Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File: m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier: 1GzJ9J6vR67VrTIESzDzF7/svWRa4OlfPP30QgLHxRQ=
Subject key identifier: 4D:AB:2B:CD:9C:DC:7B:5E:11:D7:D7:1A:4E:02:C8:A8:9E:69:DC:84
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial: 019879ADF49DD8CE1E69A4293EE191F420D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number: 0E04
Signing time: Tue 05 Aug 2025 10:01:40 +0000
Manifest this update: Tue 05 Aug 2025 10:01:40 +0000
Manifest next update: Wed 06 Aug 2025 10:01:40 +0000
Files and hashes: 1: 126M92i4yvgJWpcn8XcIW24xKRw.roa (hash: gvLu6/32Bhn0SToW2HYoFaVXP2rKf3ibNrus5LTj59I=)
2: 2Y-BQWwW7_ggvBXNnc8W9Hw_ByE.roa (hash: JhmK62xSjdy0MLOq5+Y9bNPh5TyhHzNoMKSxAmlyqP4=)
3: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: 46twex0drc8re80x3dZs7+j8bZRWDuPLif0+of8GUFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:f4:9d:d8:ce:1e:69:a4:29:3e:e1:91:f4:20:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Validity
Not Before: Aug 5 10:01:40 2025 GMT
Not After : Aug 6 10:01:40 2025 GMT
Subject: CN=4dab2bcd9cdc7b5e11d7d71a4e02c8a89e69dc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:b6:95:dc:f0:a6:6e:f2:4f:d4:02:2d:19:
48:2f:fd:01:91:14:eb:3d:2e:9b:1e:9a:11:de:d0:
d9:cb:db:3a:5a:6d:93:73:ff:db:91:5b:08:c5:f1:
21:5f:51:8b:99:e2:ff:78:f5:bb:9f:6a:b3:df:f3:
c7:5e:90:40:86:0b:d5:7e:d3:cf:66:50:70:a2:9a:
64:a8:66:37:c9:a6:bf:12:5f:79:f1:9d:0d:76:34:
6c:78:78:aa:79:2a:c2:f0:dc:12:e8:c8:88:e2:33:
17:dd:69:38:6c:93:93:3c:96:4b:be:fe:2a:da:d4:
64:28:47:62:95:1a:99:f0:d3:f3:46:24:59:6d:7a:
22:95:45:1c:17:c2:48:de:2b:db:2e:b7:a9:0a:e0:
3a:e0:73:4d:24:75:ae:c0:8e:3b:11:30:10:5c:aa:
a8:d9:bc:2a:6b:82:a5:70:1c:5b:33:5e:4a:9a:50:
cb:40:0b:b0:4f:74:ca:17:47:8b:7c:6e:10:90:50:
b2:aa:b7:26:01:a5:a1:24:1a:2e:8d:df:d5:85:a4:
3d:bc:65:9d:54:27:ac:cf:af:30:1e:c6:9e:43:d9:
b7:35:f8:1a:c7:d9:82:71:e2:31:e2:9e:eb:1d:d8:
bf:f0:44:11:f4:7c:ac:48:94:24:dd:24:2a:b5:80:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:2B:CD:9C:DC:7B:5E:11:D7:D7:1A:4E:02:C8:A8:9E:69:DC:84
X509v3 Authority Key Identifier:
keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:89:60:16:5d:fa:56:c7:47:21:1f:80:57:f7:58:c9:a5:2a:
03:f4:e0:c4:4c:4b:22:72:3b:86:da:18:66:d8:77:b3:3c:58:
a0:c7:a2:06:77:3f:29:7b:08:a6:d9:52:e8:47:25:ac:84:64:
d4:38:ea:0d:04:15:84:cc:61:5f:14:de:cb:d0:80:11:b4:68:
c0:02:9f:d2:8e:5a:de:22:bd:de:d6:0b:62:da:f9:67:f0:8e:
a9:ec:5d:42:1f:28:90:5a:68:0f:3f:d4:e7:ee:7c:2b:e0:72:
ee:a9:d7:23:5f:05:2d:b5:4e:71:c7:c1:d3:6d:6a:0f:a3:00:
21:0f:00:2d:18:17:32:3c:f7:a3:4d:34:c5:8a:19:57:17:bf:
f8:9a:50:95:97:58:fa:10:cf:10:d6:53:c1:24:bf:35:4b:9a:
71:70:e3:fc:fa:2c:58:e6:0b:66:dd:3d:c8:96:ea:2b:81:87:
b2:67:38:82:f6:e5:cd:62:82:63:ed:8f:63:41:11:33:42:4c:
ce:e8:2c:01:92:92:09:da:9e:39:2a:41:99:3f:9c:34:13:1a:
4f:6a:29:f2:82:01:f0:4f:55:41:f2:28:0c:9b:c8:2c:1e:2d:
39:59:b3:ab:32:85:45:c6:9c:60:ea:24:11:e9:7a:aa:87:75:
95:48:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:26:27 2025 by rpki-client