Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File: m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier: X2RLXAnbKsyE6Xu7ryvtIDAPDFLJIsQreWAMqy8hmNc=
Subject key identifier: E9:FC:2A:BB:AB:03:34:A0:47:BB:3F:BE:37:98:BD:7D:20:CF:12:FF
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial: 019893A45DFE7D292D5EF8DFB6BBC9D4273C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number: 0CA8
Signing time: Sun 10 Aug 2025 11:01:19 +0000
Manifest this update: Sun 10 Aug 2025 11:01:19 +0000
Manifest next update: Mon 11 Aug 2025 11:01:19 +0000
Files and hashes: 1: QNMd7fYlDbTeyuBK16mSq7qfSLc.roa (hash: Uvn5WU7449r2QlDZIybO/+JxR3wsRR3AoUBb6n7OQ44=)
2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: yjBilYf1FiKqN8tGqDGx2REaEFAO8CCHsAbukOaBzyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:5d:fe:7d:29:2d:5e:f8:df:b6:bb:c9:d4:27:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Validity
Not Before: Aug 10 11:01:19 2025 GMT
Not After : Aug 11 11:01:19 2025 GMT
Subject: CN=e9fc2abbab0334a047bb3fbe3798bd7d20cf12ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:f5:b7:ca:9f:9d:42:23:92:f0:95:8e:f8:
60:82:f2:84:c0:7a:06:97:98:20:ea:eb:d6:7e:7d:
96:8d:06:4f:41:a7:08:b7:bc:86:36:96:ca:e2:18:
42:01:57:d5:77:70:9d:46:a0:76:eb:33:89:65:ff:
9f:3f:07:8c:6e:1f:fb:ea:f1:73:71:8c:85:94:5d:
59:f1:92:a5:84:44:dd:42:fa:a1:3d:df:45:96:60:
c7:94:91:7f:9a:20:8f:8e:ba:6c:57:3e:8b:e1:23:
14:07:52:a9:fd:f4:50:4f:37:8b:5a:38:12:26:25:
40:04:44:8b:07:4a:6a:1d:df:4e:cc:73:c6:e7:61:
9a:fa:0a:5f:6f:e5:df:45:db:15:3f:e5:b0:88:e3:
38:97:82:b0:41:ce:28:1c:90:26:a5:af:1f:06:fc:
5b:a4:23:62:26:8a:93:3b:22:04:ff:a8:a4:33:3f:
99:9b:bb:a1:5b:57:c2:de:6f:47:53:2a:e5:84:26:
a0:b9:e3:cb:4c:d0:64:15:dd:a4:7c:ad:2c:dc:31:
e1:94:c5:c2:4f:c4:a1:08:7e:96:37:f1:ed:56:79:
a0:8b:46:98:50:2c:42:32:f8:e6:04:df:af:57:d8:
b9:5d:89:d9:26:09:9d:c9:9d:3c:55:dd:e4:a6:b3:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FC:2A:BB:AB:03:34:A0:47:BB:3F:BE:37:98:BD:7D:20:CF:12:FF
X509v3 Authority Key Identifier:
keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:48:cf:88:fc:db:b0:44:1e:e6:51:34:ca:0e:d1:91:b9:d4:
f4:56:4d:77:03:5f:4c:c2:da:3f:b0:23:47:28:ad:0a:bd:f6:
93:e6:21:f4:63:c8:29:2d:21:2f:44:24:d6:26:44:59:a4:b9:
83:70:4a:8e:04:50:36:12:79:6f:12:bf:d2:6f:ad:2b:ce:c3:
ac:71:2e:81:21:f1:09:96:82:c3:96:94:75:09:f7:00:5c:d3:
b8:4d:19:1c:6e:93:3b:77:7a:e8:1b:c8:14:31:b1:67:83:4e:
e3:eb:d2:d2:ac:85:74:dd:0e:9a:95:77:d4:53:1a:e6:fc:93:
2e:5e:be:3a:18:a9:df:6f:fb:24:2c:33:ea:c5:f8:1e:6c:03:
97:02:92:df:5f:95:8f:1d:45:5d:40:ef:3d:bd:3b:b1:11:c3:
98:e9:05:04:54:ae:9d:6b:83:80:6b:db:87:9b:8a:63:ec:a9:
cc:2e:6d:e0:b1:e4:c2:43:61:7e:81:d7:bc:ce:6a:64:66:38:
48:80:b6:a9:f2:35:43:74:c0:af:e3:72:50:29:c2:f5:a1:8b:
55:60:17:60:5f:b6:05:eb:f3:d4:fb:20:16:0b:c4:71:59:c7:
2b:1c:68:3b:e0:fc:a8:4c:fa:e3:c5:60:d4:b3:64:0f:1d:b4:
3f:05:dc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:28 2025 by rpki-client