Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: L+okjcEc/hGRW1Kgk7Rc2O0rzFtULRkl4neaEdDCdTQ=
Subject key identifier: EC:0B:D4:F1:35:E8:FB:CE:DB:45:53:94:F9:D0:80:53:82:EC:8C:58
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 01989E957BD2315E8BC3233EFD21B9F1928C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 132C
Signing time: Tue 12 Aug 2025 14:00:53 +0000
Manifest this update: Tue 12 Aug 2025 14:00:53 +0000
Manifest next update: Wed 13 Aug 2025 14:00:53 +0000
Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: 4srSHcX3p3Ne+ndSeHlQUpvHVrWmlpkStAHGOsWZapI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:7b:d2:31:5e:8b:c3:23:3e:fd:21:b9:f1:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Aug 12 14:00:53 2025 GMT
Not After : Aug 13 14:00:53 2025 GMT
Subject: CN=ec0bd4f135e8fbcedb455394f9d0805382ec8c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:32:92:de:3d:c0:2f:8e:3e:1a:d5:c3:bd:
03:c1:6d:ca:10:33:1c:4e:7b:60:f2:07:f4:03:89:
ee:32:4e:1d:58:78:8f:fb:0d:d5:31:48:eb:e1:3b:
a3:ad:f8:47:f4:6f:b9:4b:80:a4:39:3a:08:62:49:
72:24:1c:6d:58:9c:9b:64:30:f6:73:a1:f3:91:ee:
31:17:fc:97:35:54:18:0e:40:c7:a6:f0:53:e0:86:
23:61:7b:48:53:8b:7d:4f:06:a0:04:c6:a1:c0:a7:
7a:20:e5:fd:3f:ae:81:08:2d:90:bd:38:32:49:30:
0a:d0:38:ea:fd:92:e8:06:87:5c:16:31:fe:d3:27:
62:46:67:93:ab:3a:69:b9:af:98:54:1a:57:21:4c:
4f:1f:0f:74:e2:62:c8:25:f9:e5:d2:5e:6b:0e:70:
8a:65:7c:e0:bf:f9:4a:63:fd:ad:5e:b8:a5:52:f5:
9f:41:3f:f4:63:1e:b7:36:8b:c1:fc:cf:c7:e1:96:
e1:75:05:b6:42:03:62:ba:3f:b8:26:7e:67:73:5e:
a5:e7:62:97:50:7c:87:c1:13:36:c2:06:20:56:4e:
66:93:ce:25:52:2c:a4:11:e3:62:40:62:a1:47:df:
40:76:45:d8:14:6f:91:d3:00:78:d6:3c:61:3e:3e:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:D4:F1:35:E8:FB:CE:DB:45:53:94:F9:D0:80:53:82:EC:8C:58
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:60:39:d7:e7:32:10:97:3f:ea:ab:39:4d:8c:a5:3c:61:
ba:64:21:6a:5e:29:fb:0c:4a:c4:6c:1a:88:22:37:0c:a3:8a:
f5:48:37:fd:e4:27:f3:1b:3d:32:1c:da:08:b2:55:d4:51:a8:
29:e5:a4:78:a5:76:1d:c0:2c:0a:4a:51:25:43:38:8a:16:5c:
db:c7:b2:10:e9:85:cb:c1:d5:03:57:ba:3b:c9:56:fd:40:50:
81:3c:48:39:c1:47:35:2a:4f:19:79:05:2a:a0:c4:69:10:6c:
92:83:b3:3f:5e:a6:83:af:d6:d5:7d:30:87:93:f1:78:48:20:
4f:78:de:6a:b6:87:62:8b:12:e2:b5:04:f3:31:cf:a7:f7:ea:
aa:ec:cd:db:b5:79:68:4c:41:48:e3:2f:f3:14:6f:2b:e1:96:
54:ff:a5:99:40:6e:0e:6b:1d:04:48:6c:43:ed:7c:ee:6a:3c:
69:f4:f9:be:33:e9:08:e8:b6:00:8c:33:1c:e7:f2:07:6d:f2:
38:8b:74:d8:fb:3a:95:04:fa:d4:2f:9d:db:4c:77:4b:cb:3c:
34:c8:87:39:ec:ef:77:7c:57:3a:2a:cd:8a:ee:c1:50:31:2f:
2d:76:dc:47:f8:90:b3:b2:29:09:07:b3:0d:2d:16:92:7d:32:
39:b2:f7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:05 2025 by rpki-client