier: O3UbehCekT3lqPFm0uUNQmZ0vxp3jIaYwN1oXrdMC3E=
Subject key identifier: D4:7F:21:E7:D9:B9:45:0D:54:39:75:DD:20:5C:0C:41:8A:A8:61:C4
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial: 0198857A5AC31279DE7DB5732ED7A286B7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 17:00:44 +0000
Manifest this update: Thu 07 Aug 2025 17:00:44 +0000
Manifest next update: Fri 08 Aug 2025 17:00:44 +0000
Files and hashes: 1: 6gwfZ0imtXXPhJEbNpqe4SziOnE.roa (hash: Pn+V1Yp5GxtDMsze+Fax5FaJ18PgHU1//S1rPV1x8cg=)
2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: b5GF7I85RgSWRS4McNGYISFz4a6nORU825qAFIdcSBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:5a:c3:12:79:de:7d:b5:73:2e:d7:a2:86:b7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Validity
Not Before: Aug 7 17:00:44 2025 GMT
Not After : Aug 8 17:00:44 2025 GMT
Subject: CN=d47f21e7d9b9450d543975dd205c0c418aa861c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:f9:b2:40:0c:3e:8a:b2:ca:cb:3c:9d:b3:
04:3b:ca:0e:12:1d:a7:ca:e1:d1:49:cd:ac:d1:44:
20:93:62:f7:a0:31:8b:94:3e:82:5b:31:dd:ca:fd:
4f:d1:d0:14:c6:cc:5d:9b:2d:83:94:c6:28:56:4e:
23:15:92:32:e2:23:bb:ec:ce:08:9c:9a:99:1e:5a:
15:6c:5d:1c:63:5b:d7:31:cc:84:9f:d8:a7:0c:56:
7b:f2:ec:2a:ff:03:2d:de:4f:b3:1f:bb:34:a1:d6:
00:46:0d:d1:63:11:54:12:a2:b0:15:ed:f9:17:d7:
05:d4:37:c7:1b:0c:cb:e7:30:39:33:a2:e9:ac:36:
cb:07:be:47:b9:54:3f:23:6a:18:bf:72:86:55:5d:
bf:47:6b:27:98:f1:ea:bd:80:ed:30:9f:20:3b:86:
7c:fc:24:c9:0a:fb:72:9e:31:ff:ae:e0:fe:a6:cd:
75:85:33:71:ac:cc:96:6c:17:1a:99:62:84:5b:2a:
78:6c:a7:53:41:d0:3f:8d:f4:55:8f:47:c9:56:a0:
14:70:26:78:c2:29:e9:6b:a6:be:3b:71:1b:b4:64:
ce:40:72:24:d2:d4:12:ae:bc:0b:e8:73:32:51:33:
73:00:58:ea:a5:bf:4b:ff:a5:79:0d:4f:18:58:ed:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7F:21:E7:D9:B9:45:0D:54:39:75:DD:20:5C:0C:41:8A:A8:61:C4
X509v3 Authority Key Identifier:
keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1e:29:87:1e:20:d1:44:b0:bf:a9:84:a5:89:5e:74:b2:bf:
3b:4d:09:85:fe:92:cd:c1:03:1d:d5:d1:00:00:12:fc:90:f1:
7a:a4:3f:17:ac:75:ee:08:0a:e7:62:be:7d:fe:93:61:e8:eb:
ee:91:33:60:6b:b5:81:ee:47:77:8c:3c:58:62:1d:be:d3:de:
38:b6:b9:92:7f:75:c7:28:f2:be:2d:ab:15:40:90:8d:bf:a1:
c7:0e:d5:71:4b:cb:96:a7:86:df:e4:71:9c:c7:11:d8:d5:e4:
51:25:51:2c:5e:b4:26:4f:1c:26:7f:30:ee:be:eb:1f:8b:4c:
f7:1c:19:f4:7b:bc:08:b2:e1:35:1d:dd:d4:9d:b5:4d:7e:d5:
f9:c2:16:8f:ca:3c:77:49:a7:8f:e1:ae:51:ba:a2:1a:fe:64:
23:02:ba:b6:32:6d:e0:1e:50:56:2d:e6:01:27:cc:ac:e7:da:
67:df:bc:2e:1e:aa:a5:df:42:1a:2b:db:10:8f:5f:ec:ae:a3:
38:79:59:4b:ad:1d:3c:57:9c:e3:20:02:5a:84:2e:46:b3:b6:
ee:8d:68:07:b1:8e:7d:0b:d5:6d:88:2c:45:67:c6:ae:75:51:
12:62:37:6b:91:8d:fe:0b:d3:75:8b:0e:89:fb:f6:0b:e4:83:
2a:3a:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:56 2025 by rpki-client